$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afca4bf6-fd4d-3dbf-963a-682925148d0e.roa File: afca4bf6-fd4d-3dbf-963a-682925148d0e.roa (raw, json) Hash identifier: UdEpSNbiHz0+OQBl5cmIwGNm4apHRfV1BiNn1FFOJqU= Subject key identifier: CF:C2:4A:DC:FA:AF:FE:52:F8:41:91:40:F4:55:DD:9C:90:4F:CE:70 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA6694FC197325FDF87A1E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afca4bf6-fd4d-3dbf-963a-682925148d0e.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 32651 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:69:4f:c1:97:32:5f:df:87:a1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=df4ea7e4-fa9e-4dc8-b2bc-75e63fdbd884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:03:6a:3c:47:50:86:65:9c:f6:44:3d:be: 5f:04:0a:97:19:da:e6:9d:6d:75:3c:36:0f:ef:59: d3:80:a0:59:b7:7e:a6:3e:35:1b:b1:6d:0d:2b:ce: b1:cd:b3:99:c3:2e:21:02:d4:00:5c:79:e0:7a:3a: 02:0d:ce:52:93:22:75:12:41:dd:3b:fc:53:fc:34: d4:d1:81:57:dc:e2:e6:47:27:e6:e9:ac:9c:68:2d: e9:5a:62:b4:63:b3:af:5d:cc:69:32:28:cf:23:42: e6:0f:40:dc:95:73:c2:e2:b8:06:a6:85:ea:ca:c1: b3:4c:55:94:74:93:10:18:21:36:41:84:e9:42:d5: e2:23:15:e5:42:e7:45:3c:2a:0f:24:48:db:cc:3d: b4:da:ff:f1:42:e6:86:47:8b:8a:92:36:fc:04:2c: 4a:4c:e5:4c:f0:bb:70:d2:d5:c5:3c:22:9a:4c:43: e0:81:8e:d1:f6:4f:cf:13:d8:c3:4e:d6:f8:c9:07: a9:ec:31:7e:bf:4b:2e:4b:63:2b:d7:31:e3:77:65: c5:c0:c1:56:8a:c1:2c:29:ce:3a:a9:54:18:be:96: d3:f7:7a:d9:29:41:6e:76:1b:4a:90:0f:6f:3e:60: 55:ef:56:bd:59:98:0b:38:01:26:80:7f:de:10:98: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C2:4A:DC:FA:AF:FE:52:F8:41:91:40:F4:55:DD:9C:90:4F:CE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afca4bf6-fd4d-3dbf-963a-682925148d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:da:c8:9c:df:c3:8b:1f:19:8b:12:53:77:6f:4b:8d:2d:db: 38:dc:79:9e:1e:53:af:54:82:5d:dc:3d:fa:97:e1:d5:80:11: 9e:c9:a4:08:86:a2:f6:09:3f:6f:20:4b:32:f2:79:01:c1:4d: 4d:09:ab:91:ef:a7:f6:41:ff:b7:a6:5a:bf:84:2e:40:95:5b: 19:60:4a:28:6e:ff:da:26:ea:38:b6:1f:0d:21:63:4a:32:65: d5:7c:ec:97:d3:43:c8:34:a1:0d:4d:22:f2:82:c1:6d:d3:9a: e2:66:00:e5:3e:6b:43:3d:10:d9:70:cc:27:82:d9:37:d1:0f: 15:90:58:37:fb:ad:39:22:0d:6b:1b:f9:9b:8c:a3:06:12:21: 5f:87:d3:b7:e2:33:37:e2:e5:28:9a:5b:3e:1b:09:09:2e:a9: f6:dd:28:53:11:65:7a:fc:2f:47:7e:3a:5e:45:b2:59:22:19: 1e:d3:2a:26:2a:71:93:da:a7:a0:b5:f1:da:cc:f4:4b:fa:0f: 16:e1:a0:9f:64:65:be:90:35:ee:5b:00:c8:8b:4d:5b:f5:ab: d2:9d:ac:95:e4:0b:94:38:fe:19:dd:a1:9b:dc:23:00:f6:38: 65:3e:fd:e4:25:9f:cf:02:df:35:7a:e0:79:17:c7:27:96:c6: 74:7d:f3:10 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErMpmlPwZcyX9+HoeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGY0ZWE3ZTQtZmE5ZS00ZGM4LWIyYmMtNzVlNjNmZGJkODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXIDajxHUIZlnPZEPb5fBAqXGdrmnW11PDYP 71nTgKBZt36mPjUbsW0NK86xzbOZwy4hAtQAXHngejoCDc5SkyJ1EkHdO/xT/DTU 0YFX3OLmRyfm6aycaC3pWmK0Y7OvXcxpMijPI0LmD0DclXPC4rgGpoXqysGzTFWU dJMQGCE2QYTpQtXiIxXlQudFPCoPJEjbzD202v/xQuaGR4uKkjb8BCxKTOVM8Ltw 0tXFPCKaTEPggY7R9k/PE9jDTtb4yQep7DF+v0suS2Mr1zHjd2XFwMFWisEsKc46 qVQYvpbT93rZKUFudhtKkA9vPmBV71a9WZgLOAEmgH/eEJj+lwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM/CStz6r/5S+EGRQPRV3ZyQT85wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZjYTRiZjYtZmQ0ZC0z ZGJmLTk2M2EtNjgyOTI1MTQ4ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCX2sic38OLHxmLElN3b0uNLds43HmeHlOvVIJd3D36l+HVgBGeyaQI hqL2CT9vIEsy8nkBwU1NCauR76f2Qf+3plq/hC5AlVsZYEoobv/aJuo4th8NIWNK MmXVfOyX00PINKENTSLygsFt05riZgDlPmtDPRDZcMwngtk30Q8VkFg3+605Ig1r G/mbjKMGEiFfh9O34jM34uUomls+GwkJLqn23ShTEWV6/C9HfjpeRbJZIhke0yom KnGT2qegtfHazPRL+g8W4aCfZGW+kDXuWwDIi01b9avSnayV5AuUOP4Z3aGb3CMA 9jhlPv3kJZ/PAt81euB5F8cnlsZ0ffMQ -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:22 2025 by rpki-client