$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa File: f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa (raw, json) Hash identifier: 96Mu6KxuSFic/GBDthWiYjDDEnvzWEFbttDRSvHao9s= Subject key identifier: 9D:31:C5:39:AB:72:AC:4C:5E:70:1C:A1:FC:48:C5:BC:45:F3:79:8D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B2FC1A05B25F72BC511B670F8 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397229 IP address blocks: 199.7.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:a0:5b:25:f7:2b:c5:11:b6:70:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=9e6051cd-0f4d-4728-bf48-d6ccdc23f80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:35:d8:cc:d8:32:47:20:4a:72:cb:b2:26:64: f7:e6:a8:ee:ce:9b:a0:80:17:df:69:4b:77:42:bb: f0:5d:5c:54:25:c7:2d:35:87:4f:06:f7:96:34:20: 09:5f:ac:ab:34:6e:bb:e5:e8:be:91:53:1d:a0:e1: d7:39:56:27:06:56:83:a4:0c:c7:a5:40:6b:65:1a: c7:f4:65:83:4c:f6:db:a3:11:12:b0:ff:86:57:1a: e4:d5:32:11:66:1e:1f:00:55:3e:2d:f6:55:db:e3: b1:52:1f:4c:b4:3d:7b:b1:bc:4c:43:f4:73:ad:1f: 9a:b5:90:6a:80:95:76:b3:52:53:b9:7b:5b:44:65: dc:eb:5a:b1:96:8b:20:1b:9b:2a:d8:2d:a0:25:b6: 09:80:42:ce:c8:17:d8:79:0b:24:2c:62:4a:b2:4c: 2b:76:a5:3e:d6:e8:44:99:67:f4:7a:08:4d:71:83: 29:29:9c:01:66:0b:ff:da:58:39:92:3c:5a:a3:85: 53:0c:e0:71:09:4f:c7:88:76:97:9f:06:80:10:a2: 9c:34:58:e2:d1:0d:6d:42:eb:46:43:1c:d2:fd:63: 13:29:23:17:22:b1:28:0c:f4:d9:0a:18:3a:0d:11: be:da:34:7e:ab:11:fe:ea:df:3d:dd:e1:fe:0c:2f: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:31:C5:39:AB:72:AC:4C:5E:70:1C:A1:FC:48:C5:BC:45:F3:79:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:47:19:32:94:a4:a7:94:b4:44:85:17:b8:9d:b2:a6:36:ef: 88:ec:56:cb:30:3b:db:c9:63:87:76:d0:ad:50:52:2f:5a:48: 54:ed:55:89:b8:9e:3e:1e:de:a1:67:a4:ce:15:1f:f5:84:77: ab:0c:16:7b:20:08:ac:b8:f6:0d:d8:0c:03:04:84:dd:c4:cb: 4b:89:01:3b:58:41:f9:bb:9d:76:bd:7b:38:bc:d1:c3:33:f2: 6f:e0:a6:3c:30:52:be:68:60:69:4d:7f:e3:15:d2:cd:bf:45: 92:9c:9a:61:81:ee:00:74:d0:ee:9c:20:1f:01:8a:98:17:8c: cf:4e:44:eb:3c:81:5b:a6:f7:b0:04:2d:1e:f2:49:9e:34:09: 2d:c8:9f:25:de:99:d9:7c:d0:3a:89:64:c4:f9:52:b0:15:29: 9c:e6:48:ce:cc:2c:88:42:b7:16:5a:cc:93:e6:51:70:60:10: 30:24:fd:16:99:a8:73:1a:d1:45:8d:6e:4c:9f:40:97:78:d8: 6a:6d:e9:89:09:86:f4:1e:95:3c:5d:98:bf:ef:bd:8c:6e:28: 80:54:c7:52:53:c3:80:f4:70:76:99:70:d0:a6:e3:5e:87:09: 21:c3:ad:99:08:09:88:d7:08:43:0a:db:dc:50:6f:61:1b:09: e9:88:dc:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwaBbJfcrxRG2cPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk OWU2MDUxY2QtMGY0ZC00NzI4LWJmNDgtZDZjY2RjMjNmODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTXYzNgyRyBKcsuyJmT35qjuzpuggBffaUt3 QrvwXVxUJcctNYdPBveWNCAJX6yrNG675ei+kVMdoOHXOVYnBlaDpAzHpUBrZRrH 9GWDTPbboxESsP+GVxrk1TIRZh4fAFU+LfZV2+OxUh9MtD17sbxMQ/RzrR+atZBq gJV2s1JTuXtbRGXc61qxlosgG5sq2C2gJbYJgELOyBfYeQskLGJKskwrdqU+1uhE mWf0eghNcYMpKZwBZgv/2lg5kjxao4VTDOBxCU/HiHaXnwaAEKKcNFji0Q1tQutG QxzS/WMTKSMXIrEoDPTZChg6DRG+2jR+qxH+6t893eH+DC+g7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0xxTmrcqxMXnAcofxIxbxF83mNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjg4MzdlYmEtNmQ3Ny0z YTk4LTk5ZTgtZTQzNjdjZmRmOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNHGTKUpKeUtESFF7idsqY274jsVsswO9vJY4d20K1QUi9aSFTtVYm4 nj4e3qFnpM4VH/WEd6sMFnsgCKy49g3YDAMEhN3Ey0uJATtYQfm7nXa9ezi80cMz 8m/gpjwwUr5oYGlNf+MV0s2/RZKcmmGB7gB00O6cIB8BipgXjM9OROs8gVum97AE LR7ySZ40CS3InyXemdl80DqJZMT5UrAVKZzmSM7MLIhCtxZazJPmUXBgEDAk/RaZ qHMa0UWNbkyfQJd42Gpt6YkJhvQelTxdmL/vvYxuKIBUx1JTw4D0cHaZcNCm416H CSHDrZkICYjXCEMK29xQb2EbCemI3BM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:05 2025 by rpki-client