$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad6667d5-0061-3d62-88b5-8f97fe98a193.roa File: ad6667d5-0061-3d62-88b5-8f97fe98a193.roa (raw, json) Hash identifier: 6bHMjlCSzOKIrdTnnvHWutCF5FaLz2xVlEhoLLBhkfY= Subject key identifier: 6B:29:2D:FD:46:D0:00:4C:15:38:79:64:C4:0B:8B:FC:84:87:9D:F4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E25C58E8FE3844E2BA30 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad6667d5-0061-3d62-88b5-8f97fe98a193.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397240 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e2:5c:58:e8:fe:38:44:e2:ba:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=2396c51b-ecc5-4baa-ab37-f3cd4b13ff94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:4e:9b:1e:8d:44:af:75:da:a8:d0:f2:c0: 00:b6:ab:d9:fe:9c:c5:09:86:4f:66:ab:1c:dd:71: 41:7f:e6:6a:a3:ad:e1:de:76:8d:fe:55:30:99:f8: b5:8a:36:56:13:4e:d6:a8:d1:bc:01:e6:b7:7a:b6: b2:9e:cd:7a:5f:c1:07:7e:87:c5:78:91:49:6b:2f: 00:b4:9b:01:82:37:af:a3:e0:c4:9e:4c:77:56:62: c7:d3:cc:5b:bd:41:c2:b2:9a:90:d4:91:07:c3:5b: 43:a6:1e:85:90:2d:aa:2c:be:71:8e:dc:e0:19:ac: bb:52:8b:09:42:bd:d9:cf:1b:3b:30:7a:8f:76:bb: 30:5d:0f:71:67:3b:fa:af:98:c1:f1:5e:64:0d:c0: ac:8e:49:fd:f7:be:28:61:c8:c1:8a:e9:86:d7:ef: 29:8e:d7:43:d2:ab:aa:5e:c7:c1:80:c2:3a:e7:a3: 7c:25:1c:bd:c3:81:81:4d:f2:db:ca:33:fe:c7:cf: b7:75:35:b8:fa:8e:0c:48:0e:4b:f0:6a:fa:38:1d: cf:d8:d1:6d:be:d2:15:5d:e4:3d:f6:54:17:56:97: 6e:80:46:3f:79:f4:08:a8:29:79:f2:60:fd:92:f3: 94:57:90:9a:8f:c2:86:ba:fa:11:20:57:29:bb:9b: ca:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:29:2D:FD:46:D0:00:4C:15:38:79:64:C4:0B:8B:FC:84:87:9D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad6667d5-0061-3d62-88b5-8f97fe98a193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:44:9e:38:3f:50:d1:12:2a:5a:c8:9b:54:49:ad:c4:c8:f3: ea:3b:ef:4e:d9:ba:d2:f0:1e:07:cd:1a:c2:ea:51:95:11:26: 73:a9:cd:09:7d:cc:c0:6f:26:f4:97:42:fa:ce:7c:80:70:fe: 87:f8:eb:49:92:68:9c:9d:a1:cc:d6:3e:08:3c:54:c7:bb:90: fb:d3:f0:e5:cb:9f:e5:46:d7:09:c0:b6:03:50:29:77:44:44: e3:bf:05:66:c1:b9:44:f5:54:fe:55:f0:7b:32:34:1a:b1:91: 3c:18:81:27:f1:3d:15:0a:94:3d:52:1e:04:2e:32:b3:52:af: 63:67:8e:2b:21:2e:e5:ab:b8:8c:e1:d6:80:c1:ef:8f:94:e5: 22:85:b3:bc:7e:8b:45:d6:f1:45:3f:66:b9:29:7c:cc:57:9c: 78:34:3e:de:ae:87:28:3a:f3:1b:ea:ed:c0:12:d9:82:b8:27: f5:ff:06:01:c1:7c:52:f0:cf:88:06:12:2c:90:c5:3f:4c:ef: 21:4c:22:bc:5b:ef:4f:1d:02:c9:17:6c:de:8e:8d:35:3d:34: d7:fd:ab:2b:2d:49:47:b9:c7:df:e6:2c:ab:29:80:0d:24:83: 4e:9f:c6:25:3c:27:66:f6:31:4f:25:0d:34:70:80:5b:ad:d6: 72:67:d0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eJcWOj+OETiujAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjM5NmM1MWItZWNjNS00YmFhLWFiMzctZjNjZDRiMTNmZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxpOmx6NRK912qjQ8sAAtqvZ/pzFCYZPZqsc 3XFBf+Zqo63h3naN/lUwmfi1ijZWE07WqNG8Aea3erayns16X8EHfofFeJFJay8A tJsBgjevo+DEnkx3VmLH08xbvUHCspqQ1JEHw1tDph6FkC2qLL5xjtzgGay7UosJ Qr3Zzxs7MHqPdrswXQ9xZzv6r5jB8V5kDcCsjkn9974oYcjBiumG1+8pjtdD0quq XsfBgMI656N8JRy9w4GBTfLbyjP+x8+3dTW4+o4MSA5L8Gr6OB3P2NFtvtIVXeQ9 9lQXVpdugEY/efQIqCl58mD9kvOUV5Caj8KGuvoRIFcpu5vKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGspLf1G0ABMFTh5ZMQLi/yEh530MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWQ2NjY3ZDUtMDA2MS0z ZDYyLTg4YjUtOGY5N2ZlOThhMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBEnjg/UNESKlrIm1RJrcTI8+o7707ZutLwHgfNGsLqUZURJnOpzQl9 zMBvJvSXQvrOfIBw/of460mSaJydoczWPgg8VMe7kPvT8OXLn+VG1wnAtgNQKXdE ROO/BWbBuUT1VP5V8HsyNBqxkTwYgSfxPRUKlD1SHgQuMrNSr2NnjishLuWruIzh 1oDB74+U5SKFs7x+i0XW8UU/ZrkpfMxXnHg0Pt6uhyg68xvq7cAS2YK4J/X/BgHB fFLwz4gGEiyQxT9M7yFMIrxb708dAskXbN6OjTU9NNf9qystSUe5x9/mLKspgA0k g06fxiU8J2b2MU8lDTRwgFut1nJn0Go= -----END CERTIFICATE-----Generated at Mon Oct 20 06:33:34 2025 by rpki-client