$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9999d1-b4ac-325f-9815-e7468b499fee.roa File: 4c9999d1-b4ac-325f-9815-e7468b499fee.roa (raw, json) Hash identifier: idqHrenyiB+hl1dSpYFZTd4npcJDqCkMPb7R+kA35JI= Subject key identifier: 51:92:74:55:A2:30:53:8E:23:5D:A7:5C:DA:F7:97:06:9D:B0:CA:A3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA6750B92EA0C8663FA1F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9999d1-b4ac-325f-9815-e7468b499fee.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396603 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:75:0b:92:ea:0c:86:63:fa:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=930d7f87-3677-48b4-90d0-6f293a949c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:47:70:ac:53:3b:43:bb:08:9f:e4:29:a5: d0:4e:91:2a:0e:19:d9:1a:66:b5:d8:6b:ff:b3:90: 2e:a6:3a:4b:d6:ec:23:c4:d0:9a:33:51:4e:51:ab: 88:a6:be:0a:d0:3b:08:e4:48:19:b3:3a:79:a6:3d: 77:20:27:28:ab:ae:c2:83:64:70:f5:da:8a:b2:d7: 51:cf:eb:b8:3b:58:27:a0:3e:ec:39:dc:7c:95:6e: c9:70:a4:75:0a:29:37:af:a4:c7:24:a1:78:45:d5: 90:b6:f5:11:65:49:75:3a:33:ef:27:3d:28:a9:46: 0e:71:db:21:65:05:0c:56:f0:cc:80:c3:c1:30:d6: 50:91:bb:07:4c:67:20:7e:33:1c:a7:b4:0e:6f:17: 2f:bb:02:b6:bf:b3:df:30:ea:12:61:67:ca:a3:84: 41:ba:4d:15:7d:28:d6:88:a5:91:99:5e:10:73:be: bc:58:ff:bb:97:4b:c2:fc:2b:33:c0:e1:a1:ea:89: 6b:39:82:48:42:8c:4d:d9:08:8e:1f:41:92:ce:3e: 9e:80:98:1e:06:45:ae:10:9e:c5:6b:46:cc:bb:d9: 63:5f:61:46:95:2e:09:86:0e:40:21:40:93:8c:4f: 2e:f4:2a:9f:92:dd:eb:b7:41:2b:fb:2e:54:e8:5d: 0e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:92:74:55:A2:30:53:8E:23:5D:A7:5C:DA:F7:97:06:9D:B0:CA:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9999d1-b4ac-325f-9815-e7468b499fee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:14:aa:db:0f:14:aa:c8:10:e3:cf:87:21:91:48:d8:38:a4: 9f:8e:8c:2c:d7:34:e9:86:fb:0d:57:21:7a:5e:0d:51:b7:0c: 60:7a:24:c0:13:4f:76:92:4c:4c:f2:1c:5f:61:87:97:3a:cd: 5e:72:7e:cb:48:b2:6d:46:f2:da:3b:4e:b7:7c:33:42:3d:f8: 3e:36:cc:d9:ae:16:eb:2e:2d:a3:b3:25:98:a5:c1:5b:37:65: f2:fa:fb:2c:29:ae:13:ec:cd:88:27:e6:21:f1:f3:4c:e7:c3: ef:d3:26:de:c0:fa:b5:bc:37:c6:9c:82:b3:b1:e2:80:2e:25: 08:f9:65:bf:76:6a:b5:16:4d:d5:f1:38:ae:73:5f:73:de:56: 40:e9:4a:77:b3:bd:3c:85:ef:c4:40:5d:c9:e9:83:0e:00:37: 89:2c:a3:5c:78:6c:dd:cb:bc:c4:39:b7:28:de:63:2f:9a:e8: a2:37:b2:c3:38:b8:cb:b6:d8:10:0c:b2:d6:89:aa:be:68:ba: 50:00:7c:98:78:4b:e3:66:f1:af:26:6c:a5:ff:f6:fc:cc:7d: d9:ae:41:a1:3e:65:c1:0f:f1:fd:4f:20:d7:e5:50:97:12:14: 1d:02:ec:08:29:a5:67:1b:47:7f:8d:fb:d7:69:77:47:52:9b: 8e:24:48:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpnULkuoMhmP6HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk OTMwZDdmODctMzY3Ny00OGI0LTkwZDAtNmYyOTNhOTQ5Yzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgBHcKxTO0O7CJ/kKaXQTpEqDhnZGma12Gv/ s5AupjpL1uwjxNCaM1FOUauIpr4K0DsI5EgZszp5pj13ICcoq67Cg2Rw9dqKstdR z+u4O1gnoD7sOdx8lW7JcKR1Cik3r6THJKF4RdWQtvURZUl1OjPvJz0oqUYOcdsh ZQUMVvDMgMPBMNZQkbsHTGcgfjMcp7QObxcvuwK2v7PfMOoSYWfKo4RBuk0VfSjW iKWRmV4Qc768WP+7l0vC/CszwOGh6olrOYJIQoxN2QiOH0GSzj6egJgeBkWuEJ7F a0bMu9ljX2FGlS4Jhg5AIUCTjE8u9Cqfkt3rt0Er+y5U6F0OWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGSdFWiMFOOI12nXNr3lwadsMqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGM5OTk5ZDEtYjRhYy0z MjVmLTk4MTUtZTc0NjhiNDk5ZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQUqtsPFKrIEOPPhyGRSNg4pJ+OjCzXNOmG+w1XIXpeDVG3DGB6JMAT T3aSTEzyHF9hh5c6zV5yfstIsm1G8to7Trd8M0I9+D42zNmuFusuLaOzJZilwVs3 ZfL6+ywprhPszYgn5iHx80znw+/TJt7A+rW8N8acgrOx4oAuJQj5Zb92arUWTdXx OK5zX3PeVkDpSnezvTyF78RAXcnpgw4AN4kso1x4bN3LvMQ5tyjeYy+a6KI3ssM4 uMu22BAMstaJqr5oulAAfJh4S+Nm8a8mbKX/9vzMfdmuQaE+ZcEP8f1PINflUJcS FB0C7AgppWcbR3+N+9dpd0dSm44kSEU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:05 2025 by rpki-client