$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa File: a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa (raw, json) Hash identifier: h7fl7AVKHn3m3nmLLxUOHj9qPDH0XvsTQfNUa4TSsLc= Subject key identifier: 16:2A:4A:AF:D4:62:DF:C3:A3:82:F2:F0:9E:69:E0:7E:0B:12:EA:C9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D3BDE55345B790671DC80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 107.167.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3b:de:55:34:5b:79:06:71:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=70d565fc-3fd4-45c6-9c2b-070d68d35ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:f8:ad:b1:9a:25:71:e8:10:ac:e4:c1:86: c5:02:85:7f:28:cf:7d:96:8b:9b:61:bf:3d:e2:1a: 4b:e3:70:c1:42:04:ba:1a:4e:98:51:9f:a4:ac:9b: ca:f3:88:12:40:56:f0:f2:ed:c3:89:d4:2d:2e:3d: f4:39:85:a8:b5:e5:fe:9d:8b:64:da:e5:75:b2:71: 83:b9:03:a0:5c:e8:6b:8d:ea:9f:ae:e5:49:32:02: 80:8b:ee:1f:10:2c:53:e2:e8:62:de:74:c1:ba:59: 0a:34:5e:af:e1:7c:ed:9e:f6:9c:fa:53:61:37:74: e3:b9:c6:1c:bb:85:ff:e7:97:53:aa:5a:42:42:a0: 05:b0:fd:e4:53:97:47:3c:37:9e:c0:b5:a3:85:e1: c3:2e:3e:92:c3:c6:39:58:49:f6:57:9f:04:ba:da: 7c:ce:36:c1:2b:ac:26:01:8e:93:6f:2c:d1:a9:cd: 5e:9c:b4:d9:9d:01:67:e0:d1:4a:ee:5f:d5:be:96: be:cd:7f:9a:53:4a:23:ef:46:10:ad:fc:12:51:97: ab:0c:d5:59:22:c9:8a:87:7f:a2:9b:eb:ba:c6:24: 28:70:4d:bb:85:d5:6d:4a:69:e2:c4:b5:9d:ab:f0: 67:c9:00:a6:bd:11:2a:36:45:dc:78:cb:fc:8a:07: 5b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2A:4A:AF:D4:62:DF:C3:A3:82:F2:F0:9E:69:E0:7E:0B:12:EA:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ba:1c:1c:29:e5:10:8d:38:9b:72:24:8c:bd:13:6e:f2:c2: b4:85:99:17:08:0e:98:23:3d:7b:aa:d5:66:4f:18:c9:dd:22: 60:ab:40:01:9e:60:8b:89:c8:2a:03:dc:99:fa:52:bf:7b:12: 6b:65:c8:be:9e:72:48:15:f5:48:03:f1:18:06:ad:b0:73:40: 32:e3:81:2d:1a:85:d0:20:3f:30:f1:47:cb:ae:81:95:02:da: c5:0d:bc:84:e3:12:e4:c6:53:2e:76:73:68:64:43:56:4a:6f: c4:e8:b2:a9:0f:9b:4e:12:c9:0a:42:e4:53:a2:26:f9:83:17: dd:7d:8e:d1:b4:cd:c1:66:d2:da:31:d4:34:1e:c2:71:8b:d7: 48:8e:60:bd:42:ab:a1:e0:1f:7a:3b:18:57:41:cc:f4:49:e0: e9:22:e3:53:76:54:55:69:52:a1:96:f3:da:70:c8:b8:3e:e5: 55:36:8e:c6:fc:8a:f6:b6:8b:28:87:41:f4:85:dd:91:bf:08: 10:1c:24:b2:10:36:a3:81:a3:93:60:0c:05:b3:97:34:b9:75: a9:9f:21:bc:93:04:c8:c4:92:9f:d0:89:ad:72:8d:a0:da:c0: 72:2b:c8:4d:76:d6:a0:69:ba:12:79:f0:5d:eb:09:a7:42:40: aa:d6:1f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTveVTRbeQZx3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NzBkNTY1ZmMtM2ZkNC00NWM2LTljMmItMDcwZDY4ZDM1ZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ur4rbGaJXHoEKzkwYbFAoV/KM99loubYb89 4hpL43DBQgS6Gk6YUZ+krJvK84gSQFbw8u3DidQtLj30OYWoteX+nYtk2uV1snGD uQOgXOhrjeqfruVJMgKAi+4fECxT4uhi3nTBulkKNF6v4Xztnvac+lNhN3TjucYc u4X/55dTqlpCQqAFsP3kU5dHPDeewLWjheHDLj6Sw8Y5WEn2V58Eutp8zjbBK6wm AY6TbyzRqc1enLTZnQFn4NFK7l/Vvpa+zX+aU0oj70YQrfwSUZerDNVZIsmKh3+i m+u6xiQocE27hdVtSmnixLWdq/BnyQCmvREqNkXceMv8igdbIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYqSq/UYt/Do4Ly8J5p4H4LEurJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTU1OWJhZDItYWJmMC0z ZGU0LWI1Y2QtYTI2YjRkODZkYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES6HBwp5RCNOJtyJIy9E27ywrSFmRcIDpgjPXuq1WZPGMndImCrQAGe YIuJyCoD3Jn6Ur97EmtlyL6eckgV9UgD8RgGrbBzQDLjgS0ahdAgPzDxR8uugZUC 2sUNvITjEuTGUy52c2hkQ1ZKb8TosqkPm04SyQpC5FOiJvmDF919jtG0zcFm0tox 1DQewnGL10iOYL1Cq6HgH3o7GFdBzPRJ4Oki41N2VFVpUqGW89pwyLg+5VU2jsb8 iva2iyiHQfSF3ZG/CBAcJLIQNqOBo5NgDAWzlzS5damfIbyTBMjEkp/Qia1yjaDa wHIryE121qBpuhJ58F3rCadCQKrWH9E= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:25 2025 by rpki-client