$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/387b4bb1-04df-3979-bf6b-6abb3abf7138.roa File: 387b4bb1-04df-3979-bf6b-6abb3abf7138.roa (raw, json) Hash identifier: cO30q8OXIQ2M5A0bZg41dKAcgYvF9ElsUHSKJe2QOu0= Subject key identifier: 03:20:FE:ED:F6:82:10:D6:B1:41:99:34:8F:D4:95:2E:92:27:12:43 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E1C269CE78F67A3FE300 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/387b4bb1-04df-3979-bf6b-6abb3abf7138.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397231 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e1:c2:69:ce:78:f6:7a:3f:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=9cca5565-cdab-448e-b003-36bbfe9f426a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:43:26:85:13:38:aa:72:92:e2:fa:52:ab:da: f2:b8:d7:f4:ea:fa:e8:2d:ed:d9:63:64:6b:bc:78: 5e:54:72:21:18:a6:4d:c5:86:38:8e:01:1d:3c:8d: dc:ab:40:e2:c5:28:61:84:fc:0c:0b:7d:34:72:f5: eb:85:a8:10:59:2c:3b:9f:9e:39:d8:ac:5f:e5:ad: 58:64:5d:1a:0e:a3:4b:11:0a:c4:f4:26:65:c2:0b: 2f:9c:be:c9:2a:c3:90:c3:75:34:7d:3f:82:22:35: 68:1b:1c:ee:59:26:cd:5a:42:b2:ad:70:28:78:cb: 3e:8a:4e:4a:5b:d1:e8:4b:82:16:67:5f:28:14:94: e3:9b:58:23:67:6c:cd:b8:c4:c5:29:ae:26:4b:ca: 70:77:6f:7b:4f:5b:96:db:5c:48:53:8e:b8:fb:fe: ef:1a:29:c4:71:29:89:82:ed:27:9a:5d:ca:ab:0b: a3:90:1e:0b:84:a8:50:ea:c9:4b:9c:e6:ab:c6:cb: 70:b4:6c:e1:1b:37:1b:c1:25:84:44:f5:49:39:68: 1c:67:4f:18:bb:43:aa:bd:21:e4:a0:1e:e1:b3:16: a2:51:d7:a3:0e:ce:7c:af:a8:bb:30:6b:7b:73:ac: 8a:28:0e:44:b2:63:b6:3c:3e:f6:d1:be:04:26:5f: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:20:FE:ED:F6:82:10:D6:B1:41:99:34:8F:D4:95:2E:92:27:12:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/387b4bb1-04df-3979-bf6b-6abb3abf7138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:33:bb:a8:3e:bd:d3:0f:e0:c7:56:59:a2:c9:bb:47:f1:06: 76:d5:cb:d4:cd:5c:00:a7:6a:5d:6e:7f:09:c2:60:78:9c:8a: 9a:7f:ee:de:f2:61:59:19:93:fa:6e:58:dd:3f:62:14:15:c6: 95:f9:0d:cf:51:a7:34:9b:82:f9:47:d1:c5:d9:00:cd:86:f9: f7:28:7c:9a:20:c6:5f:73:96:72:a9:41:ac:79:c7:4d:15:5f: 82:07:72:b8:52:72:9d:22:ef:24:b9:db:ab:14:3f:f5:0a:1c: a6:f5:6c:67:23:2a:96:a4:55:28:78:4c:b4:33:6e:73:53:fb: 34:1c:ab:3a:c5:05:31:33:22:72:f9:12:ff:8b:22:24:f0:8c: 76:26:5c:e3:4e:1a:b2:70:9a:16:6d:8d:4c:85:5c:c8:7f:87: b9:e2:e1:d8:65:4b:25:02:1a:ba:f3:1b:34:6b:2c:11:f1:91: c4:0f:a7:b6:99:b8:f6:10:da:0d:34:09:56:b3:04:34:58:68: 19:c1:84:a8:35:7b:d5:37:02:75:fb:22:58:a4:db:13:45:fc: df:51:b4:55:4b:e8:03:1e:34:0e:69:c6:fa:42:dc:08:86:89: c7:68:a7:74:5e:59:68:4b:0e:aa:9f:c8:d0:ce:15:90:77:05: d9:29:e2:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eHCac549no/4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OWNjYTU1NjUtY2RhYi00NDhlLWIwMDMtMzZiYmZlOWY0MjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0MmhRM4qnKS4vpSq9ryuNf06vroLe3ZY2Rr vHheVHIhGKZNxYY4jgEdPI3cq0DixShhhPwMC300cvXrhagQWSw7n5452Kxf5a1Y ZF0aDqNLEQrE9CZlwgsvnL7JKsOQw3U0fT+CIjVoGxzuWSbNWkKyrXAoeMs+ik5K W9HoS4IWZ18oFJTjm1gjZ2zNuMTFKa4mS8pwd297T1uW21xIU464+/7vGinEcSmJ gu0nml3KqwujkB4LhKhQ6slLnOarxstwtGzhGzcbwSWERPVJOWgcZ08Yu0OqvSHk oB7hsxaiUdejDs58r6i7MGt7c6yKKA5EsmO2PD720b4EJl9oJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMg/u32ghDWsUGZNI/UlS6SJxJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzg3YjRiYjEtMDRkZi0z OTc5LWJmNmItNmFiYjNhYmY3MTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYzu6g+vdMP4MdWWaLJu0fxBnbVy9TNXACnal1ufwnCYHicipp/7t7y YVkZk/puWN0/YhQVxpX5Dc9RpzSbgvlH0cXZAM2G+fcofJogxl9zlnKpQax5x00V X4IHcrhScp0i7yS526sUP/UKHKb1bGcjKpakVSh4TLQzbnNT+zQcqzrFBTEzInL5 Ev+LIiTwjHYmXONOGrJwmhZtjUyFXMh/h7ni4dhlSyUCGrrzGzRrLBHxkcQPp7aZ uPYQ2g00CVazBDRYaBnBhKg1e9U3AnX7Ilik2xNF/N9RtFVL6AMeNA5pxvpC3AiG icdop3ReWWhLDqqfyNDOFZB3Bdkp4u4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:08 2025 by rpki-client