$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ba53ca6-922e-30c6-b38f-80896776f1f8.roa File: 3ba53ca6-922e-30c6-b38f-80896776f1f8.roa (raw, json) Hash identifier: wt6oKfZUfmB4AN1UooKbd00G8wX7ynxs9UDnSr8fKWA= Subject key identifier: E3:D5:E2:D2:40:8A:B5:55:23:2E:0F:BB:4E:51:18:0A:51:93:3C:E0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C37032E3934549921846768 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ba53ca6-922e-30c6-b38f-80896776f1f8.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397228 IP address blocks: 199.7.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:03:2e:39:34:54:99:21:84:67:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=5f93d2b9-74f4-4608-83d7-4a8a9425e44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:a7:cd:4e:c9:9f:36:44:8d:40:04:8b:a1: 89:f6:37:08:b4:86:ac:ca:f8:4e:8e:e6:b1:0a:65: 0c:b5:10:0f:09:93:6c:2a:0d:1b:b5:ad:cd:3d:5f: d9:7c:2f:e2:18:15:60:b2:92:03:a9:6c:98:a7:86: 11:eb:c1:2c:a2:8b:81:63:ad:3d:13:82:0e:26:19: 4c:f5:1e:52:94:f4:db:68:cf:70:a0:da:c4:8d:50: 48:34:26:7c:46:3a:a3:5f:b0:7f:27:56:73:7b:1c: 90:a8:b0:6f:9e:e1:e5:27:ab:2c:fc:ab:65:ee:87: cd:d8:74:ef:4c:3f:70:ed:b6:65:8a:9a:26:26:c2: 2b:85:fb:26:f9:80:30:39:26:dc:9b:2d:00:3d:48: 29:93:46:d4:34:88:95:35:f3:5c:74:85:17:8e:9e: d6:2f:e4:ca:35:eb:90:e6:5a:43:be:cf:e3:66:b9: de:d5:ba:35:97:06:b6:97:71:bd:56:1b:10:f9:b8: ca:be:cd:9f:17:07:19:11:93:74:d8:a8:a8:4d:89: 57:95:55:22:0a:f1:aa:91:6a:3e:37:db:ba:a9:32: 13:b0:0d:21:53:da:11:3e:cc:0f:0b:61:ed:f6:cf: e4:71:e5:bf:aa:5d:d4:c7:6e:86:58:03:1c:c4:5c: b4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D5:E2:D2:40:8A:B5:55:23:2E:0F:BB:4E:51:18:0A:51:93:3C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ba53ca6-922e-30c6-b38f-80896776f1f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4e:c3:1d:66:b0:14:ea:43:f5:27:9a:06:7a:09:d5:7c:e3: 71:35:fe:1d:e0:88:7d:90:0d:ef:e8:f7:af:52:ba:b4:f9:c2: 58:21:67:07:0b:7d:19:32:1a:df:db:c4:3e:90:78:79:72:cf: 85:43:42:9f:d3:e9:6a:36:32:b3:00:f1:a8:94:a6:b4:8a:2a: 33:3d:ee:65:8d:54:12:ec:37:ea:88:ed:13:d3:9f:04:80:53: 44:fe:13:8e:d5:de:7e:16:f0:c7:67:8b:9f:c3:27:2b:15:76: cc:44:f4:cc:bc:c9:39:a8:ac:c4:e0:08:2f:f5:67:a1:20:f1: a7:79:65:b4:47:8d:08:81:fb:9f:e0:ba:06:66:c0:02:23:a2: c1:cf:49:ee:4b:1f:65:9d:d0:f7:a2:a4:ff:16:b1:4d:78:2f: d5:95:1c:f5:1c:78:36:94:14:09:42:59:15:96:1e:ee:80:ee: 3a:10:16:d2:a3:ce:bc:a7:a8:ec:00:de:87:4a:82:97:a2:ff: b3:a8:cd:c7:08:35:9d:8f:6d:ce:87:13:4f:f0:16:79:a0:48: b6:16:d6:ed:80:d9:7b:20:44:84:35:35:9a:53:b8:43:b9:66: 13:37:64:3e:64:d4:c5:9f:b4:0a:9f:4f:0c:b6:8c:7b:76:d8: 34:c3:5f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwMuOTRUmSGEZ2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NWY5M2QyYjktNzRmNC00NjA4LTgzZDctNGE4YTk0MjVlNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsOnzU7JnzZEjUAEi6GJ9jcItIasyvhOjuax CmUMtRAPCZNsKg0bta3NPV/ZfC/iGBVgspIDqWyYp4YR68EsoouBY609E4IOJhlM 9R5SlPTbaM9woNrEjVBINCZ8RjqjX7B/J1ZzexyQqLBvnuHlJ6ss/Ktl7ofN2HTv TD9w7bZlipomJsIrhfsm+YAwOSbcmy0APUgpk0bUNIiVNfNcdIUXjp7WL+TKNeuQ 5lpDvs/jZrne1bo1lwa2l3G9VhsQ+bjKvs2fFwcZEZN02KioTYlXlVUiCvGqkWo+ N9u6qTITsA0hU9oRPswPC2Ht9s/kceW/ql3Ux26GWAMcxFy0rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPV4tJAirVVIy4Pu05RGApRkzzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2JhNTNjYTYtOTIyZS0z MGM2LWIzOGYtODA4OTY3NzZmMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtOwx1msBTqQ/UnmgZ6CdV843E1/h3giH2QDe/o969SurT5wlghZwcL fRkyGt/bxD6QeHlyz4VDQp/T6Wo2MrMA8aiUprSKKjM97mWNVBLsN+qI7RPTnwSA U0T+E47V3n4W8Mdni5/DJysVdsxE9My8yTmorMTgCC/1Z6Eg8ad5ZbRHjQiB+5/g ugZmwAIjosHPSe5LH2Wd0PeipP8WsU14L9WVHPUceDaUFAlCWRWWHu6A7joQFtKj zrynqOwA3odKgpei/7OozccINZ2Pbc6HE0/wFnmgSLYW1u2A2XsgRIQ1NZpTuEO5 ZhM3ZD5k1MWftAqfTwy2jHt22DTDXwo= -----END CERTIFICATE-----Generated at Mon Oct 20 16:54:14 2025 by rpki-client