$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5aaa3e31-8308-3002-888f-0318af6a7217.roa File: 5aaa3e31-8308-3002-888f-0318af6a7217.roa (raw, json) Hash identifier: G9IvBmsWxHM7HVZCnpoN+0/nYp+X2lpcEeqP3fJ9cjE= Subject key identifier: BF:C2:F8:B8:D5:03:07:75:AF:42:5A:14:52:D9:9A:7E:54:0E:27:64 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B2FC19F8C1B61BA83EC82B600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5aaa3e31-8308-3002-888f-0318af6a7217.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397218 IP address blocks: 199.7.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:9f:8c:1b:61:ba:83:ec:82:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=52319aec-7afe-49aa-8bce-b04bd93d18dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:b6:fe:5d:56:df:77:56:46:2d:3d:87:76: af:26:f2:fb:7e:fd:d6:0d:00:e4:1a:03:17:26:75: 95:0d:80:d7:aa:12:51:c2:2f:8a:60:b5:3d:a7:75: d7:5a:4a:4e:3c:bf:29:9e:5f:8d:e7:d9:1a:d0:94: d6:70:2d:5e:be:3b:56:36:91:ce:c3:50:a6:1c:0c: 8a:ed:ad:40:c6:9a:4b:11:5a:93:de:d2:97:15:79: 0c:84:b4:38:9a:2c:7d:9d:54:f1:1f:7c:22:c1:0e: 47:f9:d8:a1:ea:ae:85:03:da:05:60:31:87:89:e6: cc:48:fa:fa:ed:13:aa:9b:f6:c9:1e:f5:a3:b7:06: ff:32:1d:c5:fe:68:57:c8:95:90:3f:d6:0f:94:03: 11:70:6d:27:13:2b:66:4b:8e:99:cd:ed:6f:bd:2c: ef:71:f6:d8:9b:dd:b0:c9:1c:55:eb:40:a4:4f:0f: 90:34:50:0e:7a:0e:69:2c:79:5a:c4:9d:27:23:9f: cc:38:23:b9:22:fd:ae:38:cf:32:1d:a3:1a:a4:5f: a0:f8:ca:7f:67:37:ee:c8:19:70:84:ad:d0:c4:d6: f9:6c:65:c9:df:e5:ca:f8:2c:61:8d:7f:dc:77:b0: a3:4b:81:06:81:07:64:8f:e6:15:9d:fa:5f:90:c7: ed:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C2:F8:B8:D5:03:07:75:AF:42:5A:14:52:D9:9A:7E:54:0E:27:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5aaa3e31-8308-3002-888f-0318af6a7217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6e:29:a7:c3:1a:03:d8:27:8f:38:a9:69:d9:eb:c6:11:41: 49:1f:bf:f4:b6:ff:f0:1e:7f:d8:f4:32:91:41:f3:f6:01:df: 21:0a:60:98:c3:1b:8f:1b:80:25:f2:88:f1:e9:02:d3:23:19: 4d:48:53:3e:4a:c6:2a:52:d2:9e:7e:3d:81:0f:d3:cd:d8:cb: d0:91:ec:5b:79:ac:ec:e3:75:0b:08:3d:6d:5d:6c:ee:2b:bd: e1:d8:53:40:07:2d:c3:72:d4:10:9f:e2:b2:55:51:5b:af:63: 03:76:01:e3:15:89:09:fc:81:33:7a:93:e5:77:df:04:24:3e: 0a:75:67:80:44:4a:ee:44:c4:cf:11:47:e3:a0:a1:ad:87:c9: 21:62:de:07:2e:ce:3a:c2:69:d5:9f:4f:d3:c8:2c:8e:3a:2d: fe:58:c5:88:93:55:c2:1a:4a:ef:2e:e3:ff:1c:f6:41:cd:fe: 9b:02:6e:c4:89:6f:03:e2:8b:51:6b:a5:6d:f9:ac:05:24:f1: a2:7d:b3:47:61:33:f2:77:c3:cc:ad:fb:79:ed:90:4a:bf:eb: 84:fe:cc:d4:43:1a:45:62:9d:49:b4:a7:a2:16:eb:d9:1f:7e: df:c2:fa:d3:f2:00:db:09:7c:33:2c:06:fa:9f:87:a5:23:ad: ca:5d:4a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZ+MG2G6g+yCtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NTIzMTlhZWMtN2FmZS00OWFhLThiY2UtYjA0YmQ5M2QxOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm22/l1W33dWRi09h3avJvL7fv3WDQDkGgMX JnWVDYDXqhJRwi+KYLU9p3XXWkpOPL8pnl+N59ka0JTWcC1evjtWNpHOw1CmHAyK 7a1AxppLEVqT3tKXFXkMhLQ4mix9nVTxH3wiwQ5H+dih6q6FA9oFYDGHiebMSPr6 7ROqm/bJHvWjtwb/Mh3F/mhXyJWQP9YPlAMRcG0nEytmS46Zze1vvSzvcfbYm92w yRxV60CkTw+QNFAOeg5pLHlaxJ0nI5/MOCO5Iv2uOM8yHaMapF+g+Mp/ZzfuyBlw hK3QxNb5bGXJ3+XK+CxhjX/cd7CjS4EGgQdkj+YVnfpfkMft1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/C+LjVAwd1r0JaFFLZmn5UDidkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWFhYTNlMzEtODMwOC0z MDAyLTg4OGYtMDMxOGFmNmE3MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEluKafDGgPYJ484qWnZ68YRQUkfv/S2//Aef9j0MpFB8/YB3yEKYJjD G48bgCXyiPHpAtMjGU1IUz5KxipS0p5+PYEP083Yy9CR7Ft5rOzjdQsIPW1dbO4r veHYU0AHLcNy1BCf4rJVUVuvYwN2AeMViQn8gTN6k+V33wQkPgp1Z4BESu5ExM8R R+Ogoa2HySFi3gcuzjrCadWfT9PILI46Lf5YxYiTVcIaSu8u4/8c9kHN/psCbsSJ bwPii1FrpW35rAUk8aJ9s0dhM/J3w8yt+3ntkEq/64T+zNRDGkVinUm0p6IW69kf ft/C+tPyANsJfDMsBvqfh6UjrcpdSkE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:58:10 2025 by rpki-client