$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88a8ab7a-f02c-395f-8228-a56e468f8b20.roa File: 88a8ab7a-f02c-395f-8228-a56e468f8b20.roa (raw, json) Hash identifier: fUguYZB57Vuop7yqdgnJMXmzNvt6Y5OEiAsLgASU0As= Subject key identifier: C2:73:64:9F:42:1A:C2:4B:CF:2A:58:C2:1C:47:DF:5C:B3:E7:5A:5B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68262050DABCF03FF3E0DF80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88a8ab7a-f02c-395f-8228-a56e468f8b20.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397239 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:20:50:da:bc:f0:3f:f3:e0:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=9c09b8d9-19ac-4628-8f75-b9088bc42530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:5c:de:24:a1:d8:f7:0a:d0:fc:3f:f7:52: 01:2b:03:e0:11:cd:7d:d7:4e:81:76:1b:ad:3d:23: 23:bb:5a:f7:87:16:df:63:63:82:e0:87:19:11:46: f0:ab:cd:76:8a:81:14:59:8b:5e:98:cb:ff:b6:0e: 43:27:a3:5f:e6:bb:44:f6:50:e7:97:dc:ca:df:0b: e2:02:88:53:d2:39:2e:88:7b:1c:5e:7a:ff:b0:f2: b3:73:cf:32:d1:9e:65:c2:c4:4f:36:74:6a:17:7e: ca:f6:21:7d:92:f0:4f:dd:60:bd:66:1c:2f:81:49: 91:ca:57:4d:5f:a3:78:ad:87:8f:cd:c6:c4:7c:be: 88:4c:0e:40:b6:7c:0c:3c:c6:f2:82:53:c5:06:5a: cd:8f:e4:12:c9:79:e4:8d:4c:40:d0:0e:46:2e:c5: df:29:ce:aa:b2:57:ca:34:22:e5:7c:dd:12:ad:12: 7f:ee:7a:a5:97:78:96:15:15:34:1f:5f:17:35:eb: d9:86:a2:07:3d:8f:b8:01:56:62:66:a1:a7:4e:e8: 08:f8:90:4d:8a:38:da:87:33:d2:ae:65:42:3c:98: 55:32:fe:c4:84:84:e6:70:70:ca:33:3a:81:9b:fe: 2f:62:19:ba:8d:16:ac:fa:73:67:e4:a6:56:f6:4d: 9e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:73:64:9F:42:1A:C2:4B:CF:2A:58:C2:1C:47:DF:5C:B3:E7:5A:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88a8ab7a-f02c-395f-8228-a56e468f8b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c4:f6:e6:ca:bb:00:1a:b3:c8:28:e3:18:98:9e:76:04:fd: a0:2c:b5:69:2a:29:9b:7c:72:44:fb:f9:7f:59:8e:61:6b:74: 81:69:b2:02:78:18:44:79:2e:0c:8b:7b:31:ec:1f:86:46:08: 22:4a:44:e4:dc:7f:96:30:d0:ff:44:3e:a4:82:9e:b6:d0:64: 9f:13:55:32:a0:d1:c2:16:e6:6c:45:ed:f8:b9:e9:56:9a:5a: 31:13:5a:41:41:36:f4:35:ee:72:c7:30:d8:92:e7:f0:b5:25: 8e:24:f0:1b:eb:c4:aa:9e:f9:ac:ae:4c:61:62:2f:2b:59:8f: f0:35:8e:01:8b:c7:11:fc:11:30:82:60:aa:8d:54:87:f5:b8: 19:ab:20:32:17:12:10:46:1b:d3:fb:9f:6b:96:68:c3:45:2c: 68:11:28:c3:49:84:31:01:22:00:5b:5b:5c:ed:a9:4b:21:e3: 5e:98:26:24:fb:99:fa:47:b4:67:4b:9e:1c:7f:47:f1:44:30: e7:5d:46:de:e8:df:00:f0:fd:01:88:4e:01:e2:1d:32:b9:82: 1d:29:24:4b:94:c2:db:95:82:7e:12:8c:ed:47:f0:79:48:c0: 40:85:65:42:38:52:5a:8f:26:91:9d:f6:86:72:27:a3:cf:17: 05:86:d9:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJiBQ2rzwP/Pg34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk OWMwOWI4ZDktMTlhYy00NjI4LThmNzUtYjkwODhiYzQyNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTlc3iSh2PcK0Pw/91IBKwPgEc19106Bdhut PSMju1r3hxbfY2OC4IcZEUbwq812ioEUWYtemMv/tg5DJ6Nf5rtE9lDnl9zK3wvi AohT0jkuiHscXnr/sPKzc88y0Z5lwsRPNnRqF37K9iF9kvBP3WC9ZhwvgUmRyldN X6N4rYePzcbEfL6ITA5AtnwMPMbyglPFBlrNj+QSyXnkjUxA0A5GLsXfKc6qslfK NCLlfN0SrRJ/7nqll3iWFRU0H18XNevZhqIHPY+4AVZiZqGnTugI+JBNijjahzPS rmVCPJhVMv7EhITmcHDKMzqBm/4vYhm6jRas+nNn5KZW9k2ewwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJzZJ9CGsJLzypYwhxH31yz51pbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODhhOGFiN2EtZjAyYy0z OTVmLTgyMjgtYTU2ZTQ2OGY4YjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvE9ubKuwAas8go4xiYnnYE/aAstWkqKZt8ckT7+X9ZjmFrdIFpsgJ4 GER5LgyLezHsH4ZGCCJKROTcf5Yw0P9EPqSCnrbQZJ8TVTKg0cIW5mxF7fi56Vaa WjETWkFBNvQ17nLHMNiS5/C1JY4k8BvrxKqe+ayuTGFiLytZj/A1jgGLxxH8ETCC YKqNVIf1uBmrIDIXEhBGG9P7n2uWaMNFLGgRKMNJhDEBIgBbW1ztqUsh416YJiT7 mfpHtGdLnhx/R/FEMOddRt7o3wDw/QGITgHiHTK5gh0pJEuUwtuVgn4SjO1H8HlI wECFZUI4UlqPJpGd9oZyJ6PPFwWG2bk= -----END CERTIFICATE-----Generated at Mon Aug 4 19:11:49 2025 by rpki-client