$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa File: 71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa (raw, json) Hash identifier: Ip5yjh6xSGpj99xQSpl/370XtzrDJonh+6nr2camPeM= Subject key identifier: 1C:58:AE:59:4B:72:45:DE:82:AD:77:18:7D:59:9C:7D:AD:31:B9:EC Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Certificate serial: 010D0C9F4328584B0B76ADABEBE33D82019E2E00 Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 19905 IP address blocks: 199.119.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ad:ab:eb:e3:3d:82:01:9e:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=7a58aa54-4aa0-4ff8-a64b-2b141ce67d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bf:55:43:0c:21:68:60:6e:38:5d:8b:bf:8e: 23:be:3e:f7:f7:61:8a:b1:52:20:be:ce:75:66:72: 8e:cb:42:93:f8:d2:c4:c8:31:12:fc:4b:96:88:07: 41:03:99:a0:76:0c:75:2b:fa:54:64:a7:f2:45:9a: b0:f0:3a:96:ee:07:f1:67:fb:91:25:94:cd:7b:c1: 45:d2:c8:a6:03:c5:ff:e4:9c:d1:3a:53:a0:80:75: 65:5c:15:f4:c9:84:73:f4:26:c9:0e:ba:89:94:4f: aa:a8:81:0a:a9:a1:49:c7:09:7c:fd:c6:fe:ca:74: 5a:b0:a2:b5:51:3d:33:75:b6:03:51:07:f0:bd:c5: e9:7f:54:95:a1:c3:fb:14:83:b3:5a:7f:2b:0e:93: 5d:a8:88:f5:fb:2a:04:14:04:e9:b6:eb:e0:4e:c1: 04:6a:5b:f3:53:d9:a8:e6:e1:bf:88:d1:a8:14:91: 92:45:30:b0:79:51:d4:5d:e2:87:63:1d:f7:78:ac: 32:21:fe:ff:cd:ba:0c:57:cb:92:9f:c8:b5:12:41: c4:97:96:cd:b5:ec:2f:a7:2e:89:b0:72:53:42:25: f1:45:7a:3a:64:d0:70:53:b4:8d:46:26:38:e8:d5: 44:35:56:bb:73:ec:a4:ef:d2:94:2c:7e:7d:2d:c2: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:58:AE:59:4B:72:45:DE:82:AD:77:18:7D:59:9C:7D:AD:31:B9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl X509v3 Authority Key Identifier: keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer sbgp-ipAddrBlock: critical IPv4: 199.119.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d8:09:6c:c0:75:9d:75:11:1a:a2:8e:2e:da:89:f9:15:ac: 87:0b:e9:ca:3f:93:c7:36:25:19:3c:13:a2:40:56:11:40:23: a2:31:46:ac:da:21:ed:8d:35:d5:52:7a:e9:27:d6:40:74:93: a5:39:80:db:ff:18:03:f2:cd:cb:73:28:0f:18:4a:5b:a6:09: 26:aa:2e:42:8b:42:be:94:9f:1f:25:8e:65:f8:a4:b0:52:7c: 27:26:3b:e8:91:9d:43:10:1b:1b:02:c1:b3:ac:92:fb:8d:0b: d7:76:b3:20:06:73:79:61:e9:f8:d2:02:55:7b:c7:0e:8f:9e: 32:26:02:c1:ae:34:16:32:fc:43:59:46:37:c6:a8:72:2e:46: 59:8c:bb:aa:2e:72:59:80:c7:5b:d3:b9:f6:7d:65:3c:63:e1: a4:cc:1e:60:66:10:35:5e:0b:ff:70:40:28:41:87:6a:40:1f: d4:7d:49:7b:57:d2:6a:1e:35:ea:1e:88:fd:00:0f:f0:49:41: 98:1b:76:c2:ac:04:8e:f2:d9:1f:81:d9:f9:ee:ac:dc:a9:35: 70:f2:a5:d5:0c:d7:29:ab:d9:f0:2f:96:a8:a2:08:ba:bf:3f: bd:e9:a9:27:6e:2a:c6:64:ba:dc:7e:38:79:29:8d:90:38:f2: 35:40:76:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq2r6+M9ggGeLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm NTZmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk N2E1OGFhNTQtNGFhMC00ZmY4LWE2NGItMmIxNDFjZTY3ZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL9VQwwhaGBuOF2Lv44jvj7392GKsVIgvs51 ZnKOy0KT+NLEyDES/EuWiAdBA5mgdgx1K/pUZKfyRZqw8DqW7gfxZ/uRJZTNe8FF 0simA8X/5JzROlOggHVlXBX0yYRz9CbJDrqJlE+qqIEKqaFJxwl8/cb+ynRasKK1 UT0zdbYDUQfwvcXpf1SVocP7FIOzWn8rDpNdqIj1+yoEFATptuvgTsEEalvzU9mo 5uG/iNGoFJGSRTCweVHUXeKHYx33eKwyIf7/zboMV8uSn8i1EkHEl5bNtewvpy6J sHJTQiXxRXo6ZNBwU7SNRiY46NVENVa7c+yk79KULH59LcKsyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxYrllLckXegq13GH1ZnH2tMbnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvNzFhNmRlZTctZWFhZC0z NmQ4LWFiYzMtYTBmYzZjNmM3OGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1 NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0 ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5 YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3dEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzYCWzAdZ11ERqiji7aifkVrIcL6co/k8c2JRk8E6JAVhFAI6IxRqza Ie2NNdVSeukn1kB0k6U5gNv/GAPyzctzKA8YSlumCSaqLkKLQr6Unx8ljmX4pLBS fCcmO+iRnUMQGxsCwbOskvuNC9d2syAGc3lh6fjSAlV7xw6PnjImAsGuNBYy/ENZ RjfGqHIuRlmMu6ouclmAx1vTufZ9ZTxj4aTMHmBmEDVeC/9wQChBh2pAH9R9SXtX 0moeNeoeiP0AD/BJQZgbdsKsBI7y2R+B2fnurNypNXDypdUM1ymr2fAvlqiiCLq/ P73pqSduKsZkutx+OHkpjZA48jVAdqI= -----END CERTIFICATE-----Generated at Wed Nov 5 21:46:20 2025 by rpki-client