$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa File: 00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa (raw, json) Hash identifier: d7wUs/fUSWkR/rTlb6SUm3ugbG00ub/YMygG8EQls/I= Subject key identifier: 5A:D1:B5:F2:36:D1:2F:BF:FB:A1:F9:9D:39:39:AA:BC:A4:03:0D:A8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D3BBD42E1D345FA47C880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 107.167.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3b:bd:42:e1:d3:45:fa:47:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=f9d4fc0e-4df0-437e-ae69-0910393cccc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1e:7f:f8:3a:50:b6:a3:32:d0:83:92:7f:d3: 2c:27:f6:9a:fa:ed:e2:61:bc:2e:9d:ca:a5:aa:f2: 5f:69:f8:57:64:8a:66:c0:6c:48:2e:53:cc:6b:51: b1:ae:c1:80:63:7a:fa:8a:da:ed:b6:63:1c:f0:e4: 4b:24:63:18:4f:8b:84:54:74:e4:73:bd:00:2b:cd: 0b:36:d2:5c:6a:1e:df:66:11:9e:39:15:3b:69:72: d4:7e:ab:62:6f:1f:26:81:99:57:8d:4b:fa:7a:e6: 9b:b3:4c:70:7e:8e:e6:72:f5:bf:bf:a5:00:8d:a2: 5d:3d:2b:ae:76:cc:5a:be:52:03:d7:fe:59:93:4c: af:92:3c:a1:0b:88:d7:0e:aa:85:c7:75:3d:0b:40: 30:e4:af:5d:44:18:bb:7e:d2:4b:e8:b9:75:4c:13: 5c:68:49:87:1f:ff:ee:00:64:dc:2a:0e:92:e6:f3: 02:ba:cd:aa:90:6e:bb:0d:0b:f6:c3:1e:8c:ef:d6: aa:34:d2:d9:a4:05:b4:59:f6:de:e1:37:d8:e3:e1: 23:84:a1:ab:82:2f:a0:20:cd:ea:18:a9:0a:1b:e7: 79:e4:65:aa:20:7e:16:71:bf:eb:1b:0e:8d:41:2d: 79:40:f2:9c:2e:b4:a3:09:ce:68:ee:72:79:dc:90: 10:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D1:B5:F2:36:D1:2F:BF:FB:A1:F9:9D:39:39:AA:BC:A4:03:0D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:91:f4:fc:2f:34:f8:87:21:e7:1d:7f:89:21:c3:bd:cc:17: 8a:c6:35:65:62:c3:ec:03:b5:4f:2d:8d:ba:76:b7:c1:83:78: 43:49:7a:d6:50:50:da:dc:24:28:08:be:c0:48:77:75:93:c5: 39:ec:e6:5d:7d:c9:4d:03:4d:46:33:e5:a1:25:e6:69:41:3a: f7:63:f0:b0:c7:c3:38:1a:1d:80:6d:bf:1a:a6:a9:ff:f8:98: 2f:67:f0:ca:61:93:56:e6:75:d3:f3:1d:d6:d6:82:84:d9:15: 89:91:d7:fa:38:75:f2:fc:46:2c:1c:23:0a:7f:cf:25:af:ae: 8e:fa:86:31:21:11:55:e6:7b:24:dd:3b:a0:5a:02:d6:27:d1: 2b:a0:e9:71:27:91:79:e3:9d:e1:0e:e2:b2:9e:70:90:1f:85: e8:2f:b1:af:f0:7c:12:0d:0a:c5:c8:49:12:8e:6a:c4:7b:3e: bf:17:e2:e1:20:db:23:cc:a4:b4:67:85:a0:5b:5f:49:e5:87: 91:ba:a0:65:6d:77:5a:aa:f0:3a:09:4f:19:62:fd:a8:f9:c1: 48:f5:2a:f2:07:65:37:71:b0:bb:13:af:8a:f7:ff:07:4d:54: 62:a8:92:09:17:d3:2c:ed:0a:1b:89:9a:1a:66:ab:d0:33:a6: ca:d4:75:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTu9QuHTRfpHyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjlkNGZjMGUtNGRmMC00MzdlLWFlNjktMDkxMDM5M2NjY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR5/+DpQtqMy0IOSf9MsJ/aa+u3iYbwuncql qvJfafhXZIpmwGxILlPMa1GxrsGAY3r6itrttmMc8ORLJGMYT4uEVHTkc70AK80L NtJcah7fZhGeORU7aXLUfqtibx8mgZlXjUv6euabs0xwfo7mcvW/v6UAjaJdPSuu dsxavlID1/5Zk0yvkjyhC4jXDqqFx3U9C0Aw5K9dRBi7ftJL6Ll1TBNcaEmHH//u AGTcKg6S5vMCus2qkG67DQv2wx6M79aqNNLZpAW0Wfbe4TfY4+EjhKGrgi+gIM3q GKkKG+d55GWqIH4Wcb/rGw6NQS15QPKcLrSjCc5o7nJ53JAQzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrRtfI20S+/+6H5nTk5qrykAw2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDBlNTBlNWYtNmZkZi0z MzJjLWFmZTMtNWQ2Yzc0Nzk1YmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCR9PwvNPiHIecdf4khw73MF4rGNWViw+wDtU8tjbp2t8GDeENJetZQ UNrcJCgIvsBId3WTxTns5l19yU0DTUYz5aEl5mlBOvdj8LDHwzgaHYBtvxqmqf/4 mC9n8Mphk1bmddPzHdbWgoTZFYmR1/o4dfL8RiwcIwp/zyWvro76hjEhEVXmeyTd O6BaAtYn0Sug6XEnkXnjneEO4rKecJAfhegvsa/wfBINCsXISRKOasR7Pr8X4uEg 2yPMpLRnhaBbX0nlh5G6oGVtd1qq8DoJTxli/aj5wUj1KvIHZTdxsLsTr4r3/wdN VGKokgkX0yztChuJmhpmq9AzpsrUdeg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:50:55 2025 by rpki-client