$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/600960cf-18d1-3ece-9b64-7a7ed80ae101.roa File: 600960cf-18d1-3ece-9b64-7a7ed80ae101.roa (raw, json) Hash identifier: I91ztXk4FCrwYJkYsXymEWACTzmPnxjtTcvdexmlsdo= Subject key identifier: 2D:8C:7C:D8:E6:44:F0:D5:6B:1C:8A:B4:D9:32:AF:D6:8A:B1:4C:27 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B5DD1F7209A589FE82C491900 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/600960cf-18d1-3ece-9b64-7a7ed80ae101.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 26955 IP address blocks: 207.108.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f7:20:9a:58:9f:e8:2c:49:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=02ae47c0-a559-473f-9552-58d2811358f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dc:40:29:ac:5f:3e:bf:da:4a:43:77:a0:7c: 66:8b:1e:31:60:48:bf:71:9c:25:08:b5:6a:e5:f9: 69:92:59:08:0f:8a:2e:c8:08:8c:ff:21:13:1b:9d: 09:72:17:a4:62:a8:86:55:15:08:3a:bf:79:c6:2a: d1:1d:16:1e:ba:bf:15:e8:d7:63:b0:8c:17:1f:5a: fe:48:69:7f:2a:c7:bc:99:fe:eb:a4:08:33:ea:4a: 32:00:35:f1:48:21:7f:a6:1e:44:55:5d:46:14:79: 8a:16:6b:67:8a:57:30:14:c2:c9:15:43:a4:b3:62: c1:88:02:2d:84:bc:af:b3:db:f6:79:2f:24:39:f1: fe:b2:9f:a1:ea:72:d1:01:c6:91:56:a6:aa:43:e1: 3d:5a:77:0f:a2:23:5f:bf:ab:6b:d1:fb:60:20:73: 7f:61:89:a5:9d:1f:e3:9b:e8:4a:3b:4c:e4:05:9a: d2:39:d9:af:58:0c:c9:1f:d4:74:63:df:10:6b:1c: e3:06:6b:af:61:3d:6e:9a:a1:74:ea:9f:25:a6:a0: e5:09:c5:9a:50:ed:e6:4a:cf:16:59:ae:5c:ad:81: 52:c4:03:23:8e:6b:6b:94:74:0a:37:55:ae:b6:c9: 48:b3:de:49:1d:30:ac:4b:44:9b:d5:99:29:39:37: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8C:7C:D8:E6:44:F0:D5:6B:1C:8A:B4:D9:32:AF:D6:8A:B1:4C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/600960cf-18d1-3ece-9b64-7a7ed80ae101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 207.108.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:5c:ae:91:4b:8b:fc:fe:1a:52:fc:22:e4:86:02:42:80:60: d9:3e:80:4c:ed:98:ca:6f:b3:ae:c5:fa:38:13:7b:06:4f:18: 8a:f1:b4:ed:05:e7:b7:39:13:d6:52:38:f1:da:03:af:84:58: db:ca:57:74:4e:2d:af:8c:a4:f6:c1:21:a0:44:41:71:68:8b: a9:59:48:4c:91:ce:44:51:e6:3c:81:48:71:c7:b5:fd:4c:ae: c6:4c:ca:9e:7a:c1:d9:84:b4:f5:bf:32:84:5e:e3:05:60:ed: 4c:43:1a:dd:be:aa:5a:b8:bd:52:7b:7b:82:7d:0c:58:1e:7e: 69:4d:0f:6d:ab:cf:9b:f1:d1:0e:bc:03:00:6a:22:67:39:6b: 2c:da:a1:bd:46:29:10:18:ce:10:5b:3b:b4:ab:4d:42:ba:fa: 7e:13:7c:b6:d9:c1:0e:31:e1:b1:e9:2e:56:ec:17:c1:1c:57: 59:8e:cb:64:7c:4e:86:01:4a:d1:e1:56:8d:d9:fb:c1:67:f9: 9f:56:47:b2:1c:7a:da:f8:19:90:45:16:ca:d2:69:65:2d:1e: fb:fa:1f:e0:38:03:ed:8d:ab:1a:77:d3:8b:35:72:d7:5e:65: 38:e6:57:f8:79:af:a2:72:22:eb:ec:2d:eb:70:29:e6:72:d1: c6:7e:e6:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fcgmlif6CxJGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MDJhZTQ3YzAtYTU1OS00NzNmLTk1NTItNThkMjgxMTM1OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtxAKaxfPr/aSkN3oHxmix4xYEi/cZwlCLVq 5flpklkID4ouyAiM/yETG50JchekYqiGVRUIOr95xirRHRYeur8V6NdjsIwXH1r+ SGl/Kse8mf7rpAgz6koyADXxSCF/ph5EVV1GFHmKFmtnilcwFMLJFUOks2LBiAIt hLyvs9v2eS8kOfH+sp+h6nLRAcaRVqaqQ+E9WncPoiNfv6tr0ftgIHN/YYmlnR/j m+hKO0zkBZrSOdmvWAzJH9R0Y98QaxzjBmuvYT1umqF06p8lpqDlCcWaUO3mSs8W Wa5crYFSxAMjjmtrlHQKN1WutslIs95JHTCsS0Sb1ZkpOTedzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2MfNjmRPDVaxyKtNkyr9aKsUwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNjAwOTYwY2YtMThkMS0z ZWNlLTliNjQtN2E3ZWQ4MGFlMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2wsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBcrpFLi/z+GlL8IuSGAkKAYNk+gEztmMpvs67F+jgTewZPGIrxtO0F 57c5E9ZSOPHaA6+EWNvKV3ROLa+MpPbBIaBEQXFoi6lZSEyRzkRR5jyBSHHHtf1M rsZMyp56wdmEtPW/MoRe4wVg7UxDGt2+qlq4vVJ7e4J9DFgefmlND22rz5vx0Q68 AwBqImc5ayzaob1GKRAYzhBbO7SrTUK6+n4TfLbZwQ4x4bHpLlbsF8EcV1mOy2R8 ToYBStHhVo3Z+8Fn+Z9WR7Icetr4GZBFFsrSaWUtHvv6H+A4A+2Nqxp304s1ctde ZTjmV/h5r6JyIuvsLetwKeZy0cZ+5uE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:36 2025 by rpki-client