$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa File: 23108a10-4450-3a24-b6ea-1b522a5b1f91.roa (raw, json) Hash identifier: htpF7dyr3OBY2SoB/CFOKLjOdNRh8sAB9lLMlsHV4ZQ= Subject key identifier: EA:C5:67:6D:83:34:E2:CC:C6:0D:C4:6C:EA:3A:2A:2C:99:58:69:DE Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584AA85BB63DC84E136558935800 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 62651 IP address blocks: 209.107.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b6:3d:c8:4e:13:65:58:93:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=5285bf22-1570-4209-aa64-a9b0ca5a2ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:5a:20:b8:96:37:c7:c6:61:44:6d:92:68: c7:c7:e2:99:61:10:f3:b4:28:ef:41:f3:d3:7f:5e: 09:dd:9c:c4:79:83:66:17:68:2c:f7:de:67:63:08: 28:be:1e:a5:58:e9:71:68:82:f4:b7:d1:dc:63:9b: 27:91:29:25:7c:e5:31:7b:85:70:dd:08:72:b0:5a: 7c:b0:43:31:2e:13:be:61:d1:37:62:49:77:40:c5: 09:44:10:c0:20:ca:b5:28:9a:2b:e0:bd:59:b2:c8: 7c:85:db:34:99:03:37:a9:d8:31:45:0f:a3:72:b6: 88:43:e8:fc:fa:e6:29:d3:6a:df:9a:8a:2f:34:f3: 04:98:e0:a2:12:40:a5:6c:4c:a6:ff:92:8f:34:67: 00:e0:d5:88:c2:9d:eb:29:5b:56:56:40:d1:ac:ce: 44:f9:1f:51:0f:d6:9d:3d:19:9c:bc:09:f5:f9:dd: cd:1a:6d:79:55:80:11:e1:a5:f3:61:a5:a7:11:a9: 82:0a:77:3a:f5:91:d8:be:27:f9:4e:b2:18:d3:14: 16:cd:25:e8:ea:9e:23:d5:45:8c:8f:86:1d:30:fd: b4:6f:ed:db:0d:37:93:83:2e:fb:6f:fc:63:56:94: dd:f2:ab:d6:cd:c8:82:e5:01:aa:6f:f9:f0:cc:33: 71:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C5:67:6D:83:34:E2:CC:C6:0D:C4:6C:EA:3A:2A:2C:99:58:69:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:69:3e:b4:ac:9a:53:53:83:15:d8:89:42:cc:7b:ba:be:25: 50:6f:a0:61:6a:70:6a:bf:d6:e8:18:c1:7e:aa:aa:3b:14:e6: 02:ab:fb:cb:fa:60:63:1f:a2:8f:fc:33:a0:a6:8a:04:a6:6f: 9d:af:65:63:52:f2:73:dc:0b:6d:e9:8f:6b:d0:6d:e4:66:c9: a4:86:70:cf:e3:e2:e1:5f:77:2f:78:dd:67:5f:b3:ca:1c:76: be:98:cd:bc:42:d7:aa:27:fc:01:46:f4:da:3a:c2:da:e0:ef: 58:66:f3:61:a2:61:36:ec:21:86:be:00:0e:f1:26:7b:cf:ec: 89:08:ff:0e:f6:b9:25:5e:96:3c:ba:02:f5:02:44:51:bc:55: f2:8c:8b:8f:51:fc:fb:d9:15:c4:18:8e:4e:30:3d:a9:82:7c: f2:46:43:08:29:06:73:95:37:93:86:3d:e1:78:16:40:74:8b: 94:f1:41:f1:3a:8c:4f:c8:b9:fb:bf:25:11:59:06:58:95:0a: c1:45:f7:f6:8e:b0:04:d0:83:e6:f1:75:da:ff:b5:fc:11:7f: 6e:0f:da:28:c5:e7:fc:f2:80:6c:91:92:4c:e5:bf:9b:2c:23: 98:63:a0:6f:e4:23:46:6c:c0:fb:e8:00:80:58:05:e3:51:3c: b4:bc:c9:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7Y9yE4TZViTWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk NTI4NWJmMjItMTU3MC00MjA5LWFhNjQtYTliMGNhNWEyZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bhaILiWN8fGYURtkmjHx+KZYRDztCjvQfPT f14J3ZzEeYNmF2gs995nYwgovh6lWOlxaIL0t9HcY5snkSklfOUxe4Vw3QhysFp8 sEMxLhO+YdE3Ykl3QMUJRBDAIMq1KJor4L1Zssh8hds0mQM3qdgxRQ+jcraIQ+j8 +uYp02rfmoovNPMEmOCiEkClbEym/5KPNGcA4NWIwp3rKVtWVkDRrM5E+R9RD9ad PRmcvAn1+d3NGm15VYAR4aXzYaWnEamCCnc69ZHYvif5TrIY0xQWzSXo6p4j1UWM j4YdMP20b+3bDTeTgy77b/xjVpTd8qvWzciC5QGqb/nwzDNxQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrFZ22DNOLMxg3EbOo6KiyZWGneMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMjMxMDhhMTAtNDQ1MC0z YTI0LWI2ZWEtMWI1MjJhNWIxZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVpPrSsmlNTgxXYiULMe7q+JVBvoGFqcGq/1ugYwX6qqjsU5gKr+8v6 YGMfoo/8M6CmigSmb52vZWNS8nPcC23pj2vQbeRmyaSGcM/j4uFfdy943Wdfs8oc dr6YzbxC16on/AFG9No6wtrg71hm82GiYTbsIYa+AA7xJnvP7IkI/w72uSVeljy6 AvUCRFG8VfKMi49R/PvZFcQYjk4wPamCfPJGQwgpBnOVN5OGPeF4FkB0i5TxQfE6 jE/Iufu/JRFZBliVCsFF9/aOsATQg+bxddr/tfwRf24P2ijF5/zygGyRkkzlv5ss I5hjoG/kI0ZswPvoAIBYBeNRPLS8yYo= -----END CERTIFICATE-----Generated at Wed Aug 6 09:42:46 2025 by rpki-client