$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52ea225-af70-36c9-8151-034c4cf784fa.roa File: d52ea225-af70-36c9-8151-034c4cf784fa.roa (raw, json) Hash identifier: JTTxtsC31sSQBnJr6HRxMARfExX4iz9pyR6C25oVXE4= Subject key identifier: 67:2F:7D:98:7B:50:25:CA:AA:98:3E:F8:A1:47:C1:80:91:B8:D6:F4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA6871CBE9C929491CBBC40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52ea225-af70-36c9-8151-034c4cf784fa.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396593 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:87:1c:be:9c:92:94:91:cb:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=0e4f42a0-2b59-4eab-8b7d-f0343c615564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cf:14:ae:7a:1d:c5:7d:04:23:0a:d8:6d:21: 6a:5c:f7:8f:b1:b1:82:d2:a1:1f:b1:c8:a4:8b:d8: 28:0f:2e:58:eb:e7:81:78:77:e5:4a:b9:4b:2c:5b: c8:00:44:cb:b5:7c:9a:fa:06:91:67:74:ce:c9:c0: fd:ec:17:3a:00:01:de:41:e3:57:57:14:fa:d6:e8: 58:8a:ea:41:e7:b0:39:ec:9d:8b:1a:0e:d9:43:55: a1:4f:52:ce:3a:4b:cc:da:0f:e5:75:5e:72:37:72: cf:89:ef:01:f6:69:44:a6:49:bc:0a:98:4e:67:49: 4d:33:e5:ea:c0:00:99:dd:0c:85:f0:0a:77:26:81: ea:1d:98:f0:83:d1:bf:1c:4f:a3:5f:97:9c:11:9b: 40:84:c6:c2:bf:79:88:34:ce:5e:0e:39:9a:a7:3f: ce:92:68:88:a6:f5:79:2d:c4:5f:f0:ec:92:00:29: 93:49:68:21:14:d5:96:39:df:63:2c:a0:45:d7:fd: 41:40:ee:80:40:57:4b:a7:56:70:63:97:06:9e:53: 00:c0:ec:2f:8e:70:3b:ba:fa:02:67:b4:9b:c9:be: e9:28:17:14:41:72:20:d5:b5:f0:9d:2d:4c:36:7d: 4e:66:5e:50:d2:23:28:b4:23:b2:12:d8:3a:24:7c: 7c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2F:7D:98:7B:50:25:CA:AA:98:3E:F8:A1:47:C1:80:91:B8:D6:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52ea225-af70-36c9-8151-034c4cf784fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e3:82:44:d5:36:00:b2:88:b6:47:49:b6:a6:a6:f8:f2:27: dc:11:76:8d:95:1f:11:2b:ee:24:6f:3c:fb:c7:2f:c2:b0:bc: 8b:97:12:0c:1a:a9:fa:91:33:66:d1:a8:90:f9:8a:32:b6:11: 3b:89:b5:9e:4f:fa:e7:86:4c:de:4a:c4:dc:75:a9:7c:11:13: f7:e8:b9:91:2b:0a:46:b6:c4:61:43:b7:a8:08:01:f1:3b:9f: e7:2d:89:34:af:e9:1d:c4:00:db:13:0c:87:04:c9:ff:bf:68: 60:a8:2e:d0:64:b3:ed:58:79:44:a4:87:24:9c:38:75:6c:d5: 8e:5a:2c:23:9f:74:59:34:c4:70:16:79:d6:13:d3:ff:9d:a2: 55:bf:c4:83:e2:84:bf:a9:27:82:52:34:88:8d:a4:88:c3:bf: ce:90:01:00:fe:e1:99:a9:46:3e:e5:b5:fb:7d:55:89:7a:78: 81:34:35:81:70:85:6f:31:b0:ba:43:46:ad:b8:c0:d4:ff:98: 1a:a8:63:78:b9:f8:77:b0:95:50:bf:ee:47:e0:ed:64:09:d2: 11:5f:64:9d:b5:7e:db:fe:84:d4:84:c2:3d:c2:4d:a9:59:fa: 35:cf:83:a5:d9:1e:cc:ff:5f:d5:16:40:8e:bf:01:01:06:bc: ab:fc:2e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpoccvpySlJHLvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MGU0ZjQyYTAtMmI1OS00ZWFiLThiN2QtZjAzNDNjNjE1NTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs8UrnodxX0EIwrYbSFqXPePsbGC0qEfscik i9goDy5Y6+eBeHflSrlLLFvIAETLtXya+gaRZ3TOycD97Bc6AAHeQeNXVxT61uhY iupB57A57J2LGg7ZQ1WhT1LOOkvM2g/ldV5yN3LPie8B9mlEpkm8CphOZ0lNM+Xq wACZ3QyF8Ap3JoHqHZjwg9G/HE+jX5ecEZtAhMbCv3mINM5eDjmapz/OkmiIpvV5 LcRf8OySACmTSWghFNWWOd9jLKBF1/1BQO6AQFdLp1ZwY5cGnlMAwOwvjnA7uvoC Z7Sbyb7pKBcUQXIg1bXwnS1MNn1OZl5Q0iMotCOyEtg6JHx8WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcvfZh7UCXKqpg++KFHwYCRuNb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDUyZWEyMjUtYWY3MC0z NmM5LTgxNTEtMDM0YzRjZjc4NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfjgkTVNgCyiLZHSbampvjyJ9wRdo2VHxEr7iRvPPvHL8KwvIuXEgwa qfqRM2bRqJD5ijK2ETuJtZ5P+ueGTN5KxNx1qXwRE/fouZErCka2xGFDt6gIAfE7 n+ctiTSv6R3EANsTDIcEyf+/aGCoLtBks+1YeUSkhyScOHVs1Y5aLCOfdFk0xHAW edYT0/+dolW/xIPihL+pJ4JSNIiNpIjDv86QAQD+4ZmpRj7ltft9VYl6eIE0NYFw hW8xsLpDRq24wNT/mBqoY3i5+HewlVC/7kfg7WQJ0hFfZJ21ftv+hNSEwj3CTalZ +jXPg6XZHsz/X9UWQI6/AQEGvKv8Lng= -----END CERTIFICATE-----Generated at Sat Aug 23 14:23:26 2025 by rpki-client