$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0ff976b5-4cb1-37cc-8a9c-cde52ef35b78.roa File: 0ff976b5-4cb1-37cc-8a9c-cde52ef35b78.roa (raw, json) Hash identifier: 12sGCJcSMn0Y2wEp6EG0pe3JdWfXrws0pXV+fohHuhE= Subject key identifier: 1D:BA:0E:F6:5C:C7:7D:82:FB:D3:50:A8:9B:28:60:53:49:D9:5F:37 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E11B5A9ADC06871A041C80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0ff976b5-4cb1-37cc-8a9c-cde52ef35b78.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 107.167.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1b:5a:9a:dc:06:87:1a:04:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=b944909f-c02a-4953-9cb9-7f82a62c67e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:dc:ab:ed:eb:f6:e6:f4:98:55:0b:01:cf: e4:d4:91:74:06:68:ac:a0:c1:73:2e:fd:ff:d1:94: 51:ba:c6:cd:67:6f:ba:ee:9c:8b:b1:c5:9c:0e:02: d7:50:d8:60:19:8b:ca:80:d5:77:51:11:5c:a7:34: e9:f5:56:73:dc:56:94:fb:00:b6:fa:02:10:9a:44: 5f:b6:13:c3:b4:90:f8:f4:47:e6:a9:f5:c7:7f:97: bb:f3:f9:66:35:c8:51:b3:12:34:0a:2d:42:a2:2f: 28:db:54:e9:ec:78:75:5b:49:1a:f2:75:8e:e4:91: 9c:1a:a5:84:8b:d0:8b:db:eb:ff:d8:40:ee:a6:a6: d3:1a:1c:a9:3f:14:23:0c:3b:b8:cd:cc:18:29:c7: 8b:7e:c6:d1:db:03:c9:dd:3b:b2:64:2a:20:72:f9: 03:99:5c:7a:f7:bc:1b:e0:8b:89:52:12:8d:dd:87: a9:fe:da:2a:43:f9:3a:1b:0b:0d:f6:24:d5:5b:d5: 2a:b1:d4:c9:9f:67:1e:eb:49:3a:ff:34:89:c8:0f: 2a:e7:2c:ad:1c:71:17:3a:b9:5b:91:71:6a:b4:09: d4:54:13:67:ce:70:6c:63:e2:50:19:87:fa:b5:be: 07:af:50:43:53:b5:2a:b6:c6:c3:4d:47:39:e3:d7: d4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BA:0E:F6:5C:C7:7D:82:FB:D3:50:A8:9B:28:60:53:49:D9:5F:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0ff976b5-4cb1-37cc-8a9c-cde52ef35b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e1:ef:78:4b:48:cd:3e:20:d7:05:15:c3:3d:0d:13:4e:1f: 41:53:71:f8:ba:8f:aa:a8:d7:d6:35:43:fc:42:1e:3c:54:df: 49:82:da:6f:35:49:ea:5a:6c:e1:c0:3c:88:c5:11:d6:cb:83: d3:7d:f0:af:f5:d9:3d:44:fe:1c:17:32:fa:ab:75:a3:6f:82: ed:11:5f:44:85:27:06:6b:17:0b:f4:00:28:8d:97:e9:49:9d: ab:0e:57:f1:fb:6c:e1:76:a3:bd:f9:3f:d0:af:b3:26:1e:1b: 8c:f8:bd:72:75:05:90:48:34:52:c4:ea:46:a7:6a:81:ec:4a: 23:d1:ac:42:c1:e1:68:7b:78:93:8b:7b:23:bf:d5:0e:bc:82: c5:8c:e2:48:2f:3d:c8:4b:b5:17:eb:8f:64:7a:47:fe:f1:ac: ef:8c:89:62:08:91:8d:cc:43:60:51:08:f7:d2:45:4f:cd:40: f7:a0:71:b6:a0:e0:90:72:dd:ec:e8:89:69:5c:4d:1b:93:69: d5:f2:9a:35:c0:a5:7a:57:83:f4:51:b5:df:4b:21:f0:02:0a: 19:d9:76:ab:2c:7a:81:8d:14:68:71:68:c2:1a:1e:50:76:5f: 32:6b:be:68:5b:9a:55:68:e6:fd:f9:a3:b8:9a:09:0a:e8:f0: c5:12:1b:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RtamtwGhxoEHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Yjk0NDkwOWYtYzAyYS00OTUzLTljYjktN2Y4MmE2MmM2N2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozbcq+3r9ub0mFULAc/k1JF0BmisoMFzLv3/ 0ZRRusbNZ2+67pyLscWcDgLXUNhgGYvKgNV3URFcpzTp9VZz3FaU+wC2+gIQmkRf thPDtJD49EfmqfXHf5e78/lmNchRsxI0Ci1Coi8o21Tp7Hh1W0ka8nWO5JGcGqWE i9CL2+v/2EDupqbTGhypPxQjDDu4zcwYKceLfsbR2wPJ3TuyZCogcvkDmVx697wb 4IuJUhKN3Yep/toqQ/k6GwsN9iTVW9UqsdTJn2ce60k6/zSJyA8q5yytHHEXOrlb kXFqtAnUVBNnznBsY+JQGYf6tb4Hr1BDU7UqtsbDTUc549fURQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB26DvZcx32C+9NQqJsoYFNJ2V83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGZmOTc2YjUtNGNiMS0z N2NjLThhOWMtY2RlNTJlZjM1Yjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbh73hLSM0+INcFFcM9DRNOH0FTcfi6j6qo19Y1Q/xCHjxU30mC2m81 SepabOHAPIjFEdbLg9N98K/12T1E/hwXMvqrdaNvgu0RX0SFJwZrFwv0ACiNl+lJ nasOV/H7bOF2o735P9CvsyYeG4z4vXJ1BZBINFLE6kanaoHsSiPRrELB4Wh7eJOL eyO/1Q68gsWM4kgvPchLtRfrj2R6R/7xrO+MiWIIkY3MQ2BRCPfSRU/NQPegcbag 4JBy3ezoiWlcTRuTadXymjXApXpXg/RRtd9LIfACChnZdqsseoGNFGhxaMIaHlB2 XzJrvmhbmlVo5v35o7iaCQro8MUSG3s= -----END CERTIFICATE-----Generated at Thu Aug 7 00:36:06 2025 by rpki-client