$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b981147c-a0e9-3aec-bc7b-91878a067661.roa File: b981147c-a0e9-3aec-bc7b-91878a067661.roa (raw, json) Hash identifier: ajHJblJlAZgkwfaTDI7GPQ6QW5dKAVDw7vd5gI8rd9k= Subject key identifier: 2A:4F:F2:3A:84:7D:54:1D:19:7B:B2:C7:F7:04:B9:B0:9B:A7:EB:5D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E0C423F0FE30B3E29600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b981147c-a0e9-3aec-bc7b-91878a067661.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397217 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e0:c4:23:f0:fe:30:b3:e2:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=c6f9ced3-1d88-431c-974b-4be11a0ff648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:64:21:62:6b:08:65:2d:c3:c6:ec:e5:ae:55: 4f:7a:c0:c1:ed:7c:60:cf:cf:4b:8c:d2:05:89:af: 0d:2f:a3:d7:5e:5c:f5:0a:8b:8d:3d:11:2a:99:08: fd:62:62:55:f4:4a:98:dc:3d:a0:80:5e:3f:e9:45: dd:b1:04:88:c4:31:93:c3:14:a9:48:0b:46:5f:2f: a5:7c:8e:b9:07:4d:5d:81:e2:81:46:8f:d1:9f:38: 71:cf:a3:8f:ac:75:30:7d:9c:d5:4e:65:1b:f5:94: 43:d1:27:29:2b:24:f8:06:db:9b:46:7e:8c:a4:99: 93:d2:d4:1e:11:9e:57:be:10:ff:ac:ef:ac:2e:51: b9:20:ed:78:dd:1d:2f:02:fb:94:ea:09:1d:e8:51: d0:d5:b0:15:ef:25:8f:57:9e:77:af:e6:c1:e7:21: 42:be:0d:54:72:a3:dd:d6:e0:aa:be:a6:85:52:80: 5b:c3:e4:76:29:87:32:af:46:c4:08:00:2c:29:76: af:33:16:1e:94:bf:3e:08:4b:37:fd:49:15:94:36: 3a:fe:bf:36:61:b4:2f:0b:f5:b8:6d:56:ac:2f:49: 66:d8:b5:27:b0:9c:13:23:a6:43:dd:e6:96:62:53: 49:ca:73:ca:0e:56:86:af:c5:66:9d:15:77:87:37: e8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4F:F2:3A:84:7D:54:1D:19:7B:B2:C7:F7:04:B9:B0:9B:A7:EB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b981147c-a0e9-3aec-bc7b-91878a067661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f6:07:e4:3a:f5:22:3d:15:83:03:e0:84:21:51:75:4b:d1: 3a:ee:17:84:af:a5:79:87:1f:ae:5c:c2:2c:a2:77:47:b8:b4: af:6c:30:5a:6f:55:71:b8:ea:90:5b:2c:0d:85:93:2d:2a:da: 20:34:d2:54:2b:b9:e7:e7:0e:c7:6f:0f:86:b2:9b:1d:c8:e0: 3d:f6:36:86:5a:79:68:90:8b:1e:cd:7b:88:f9:c5:4b:46:cd: f4:1d:df:16:89:fc:ef:6f:38:fb:03:9c:22:aa:4e:e6:c2:d5: 39:c4:54:ac:c2:bf:a4:b5:b9:ee:ac:06:91:d0:2e:58:b3:55: 6a:93:6b:eb:f4:1a:60:7f:6e:64:aa:15:ca:13:ab:43:b5:bf: 49:36:73:ed:78:d0:a2:e4:f5:1b:8b:bf:e4:18:84:a0:0b:8e: 42:dc:ee:6c:84:50:59:b8:91:c9:52:58:9b:d3:5d:0b:30:a1: 0a:01:81:dd:76:cf:5d:27:29:dc:27:7a:ca:de:7a:19:0e:2e: cc:dd:c3:38:1b:26:77:35:d6:1c:9c:56:79:fc:d6:ad:6a:10: d1:3c:40:fa:37:3d:32:46:ee:0e:a0:27:ef:25:b2:02:9d:84: 6b:4a:15:0d:1c:8a:78:c5:65:5a:b1:76:40:20:b9:aa:4a:dd: 13:6f:cc:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eDEI/D+MLPilgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzZmOWNlZDMtMWQ4OC00MzFjLTk3NGItNGJlMTFhMGZmNjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGQhYmsIZS3DxuzlrlVPesDB7Xxgz89LjNIF ia8NL6PXXlz1CouNPREqmQj9YmJV9EqY3D2ggF4/6UXdsQSIxDGTwxSpSAtGXy+l fI65B01dgeKBRo/Rnzhxz6OPrHUwfZzVTmUb9ZRD0ScpKyT4BtubRn6MpJmT0tQe EZ5XvhD/rO+sLlG5IO143R0vAvuU6gkd6FHQ1bAV7yWPV553r+bB5yFCvg1UcqPd 1uCqvqaFUoBbw+R2KYcyr0bECAAsKXavMxYelL8+CEs3/UkVlDY6/r82YbQvC/W4 bVasL0lm2LUnsJwTI6ZD3eaWYlNJynPKDlaGr8VmnRV3hzfovQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpP8jqEfVQdGXuyx/cEubCbp+tdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjk4MTE0N2MtYTBlOS0z YWVjLWJjN2ItOTE4NzhhMDY3NjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACX2B+Q69SI9FYMD4IQhUXVL0TruF4SvpXmHH65cwiyid0e4tK9sMFpv VXG46pBbLA2Fky0q2iA00lQruefnDsdvD4aymx3I4D32NoZaeWiQix7Ne4j5xUtG zfQd3xaJ/O9vOPsDnCKqTubC1TnEVKzCv6S1ue6sBpHQLlizVWqTa+v0GmB/bmSq FcoTq0O1v0k2c+140KLk9RuLv+QYhKALjkLc7myEUFm4kclSWJvTXQswoQoBgd12 z10nKdwnesreehkOLszdwzgbJnc11hycVnn81q1qENE8QPo3PTJG7g6gJ+8lsgKd hGtKFQ0cinjFZVqxdkAguapK3RNvzKY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:00 2025 by rpki-client