$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/89780e9e-c40a-3af7-bf0a-a15c1a4f8daf.roa File: 89780e9e-c40a-3af7-bf0a-a15c1a4f8daf.roa (raw, json) Hash identifier: KkY0Ij9U9SVnaDpiw3ycWmd/Ar2Bq0DvfHpjWRIpVu8= Subject key identifier: 12:8D:8F:1C:FD:83:C5:61:DD:77:C6:F7:08:5D:BA:FE:DF:CD:B3:14 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D3C01956D313E3AB5B080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/89780e9e-c40a-3af7-bf0a-a15c1a4f8daf.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 107.167.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3c:01:95:6d:31:3e:3a:b5:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=af0804e2-7c11-408d-848d-832b8222f53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b1:70:d3:63:e2:13:67:00:d7:49:41:8e:ec: cc:51:69:c7:2a:c0:0d:c7:14:2b:df:cf:19:86:ed: 6e:fd:9f:fc:f7:fe:0d:78:d8:fa:20:08:b3:78:aa: 35:68:98:ed:d5:7a:b0:bf:a8:a5:9a:ef:d2:43:2e: f1:e2:3a:ec:9e:f4:2e:0a:dc:1c:53:93:a9:03:62: 8a:8b:f4:73:92:98:2f:3d:12:74:39:37:50:f1:e1: e0:16:98:2c:2b:56:06:12:ec:22:4f:a5:a1:04:4f: 33:7b:ca:5e:06:f6:90:13:51:32:b5:4a:26:66:e7: 8b:a6:8b:70:82:39:0c:62:c1:0e:1d:30:9b:31:d5: 91:d3:f8:df:9c:a2:44:40:86:af:02:c5:49:8f:f4: 54:9c:18:2f:00:80:16:ed:7c:dd:69:c2:91:bc:26: 0e:1a:08:47:b2:b7:4e:c9:83:1f:17:a2:7b:9e:9e: f9:b4:7e:ed:4b:62:c0:14:b8:dc:98:98:b4:fb:0a: 4c:aa:fe:5e:6d:c1:40:8c:5b:06:7f:5c:88:33:5f: 60:b6:88:bb:44:04:d4:b0:3c:79:ae:9f:e7:2d:e9: 4a:09:44:74:ea:bb:08:aa:b3:67:10:a8:dd:dc:e7: 26:96:fb:80:65:27:56:7f:2d:8c:07:e4:03:51:73: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8D:8F:1C:FD:83:C5:61:DD:77:C6:F7:08:5D:BA:FE:DF:CD:B3:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/89780e9e-c40a-3af7-bf0a-a15c1a4f8daf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:47:f1:6e:bd:5e:7e:a0:1c:1d:da:2a:a2:ba:55:7c:cc:3a: bb:24:d3:80:9c:f6:cd:58:05:69:ed:a0:63:93:f7:43:e0:1d: 96:c5:d4:e3:9b:7e:f6:0f:4f:ac:9a:b7:b9:7f:da:18:81:bb: 9e:f1:4b:21:20:ec:d7:d1:be:4a:d9:21:8f:86:1f:e3:4c:b3: 27:f0:f6:8c:42:93:7e:6f:a2:4b:4a:b9:86:f5:04:a5:58:f2: 25:f4:cd:6b:b0:ec:36:ea:3d:20:27:ee:fa:54:b3:d2:4c:a2: 54:e7:14:b4:1a:63:e0:44:0c:4e:81:b9:be:a9:1f:be:6a:58: 52:df:cd:c0:0b:6a:c3:5b:1b:e6:15:eb:1c:07:fe:4f:01:1d: 31:55:4c:70:85:2c:34:ba:1e:8c:fe:4f:72:74:7d:5d:c7:97: 91:65:d7:80:e3:e9:75:9c:04:44:39:9b:68:1e:e8:7d:45:d5: 76:06:2a:59:b1:21:75:ec:ec:0e:f2:82:ef:b5:e2:f3:f0:df: bf:ee:82:35:c5:2a:f4:6b:df:a2:2e:06:e6:53:5f:bd:2c:53: fd:2d:36:9b:4c:e8:8e:a6:1f:c3:f9:6f:36:93:89:f6:dd:64: 4b:8f:8d:4b:11:cf:d1:70:e4:a4:c9:be:6e:fd:7a:f9:66:1e: 65:5e:5a:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTwBlW0xPjq1sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YWYwODA0ZTItN2MxMS00MDhkLTg0OGQtODMyYjgyMjJmNTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrFw02PiE2cA10lBjuzMUWnHKsANxxQr388Z hu1u/Z/89/4NeNj6IAizeKo1aJjt1Xqwv6ilmu/SQy7x4jrsnvQuCtwcU5OpA2KK i/RzkpgvPRJ0OTdQ8eHgFpgsK1YGEuwiT6WhBE8ze8peBvaQE1EytUomZueLpotw gjkMYsEOHTCbMdWR0/jfnKJEQIavAsVJj/RUnBgvAIAW7XzdacKRvCYOGghHsrdO yYMfF6J7np75tH7tS2LAFLjcmJi0+wpMqv5ebcFAjFsGf1yIM19gtoi7RATUsDx5 rp/nLelKCUR06rsIqrNnEKjd3OcmlvuAZSdWfy2MB+QDUXMmEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKNjxz9g8Vh3XfG9whduv7fzbMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODk3ODBlOWUtYzQwYS0z YWY3LWJmMGEtYTE1YzFhNGY4ZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClH8W69Xn6gHB3aKqK6VXzMOrsk04Cc9s1YBWntoGOT90PgHZbF1OOb fvYPT6yat7l/2hiBu57xSyEg7NfRvkrZIY+GH+NMsyfw9oxCk35voktKuYb1BKVY 8iX0zWuw7DbqPSAn7vpUs9JMolTnFLQaY+BEDE6Bub6pH75qWFLfzcALasNbG+YV 6xwH/k8BHTFVTHCFLDS6Hoz+T3J0fV3Hl5Fl14Dj6XWcBEQ5m2ge6H1F1XYGKlmx IXXs7A7ygu+14vPw37/ugjXFKvRr36IuBuZTX70sU/0tNptM6I6mH8P5bzaTifbd ZEuPjUsRz9Fw5KTJvm79evlmHmVeWqc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:31 2025 by rpki-client