$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa File: 5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa (raw, json) Hash identifier: cR58xdxU2Nk8Y1i4Ta+7yTqUA+RoSlPCxxTSXI8o48g= Subject key identifier: 00:EE:34:53:71:F7:CD:C7:43:2D:C4:50:D6:67:B5:17:D8:3E:18:C4 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AFFC60ACF9A17F9FFA54D6480 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa Signing time: Wed 27 Aug 2025 20:30:55 +0000 ROA not before: Wed 27 Aug 2025 20:30:55 +0000 ROA not after: Tue 25 Nov 2025 21:30:55 +0000 asID: 202 IP address blocks: 207.67.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:c6:0a:cf:9a:17:f9:ff:a5:4d:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 27 20:30:55 2025 GMT Not After : Nov 25 21:30:55 2025 GMT Subject: CN=d2fcba95-d40d-406c-bb6b-5a28b9743b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:09:99:1d:f2:19:6b:e4:6a:0c:0d:6c:1a:36: 1c:db:48:1c:3c:73:d3:4e:16:e0:12:c6:b2:9c:c0: 5b:0b:95:1d:fb:38:bf:11:cf:9a:cb:88:f5:42:b1: eb:d2:62:06:3d:21:a8:44:23:eb:bb:e8:b9:4b:3a: 32:56:f9:b6:ec:6f:cc:6d:04:6e:69:cf:b0:07:b5: c0:22:a8:aa:4c:e2:a3:b5:c3:be:4b:58:82:e2:38: 36:6a:50:cb:5f:6b:8b:e0:44:3e:e0:e2:25:90:57: 70:10:fe:9e:ef:a1:d6:ee:04:08:87:ca:54:73:3e: 75:29:55:01:1e:fa:8d:80:a0:21:15:35:c8:0c:7f: 64:65:7f:fc:8c:e3:7f:01:55:4f:07:2a:2e:c7:70: 3f:56:c1:1d:48:fa:f5:f5:d8:ca:c5:c7:3c:4b:1d: 8a:5c:63:75:24:3a:87:02:b9:e7:b5:26:0f:08:4e: b8:ff:17:2a:43:0e:9a:1a:9a:bf:56:d5:68:59:58: d2:16:f9:d4:25:df:9f:c4:c9:eb:68:b3:07:96:ae: 15:9f:72:9b:ea:0f:77:5e:4e:83:11:ae:ed:6f:10: 62:2b:f9:87:62:88:0c:04:9d:e4:64:ab:4c:d4:97: 24:42:5f:d4:4c:70:ac:b8:62:b3:df:97:9a:c7:59: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EE:34:53:71:F7:CD:C7:43:2D:C4:50:D6:67:B5:17:D8:3E:18:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.67.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8c:ba:da:bc:4b:ca:b2:4c:2a:82:0f:fd:af:17:cc:0c:08: a3:2c:9b:0d:65:b0:1e:92:4a:28:a6:b0:a8:a0:19:52:84:f7: 28:60:95:93:d4:94:db:9e:13:ef:96:61:ed:ed:e9:20:78:bd: 16:cb:93:72:84:33:b6:e2:46:8a:cf:ff:a2:d8:e0:6c:e4:89: b8:b7:82:74:ff:04:79:57:9a:b2:e9:84:08:71:f0:f6:4f:25: a3:2b:a7:84:c4:a2:df:a1:ee:07:9b:89:a6:49:4a:e5:25:b9: 84:69:4f:cc:ae:e2:0a:82:34:ec:0c:2e:71:d0:bb:d3:19:ba: 06:dc:83:6c:35:af:e8:77:90:55:cd:2c:b1:40:2b:61:5e:4f: eb:f1:c2:b8:01:dc:32:51:2a:62:81:b2:88:5a:79:f1:7a:ad: 09:04:cf:9b:5d:e1:59:99:49:d2:a5:d7:f4:89:cf:b1:b1:0b: db:0b:29:0a:43:d2:e7:bb:c5:d5:65:10:21:b5:40:2e:f8:20: 83:4e:c6:fe:c3:81:30:56:9a:bb:78:ea:05:be:86:63:dc:f9: 22:47:80:9d:10:6a:02:43:09:57:b2:72:d1:65:32:3e:ee:81: 05:93:ae:b1:47:28:bf:d2:76:3a:f2:06:73:fb:04:98:ed:cc: a4:c5:89:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/xgrPmhf5/6VNZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgyNzIwMzA1NVoXDTI1MTEyNTIxMzA1NVowLzEtMCsGA1UEAxMk ZDJmY2JhOTUtZDQwZC00MDZjLWJiNmItNWEyOGI5NzQzYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwmZHfIZa+RqDA1sGjYc20gcPHPTThbgEsay nMBbC5Ud+zi/Ec+ay4j1QrHr0mIGPSGoRCPru+i5SzoyVvm27G/MbQRuac+wB7XA IqiqTOKjtcO+S1iC4jg2alDLX2uL4EQ+4OIlkFdwEP6e76HW7gQIh8pUcz51KVUB HvqNgKAhFTXIDH9kZX/8jON/AVVPByoux3A/VsEdSPr19djKxcc8Sx2KXGN1JDqH ArnntSYPCE64/xcqQw6aGpq/VtVoWVjSFvnUJd+fxMnraLMHlq4Vn3Kb6g93Xk6D Ea7tbxBiK/mHYogMBJ3kZKtM1JckQl/UTHCsuGKz35eax1m6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADuNFNx983HQy3EUNZntRfYPhjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNWRjMWRhOTgtOGY1Yy0z YzBlLTljZTgtNmRjNzQ4Nzk3NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz0MqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOMutq8S8qyTCqCD/2vF8wMCKMsmw1lsB6SSiimsKigGVKE9yhglZPU lNueE++WYe3t6SB4vRbLk3KEM7biRorP/6LY4Gzkibi3gnT/BHlXmrLphAhx8PZP JaMrp4TEot+h7gebiaZJSuUluYRpT8yu4gqCNOwMLnHQu9MZugbcg2w1r+h3kFXN LLFAK2FeT+vxwrgB3DJRKmKBsohaefF6rQkEz5td4VmZSdKl1/SJz7GxC9sLKQpD 0ue7xdVlECG1QC74IINOxv7DgTBWmrt46gW+hmPc+SJHgJ0QagJDCVeyctFlMj7u gQWTrrFHKL/SdjryBnP7BJjtzKTFiSA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:40:31 2025 by rpki-client