$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/7aa4b857-43f8-3e23-b1c1-0f3cea0bd3cb.roa File: 7aa4b857-43f8-3e23-b1c1-0f3cea0bd3cb.roa (raw, json) Hash identifier: 4jEi4qQ8KSgqoHga4eXjnmUpqnRgOrz6eXcgCAMQSH0= Subject key identifier: D0:76:4C:9F:6E:81:13:34:7F:F1:D8:35:CC:6A:3A:1E:21:8A:77:09 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584B5DD1EB4335C40F99FFF61380 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/7aa4b857-43f8-3e23-b1c1-0f3cea0bd3cb.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 14618 IP address blocks: 167.17.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:eb:43:35:c4:0f:99:ff:f6:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=ceea4489-57ef-4c9f-b708-412c19ada708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:ce:63:1d:7a:b1:36:6a:e0:26:6b:83:68: 1c:4f:ff:71:ec:75:d8:cd:77:96:dc:71:b3:f6:bf: c2:33:ef:43:6c:8e:6b:0a:5b:30:16:82:23:69:49: b0:bd:21:24:64:e3:9c:9a:81:97:5f:87:82:71:1b: a4:e2:a7:c3:3f:4c:61:3d:7f:e7:df:86:1a:49:1c: 98:c1:38:27:39:2f:95:33:fc:a2:a6:97:bf:95:8f: f6:dd:3d:1c:ab:2e:5c:a4:fb:60:e7:fc:fc:e7:ad: 3e:aa:37:13:46:29:c2:a6:aa:ec:b7:51:2a:b2:05: 48:1a:21:ae:d6:27:14:cd:88:0e:3c:51:73:63:de: 36:6c:52:72:68:61:90:f2:31:3f:37:c7:a8:b5:0a: a8:ab:d6:3a:33:c6:c5:be:04:2b:67:b1:78:f8:77: 8d:38:bf:5c:f5:10:ef:be:32:39:42:6b:37:2e:58: 3b:5c:3b:52:54:e9:cd:a2:fa:8a:66:72:5a:cc:99: 4a:68:b4:c3:a6:6c:d4:5f:8f:c9:ab:8a:05:00:e6: 7d:8e:ff:7b:15:18:23:9b:8d:fd:36:34:c9:af:03: 15:49:f4:38:6d:81:65:3c:ca:d6:12:ee:cc:98:64: 09:c9:16:70:67:b0:73:e6:8b:88:a7:55:7d:25:72: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:76:4C:9F:6E:81:13:34:7F:F1:D8:35:CC:6A:3A:1E:21:8A:77:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/7aa4b857-43f8-3e23-b1c1-0f3cea0bd3cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 167.17.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:30:d5:90:8c:b7:a8:70:08:50:72:89:6e:e3:91:81:46:af: b0:19:40:4d:49:b0:d7:4b:75:c7:33:fd:82:cb:7c:45:80:2b: 8f:34:ce:b4:0d:fc:c4:f9:f9:a6:19:93:e5:0b:a6:49:62:b5: f8:5f:ca:02:7a:ec:34:b1:7d:ee:da:b6:da:66:67:15:36:67: d1:1f:74:12:30:d3:bc:65:a1:8e:b1:73:fd:9e:be:1b:d7:9d: aa:1d:91:16:37:b0:65:72:57:f5:ea:9d:01:9e:6a:b9:35:48: 8d:d9:6a:24:f4:ff:a3:f8:cf:c5:33:95:26:fa:9d:cf:43:98: 2f:1a:93:d3:60:65:ab:72:21:1c:9a:8e:54:42:8d:1d:52:02: 67:7d:b6:d5:03:fd:da:2e:56:29:ec:9f:85:ff:92:c0:88:5c: 17:cd:a3:18:69:be:a3:da:f0:75:42:0d:18:c0:d7:ad:aa:f0: 5c:91:36:61:da:74:31:55:c7:bc:8e:95:59:02:0a:bb:e8:b4: 66:a1:63:ea:71:c1:7a:85:da:25:de:f3:cf:fa:01:63:2b:9a: b1:27:58:29:b3:69:0f:47:d0:d9:a6:53:d3:16:fc:e3:a3:56: 5e:33:c8:5e:01:55:4c:df:ba:a9:1e:78:06:53:cc:65:0c:27: 4f:82:02:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0etDNcQPmf/2E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2VlYTQ0ODktNTdlZi00YzlmLWI3MDgtNDEyYzE5YWRhNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVrOYx16sTZq4CZrg2gcT/9x7HXYzXeW3HGz 9r/CM+9DbI5rClswFoIjaUmwvSEkZOOcmoGXX4eCcRuk4qfDP0xhPX/n34YaSRyY wTgnOS+VM/yippe/lY/23T0cqy5cpPtg5/z8560+qjcTRinCpqrst1EqsgVIGiGu 1icUzYgOPFFzY942bFJyaGGQ8jE/N8eotQqoq9Y6M8bFvgQrZ7F4+HeNOL9c9RDv vjI5Qms3Llg7XDtSVOnNovqKZnJazJlKaLTDpmzUX4/Jq4oFAOZ9jv97FRgjm439 NjTJrwMVSfQ4bYFlPMrWEu7MmGQJyRZwZ7Bz5ouIp1V9JXLWFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNB2TJ9ugRM0f/HYNcxqOh4hincJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvN2FhNGI4NTctNDNmOC0z ZTIzLWIxYzEtMGYzY2VhMGJkM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGpxHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0w1ZCMt6hwCFByiW7jkYFGr7AZQE1JsNdLdccz/YLLfEWAK480zrQN /MT5+aYZk+ULpklitfhfygJ67DSxfe7attpmZxU2Z9EfdBIw07xloY6xc/2evhvX naodkRY3sGVyV/XqnQGeark1SI3ZaiT0/6P4z8UzlSb6nc9DmC8ak9NgZatyIRya jlRCjR1SAmd9ttUD/douVinsn4X/ksCIXBfNoxhpvqPa8HVCDRjA162q8FyRNmHa dDFVx7yOlVkCCrvotGahY+pxwXqF2iXe88/6AWMrmrEnWCmzaQ9H0NmmU9MW/OOj Vl4zyF4BVUzfuqkeeAZTzGUMJ0+CAng= -----END CERTIFICATE-----Generated at Wed Nov 5 09:31:00 2025 by rpki-client