$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ff6a521-7fa9-3335-aab7-6b040d6e3a4e.roa File: 3ff6a521-7fa9-3335-aab7-6b040d6e3a4e.roa (raw, json) Hash identifier: x5+OTZto8ERa+VteljVatj6tVydwFdT8A305U7jLuuk= Subject key identifier: 09:A2:BC:93:B5:78:04:80:83:72:8A:E1:6F:89:45:5F:38:5B:0B:EB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA67C8A9B95C7A039A33E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ff6a521-7fa9-3335-aab7-6b040d6e3a4e.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396573 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:7c:8a:9b:95:c7:a0:39:a3:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=dc657a72-9570-4ccc-a68f-583862add1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:af:0b:7b:8b:45:42:06:11:8e:52:01:45: 15:88:52:30:d0:71:d0:47:d4:7e:de:1d:73:92:7c: de:fd:ff:b8:a0:6d:4a:3e:bb:38:45:b5:e4:9c:3e: d3:0a:dd:f1:d4:e9:26:98:84:6a:16:70:75:9b:32: 49:69:21:66:a9:c5:8c:82:d0:19:06:ed:62:44:af: 5b:f5:80:a9:ca:5c:81:db:05:e4:83:d1:7b:c0:60: c6:1c:39:ac:b8:6a:86:6a:23:a7:c1:fb:23:dc:b3: 78:16:28:1c:49:59:e6:74:f0:5d:5a:aa:12:07:47: 56:e8:c4:1b:0f:f9:14:0e:04:21:5e:c6:04:af:1f: 26:0b:10:17:15:c6:59:83:bc:f2:d4:69:29:40:cc: 83:49:f3:f9:2e:88:c2:b5:81:7b:84:37:5e:8c:02: 02:1d:a5:c6:d4:b5:2f:74:32:55:ab:e9:8d:bf:2d: 12:5d:fa:0d:bf:1d:83:61:b3:0b:1b:4a:c3:57:11: 6d:0b:44:99:d6:a9:ef:4e:42:5f:e6:2b:3c:15:c5: 83:1b:7c:c0:64:8e:78:6e:51:3d:22:30:7f:da:69: b0:e9:c1:6d:68:b6:66:29:ff:0b:8d:5a:1c:d0:ad: 86:d5:1f:c5:5f:af:1c:b5:18:03:1a:6f:57:d4:2e: 50:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A2:BC:93:B5:78:04:80:83:72:8A:E1:6F:89:45:5F:38:5B:0B:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ff6a521-7fa9-3335-aab7-6b040d6e3a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a4:6b:06:9c:85:7a:84:5e:36:b7:f5:ad:dd:e9:07:e3:72: c0:3c:ac:63:dc:5d:ce:7d:f6:85:01:74:6f:8a:b0:4e:ea:ac: 8a:50:76:37:b3:0c:6e:5d:cb:61:f6:17:e4:53:98:29:48:16: 7b:23:87:83:07:08:04:9c:ad:a9:56:fe:5d:9d:dc:91:49:69: a2:a3:c1:89:01:e3:70:7b:26:65:45:5b:32:1e:8c:d1:32:b2: 23:99:04:ca:59:df:c8:a7:27:fc:4c:41:1e:4e:64:44:9a:ce: 58:49:35:0c:59:e3:a8:7b:88:0b:07:34:ae:e9:17:c5:5f:4f: 2f:62:27:fc:e3:b1:e5:5a:6b:fc:d6:50:c0:69:82:0c:76:e0: 78:18:22:05:3d:61:73:eb:1b:2a:a3:aa:3d:72:44:c7:b1:29: 7b:ad:f6:19:70:9f:e9:9c:b9:67:36:9e:40:27:52:93:f3:62: 38:76:a6:94:23:be:de:f8:58:f7:6e:6b:9f:74:58:b6:ec:71: 8c:f7:56:dd:4b:00:1b:d6:f0:94:45:f6:f8:44:ad:15:74:37: 8d:ed:e4:2c:92:f9:d2:59:22:da:9b:dc:61:eb:34:ad:f6:e0: da:3c:09:4a:1a:3f:3f:1f:70:fd:d5:95:f4:36:cb:73:64:78: c3:33:94:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpnyKm5XHoDmjPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGM2NTdhNzItOTU3MC00Y2NjLWE2OGYtNTgzODYyYWRkMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaWvC3uLRUIGEY5SAUUViFIw0HHQR9R+3h1z knze/f+4oG1KPrs4RbXknD7TCt3x1OkmmIRqFnB1mzJJaSFmqcWMgtAZBu1iRK9b 9YCpylyB2wXkg9F7wGDGHDmsuGqGaiOnwfsj3LN4FigcSVnmdPBdWqoSB0dW6MQb D/kUDgQhXsYErx8mCxAXFcZZg7zy1GkpQMyDSfP5LojCtYF7hDdejAICHaXG1LUv dDJVq+mNvy0SXfoNvx2DYbMLG0rDVxFtC0SZ1qnvTkJf5is8FcWDG3zAZI54blE9 IjB/2mmw6cFtaLZmKf8LjVoc0K2G1R/FX68ctRgDGm9X1C5QYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmivJO1eASAg3KK4W+JRV84WwvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2ZmNmE1MjEtN2ZhOS0z MzM1LWFhYjctNmIwNDBkNmUzYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6kawachXqEXja39a3d6QfjcsA8rGPcXc599oUBdG+KsE7qrIpQdjez DG5dy2H2F+RTmClIFnsjh4MHCAScralW/l2d3JFJaaKjwYkB43B7JmVFWzIejNEy siOZBMpZ38inJ/xMQR5OZESazlhJNQxZ46h7iAsHNK7pF8VfTy9iJ/zjseVaa/zW UMBpggx24HgYIgU9YXPrGyqjqj1yRMexKXut9hlwn+mcuWc2nkAnUpPzYjh2ppQj vt74WPdua590WLbscYz3Vt1LABvW8JRF9vhErRV0N43t5CyS+dJZItqb3GHrNK32 4No8CUoaPz8fcP3VlfQ2y3NkeMMzlNw= -----END CERTIFICATE-----Generated at Sat Aug 23 13:14:32 2025 by rpki-client