$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce3942cf-da09-348f-8f5b-ea408d9b3772.roa File: ce3942cf-da09-348f-8f5b-ea408d9b3772.roa (raw, json) Hash identifier: 24q3Qe0kBeQwdjxqPCC9Eda0IIU5aAhwFrneC87n2oU= Subject key identifier: 41:FC:C5:66:F9:18:8B:86:5D:4C:AA:42:3F:8E:F9:4E:33:8A:E3:D0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E05507187B67D26B1640 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce3942cf-da09-348f-8f5b-ea408d9b3772.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 12008 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e0:55:07:18:7b:67:d2:6b:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=237dd632-9fdf-4e02-a4cc-5d1f445ade20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:ff:13:ec:fc:86:f5:b1:6b:0f:76:df:c2: f5:7a:65:0a:7c:67:d8:bf:9c:2f:0a:71:73:a8:d7: fb:41:40:17:01:f4:68:13:b5:65:4f:12:34:8c:d1: 94:18:a6:b3:ff:42:ba:b6:ce:7d:da:47:a6:a7:e9: 37:64:d0:5c:47:b8:60:66:a5:f9:1f:c1:34:6e:b6: 0d:7b:d5:99:b5:2d:66:0a:4e:8f:da:e7:51:84:57: 37:be:5d:1b:37:6a:da:7e:60:e3:71:bd:b1:2c:6b: c7:ea:38:d8:ff:6f:63:ed:51:71:3c:5b:20:5f:ce: c8:9c:dc:3d:f5:9d:22:66:a6:6b:87:11:21:b3:19: 36:14:fe:96:f2:0f:c1:a5:b7:b7:e6:cc:1c:b5:3d: 7a:91:b2:dd:d1:42:2d:3a:b0:47:4b:95:e3:e2:2d: 39:90:82:63:69:83:3a:66:c0:6e:c9:d2:97:2d:58: 54:ed:59:d8:9b:0e:ca:56:c4:37:b8:fb:4c:ea:74: 01:2f:dc:db:5a:69:40:b8:e2:48:2c:11:fe:65:94: d4:5b:bf:5d:e4:c9:2a:74:ff:91:2f:27:ef:f3:c0: 8a:8e:4a:b6:29:a4:8b:1b:91:f3:8e:47:f4:65:44: 44:11:9d:9b:81:08:17:e2:d2:ea:d5:97:07:43:0f: 69:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FC:C5:66:F9:18:8B:86:5D:4C:AA:42:3F:8E:F9:4E:33:8A:E3:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce3942cf-da09-348f-8f5b-ea408d9b3772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:4a:03:d3:a0:92:57:3e:80:70:14:7b:c0:2e:3f:43:8c:3e: 98:12:b8:a5:8e:c3:b5:62:22:32:fb:cb:75:1c:25:bd:c6:53: d8:2c:e7:5a:75:ab:9f:05:b8:19:6c:47:e0:8c:68:f5:82:21: 96:b4:08:7a:c3:60:4d:12:f9:67:4d:67:af:ba:4e:e5:da:ba: 5d:65:11:a2:92:29:1d:e9:0c:39:2d:e1:be:b3:9f:30:f6:9e: a3:90:7e:64:39:dc:f7:af:16:86:b5:30:0b:17:16:78:a8:a8: 88:c0:7c:fa:ab:24:5a:de:f7:06:5a:b8:41:c3:27:f1:a7:8f: a6:08:39:2d:1b:2c:c6:ea:c3:72:dc:01:b9:8d:d9:1d:07:a9: 0c:cc:91:bc:1c:8e:36:89:19:d7:71:f0:ca:67:2f:0f:03:e1: 02:66:e5:e3:52:f1:d2:87:c1:a8:68:e4:31:73:74:81:f4:8d: 6e:ac:3c:42:ea:f6:0a:dd:0b:26:7c:52:b7:bb:1a:b3:c3:23: b7:26:2a:3a:18:6c:d9:fe:73:33:ac:52:37:90:ce:a7:45:e9: de:01:ac:9d:8a:ee:fd:ff:39:4e:df:3e:c5:ca:1f:8a:2f:db: 66:81:69:34:ef:7a:a3:af:d4:ec:f2:bc:8e:01:6d:de:13:06: 85:84:48:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eBVBxh7Z9JrFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjM3ZGQ2MzItOWZkZi00ZTAyLWE0Y2MtNWQxZjQ0NWFkZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/v/E+z8hvWxaw9238L1emUKfGfYv5wvCnFz qNf7QUAXAfRoE7VlTxI0jNGUGKaz/0K6ts592kemp+k3ZNBcR7hgZqX5H8E0brYN e9WZtS1mCk6P2udRhFc3vl0bN2rafmDjcb2xLGvH6jjY/29j7VFxPFsgX87InNw9 9Z0iZqZrhxEhsxk2FP6W8g/Bpbe35swctT16kbLd0UItOrBHS5Xj4i05kIJjaYM6 ZsBuydKXLVhU7VnYmw7KVsQ3uPtM6nQBL9zbWmlAuOJILBH+ZZTUW79d5MkqdP+R Lyfv88CKjkq2KaSLG5Hzjkf0ZUREEZ2bgQgX4tLq1ZcHQw9pfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH8xWb5GIuGXUyqQj+O+U4ziuPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2UzOTQyY2YtZGEwOS0z NDhmLThmNWItZWE0MDhkOWIzNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxKA9Ogklc+gHAUe8AuP0OMPpgSuKWOw7ViIjL7y3UcJb3GU9gs51p1 q58FuBlsR+CMaPWCIZa0CHrDYE0S+WdNZ6+6TuXaul1lEaKSKR3pDDkt4b6znzD2 nqOQfmQ53PevFoa1MAsXFnioqIjAfPqrJFre9wZauEHDJ/Gnj6YIOS0bLMbqw3Lc AbmN2R0HqQzMkbwcjjaJGddx8MpnLw8D4QJm5eNS8dKHwaho5DFzdIH0jW6sPELq 9grdCyZ8Ure7GrPDI7cmKjoYbNn+czOsUjeQzqdF6d4BrJ2K7v3/OU7fPsXKH4ov 22aBaTTveqOv1OzyvI4Bbd4TBoWESM0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:24 2025 by rpki-client