$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa File: 2d0193d3-f77e-31d9-a549-a3f230e8d931.roa (raw, json) Hash identifier: UigjXESVdGzsocBEMLh37D0fjQ0+3bxNtFxBB4FcaqE= Subject key identifier: 06:01:68:BA:A6:9C:06:F1:3E:1D:F2:AE:96:53:A7:81:81:63:EA:7B Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f Certificate serial: 010D0C9F4328584B92DD906E4F0C93541A451E00 Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 9009 IP address blocks: 172.85.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:90:6e:4f:0c:93:54:1a:45:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=253ce889-a8c8-4291-9599-76e2bf0d6e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:53:e1:35:6c:e9:53:3d:b2:89:4e:25:e7: 03:7b:5c:41:3e:a8:78:64:a7:4c:44:05:ae:ce:61: 17:cd:54:ce:30:3c:b6:c9:77:26:52:be:f8:28:b4: f1:a4:52:80:d6:3e:4a:ac:c4:98:7d:1f:e1:6e:12: 87:4a:cd:79:aa:94:65:6d:13:aa:f6:51:49:9c:64: 31:56:34:f2:be:ba:40:f6:1c:36:cd:5d:bb:73:ea: 11:5c:65:a8:b2:0d:f0:e0:f0:7e:34:c3:25:42:db: 38:80:97:c8:0a:6d:a4:54:be:f4:1e:5e:d2:07:2d: fc:20:a0:eb:15:ce:57:6f:af:6a:f6:f0:be:ed:ca: 1b:44:ad:2c:d5:14:f8:e4:af:a6:de:2f:a8:c6:bd: 87:4a:7e:c7:a5:14:10:a9:53:b1:1c:a0:cc:84:e4: 1e:7f:2f:84:38:e7:70:0e:83:3a:bc:94:34:15:9c: 58:01:6e:8d:66:4a:46:75:82:8a:cc:62:50:d5:9e: ef:6a:8b:86:5a:63:ba:07:35:b7:0a:02:e9:95:8d: 81:77:f3:e9:34:db:d1:30:4c:0f:8c:28:26:89:9d: 09:81:6d:19:5b:bd:f2:cd:45:4a:11:4a:a0:22:d3: bb:84:63:8c:e5:e1:53:d4:ec:75:57:01:65:80:aa: 06:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:01:68:BA:A6:9C:06:F1:3E:1D:F2:AE:96:53:A7:81:81:63:EA:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl X509v3 Authority Key Identifier: keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer sbgp-ipAddrBlock: critical IPv4: 172.85.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ac:82:26:7d:20:05:8c:07:26:8e:92:27:1c:d1:ef:af:4b: 79:49:57:66:ab:32:ed:9a:88:79:98:70:81:04:19:86:46:b3: ba:b3:84:79:9b:cc:1b:10:00:2b:a6:45:e9:b8:95:9a:2c:d3: fe:95:e6:e7:6c:37:72:6f:44:87:28:a9:24:cd:88:6e:d1:94: 70:dc:28:53:2c:d7:9f:07:8b:35:c5:d9:f9:84:a6:52:18:4f: 4c:8b:12:ad:1b:ef:fe:4d:ed:ca:b1:38:b6:74:bf:aa:6c:ef: b1:cc:48:a8:f1:ed:03:a1:b7:f9:e1:eb:01:dd:29:b1:1a:7e: ad:c0:4d:37:9e:71:73:cd:60:5f:21:b9:dd:16:37:b0:53:2b: bb:ea:99:c6:19:0e:ab:dc:be:ee:6f:be:19:c6:2f:ba:73:ac: a5:bc:46:57:31:b1:1f:5d:2b:76:32:05:3c:18:5e:0d:c4:46: 02:08:8b:5d:7d:46:5f:9f:e2:d6:13:52:70:d8:ca:fd:eb:cc: b8:9b:25:37:32:1b:e5:c2:fa:28:10:63:ae:af:34:79:41:ab: 0c:ae:69:7f:78:7e:39:c5:23:a6:be:07:4f:3c:01:d4:f0:04: 1d:4f:9c:63:44:b0:81:94:02:f2:38:46:2c:60:02:98:0c:0c: e0:5a:fd:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ZBuTwyTVBpFHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1 OTFmMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MjUzY2U4ODktYThjOC00MjkxLTk1OTktNzZlMmJmMGQ2ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS1T4TVs6VM9solOJecDe1xBPqh4ZKdMRAWu zmEXzVTOMDy2yXcmUr74KLTxpFKA1j5KrMSYfR/hbhKHSs15qpRlbROq9lFJnGQx VjTyvrpA9hw2zV27c+oRXGWosg3w4PB+NMMlQts4gJfICm2kVL70Hl7SBy38IKDr Fc5Xb69q9vC+7cobRK0s1RT45K+m3i+oxr2HSn7HpRQQqVOxHKDMhOQefy+EOOdw DoM6vJQ0FZxYAW6NZkpGdYKKzGJQ1Z7vaouGWmO6BzW3CgLplY2Bd/PpNNvRMEwP jCgmiZ0JgW0ZW73yzUVKEUqgItO7hGOM5eFT1Ox1VwFlgKoGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYBaLqmnAbxPh3yrpZTp4GBY+p7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5 OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvMmQwMTkzZDMtZjc3ZS0z MWQ5LWE1NDktYTNmMjMwZThkOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2 NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj NTE0NjU5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCsgiZ9IAWMByaOkicc0e+vS3lJV2arMu2aiHmYcIEEGYZGs7qzhHmb zBsQACumRem4lZos0/6V5udsN3JvRIcoqSTNiG7RlHDcKFMs158HizXF2fmEplIY T0yLEq0b7/5N7cqxOLZ0v6ps77HMSKjx7QOht/nh6wHdKbEafq3ATTeecXPNYF8h ud0WN7BTK7vqmcYZDqvcvu5vvhnGL7pzrKW8RlcxsR9dK3YyBTwYXg3ERgIIi119 Rl+f4tYTUnDYyv3rzLibJTcyG+XC+igQY66vNHlBqwyuaX94fjnFI6a+B088AdTw BB1PnGNEsIGUAvI4RixgApgMDOBa/dg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:36:55 2025 by rpki-client