$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd489e71-600d-3a29-a4ae-0c6ba6a1124e.roa File: fd489e71-600d-3a29-a4ae-0c6ba6a1124e.roa (raw, json) Hash identifier: AXYxOrk9e8/g4F1e54PvDwR4rZp/gvXpn/7DywmEzXM= Subject key identifier: 25:62:80:4B:AC:18:0D:5B:01:28:5A:2F:74:E7:EF:FF:78:DC:93:6C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA675413287948ECA4CA9C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd489e71-600d-3a29-a4ae-0c6ba6a1124e.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396578 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:75:41:32:87:94:8e:ca:4c:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=89b4cac8-29a6-408d-a8cd-732b1864f867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:e2:35:a9:b9:50:ae:55:24:9e:b4:be:de: f3:0e:4c:a8:92:21:e0:9a:06:47:2c:4e:cc:f1:ee: 25:61:ee:aa:14:95:8c:48:5d:e8:a1:b0:76:38:07: 25:d9:c4:8c:32:af:53:54:34:46:3c:59:33:2e:1d: ea:d4:4a:5d:61:ab:e2:8e:7e:84:96:bf:ce:d8:a9: 69:bf:9e:a8:59:04:69:e4:b8:64:2e:a1:e0:ad:19: 97:15:6c:60:c8:79:93:29:7b:4f:90:da:81:37:31: 5f:b2:7b:82:9f:6b:47:07:48:f1:e9:1e:fc:d0:4e: e2:55:eb:7b:94:2a:a5:6a:3b:bc:54:ff:57:e4:9c: 33:cf:69:0b:d5:d5:81:ee:4e:d9:70:1e:23:99:8b: 90:21:00:53:1b:7e:e2:cf:e5:2e:7c:b2:57:4d:8e: 3a:a6:24:d0:33:da:1a:40:2e:8e:55:ab:95:af:cb: 5c:12:24:04:30:36:bb:59:11:ed:cb:04:9e:a5:7f: c5:65:86:18:30:e3:98:15:f3:48:f6:5c:2d:1c:86: 4f:e6:f3:6f:09:ca:c9:ce:08:89:e1:f5:25:31:11: 42:dd:24:7a:2d:55:e8:46:27:91:f9:be:0e:6f:16: 3e:3d:ad:db:96:ac:31:b2:24:d6:7a:94:fb:ff:42: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:62:80:4B:AC:18:0D:5B:01:28:5A:2F:74:E7:EF:FF:78:DC:93:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd489e71-600d-3a29-a4ae-0c6ba6a1124e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:af:d2:2d:e5:b4:eb:93:48:7e:65:fe:a6:08:86:39:30:b4: d1:b6:18:e2:21:f0:ad:bc:86:51:25:da:c7:fd:42:88:d2:8e: eb:62:8f:78:06:90:b6:f5:c5:0b:38:96:bc:e4:0d:c4:0e:06: 71:1b:a0:b6:30:23:66:f7:2d:e1:c4:b6:8a:40:20:c4:b6:97: f2:ad:72:c6:40:59:6c:17:3f:33:e3:6f:0a:7d:7f:ae:db:9c: 4c:f5:0b:82:28:cb:c4:fb:57:11:a8:ff:92:87:54:75:75:7a: c0:27:a6:5a:03:de:a8:3a:15:ea:31:56:b2:d2:f8:4f:94:21: 0e:75:17:a1:98:ea:1c:ac:c6:14:c3:3b:ac:91:04:68:42:61: 96:8b:9c:8f:fa:08:6f:26:b5:6a:9c:6e:e3:ff:2a:ba:f6:cd: c1:f0:1d:7a:dc:d6:f3:7f:4f:6d:a8:aa:52:47:64:86:04:bb: 19:71:ac:18:05:3c:27:e0:0d:16:38:55:a8:6e:a5:51:65:7f: 5d:37:8e:d1:08:c0:67:6e:c3:ab:a8:f0:37:d8:a8:80:5f:4d: a6:a6:47:b7:77:ff:ab:71:f2:3e:f7:20:a9:dc:01:d0:9e:05: 57:8f:b1:b5:22:af:3e:d3:de:11:63:85:6f:09:c6:e3:c3:e1: ff:11:c9:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErMpnVBMoeUjspMqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ODliNGNhYzgtMjlhNi00MDhkLWE4Y2QtNzMyYjE4NjRmODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA7iNam5UK5VJJ60vt7zDkyokiHgmgZHLE7M 8e4lYe6qFJWMSF3oobB2OAcl2cSMMq9TVDRGPFkzLh3q1EpdYavijn6Elr/O2Klp v56oWQRp5LhkLqHgrRmXFWxgyHmTKXtPkNqBNzFfsnuCn2tHB0jx6R780E7iVet7 lCqlaju8VP9X5Jwzz2kL1dWB7k7ZcB4jmYuQIQBTG37iz+UufLJXTY46piTQM9oa QC6OVauVr8tcEiQEMDa7WRHtywSepX/FZYYYMOOYFfNI9lwtHIZP5vNvCcrJzgiJ 4fUlMRFC3SR6LVXoRieR+b4ObxY+Pa3blqwxsiTWepT7/0JCXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCVigEusGA1bAShaL3Tn7/943JNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQ0ODllNzEtNjAwZC0z YTI5LWE0YWUtMGM2YmE2YTExMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0r9It5bTrk0h+Zf6mCIY5MLTRthjiIfCtvIZRJdrH/UKI0o7rYo94 BpC29cULOJa85A3EDgZxG6C2MCNm9y3hxLaKQCDEtpfyrXLGQFlsFz8z428KfX+u 25xM9QuCKMvE+1cRqP+Sh1R1dXrAJ6ZaA96oOhXqMVay0vhPlCEOdRehmOocrMYU wzuskQRoQmGWi5yP+ghvJrVqnG7j/yq69s3B8B163Nbzf09tqKpSR2SGBLsZcawY BTwn4A0WOFWobqVRZX9dN47RCMBnbsOrqPA32KiAX02mpke3d/+rcfI+9yCp3AHQ ngVXj7G1Iq8+094RY4VvCcbjw+H/Ecnk -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:51 2025 by rpki-client