$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4374ed77-fe24-3463-832e-9cf2154ac15c.roa File: 4374ed77-fe24-3463-832e-9cf2154ac15c.roa (raw, json) Hash identifier: aYKTL3aO3sTtbLSRhlOfHpYnMZDZhQG6uGnFu1mFHqQ= Subject key identifier: 03:CA:53:CC:FB:F5:47:55:27:DE:90:3B:CF:F7:53:E4:45:72:30:41 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC4CA2C8631DCFF75D61C980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4374ed77-fe24-3463-832e-9cf2154ac15c.roa Signing time: Wed 20 Aug 2025 21:05:57 +0000 ROA not before: Wed 20 Aug 2025 21:05:57 +0000 ROA not after: Tue 18 Nov 2025 22:05:57 +0000 asID: 31898 IP address blocks: 207.127.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:a2:c8:63:1d:cf:f7:5d:61:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 21:05:57 2025 GMT Not After : Nov 18 22:05:57 2025 GMT Subject: CN=c40af766-3c56-4b24-b8d6-7a093af633b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f2:b3:25:64:22:e1:54:ba:8b:3e:0e:4e:ba: 9a:de:fc:dc:20:9c:2e:4a:34:df:29:92:01:3e:0f: 94:7e:6c:14:ae:5f:3d:1e:df:90:d7:61:7f:fa:0b: 46:a4:63:63:a9:33:9f:d2:65:c1:69:a0:96:b3:24: 38:9f:15:99:f8:bb:7e:13:59:3c:e8:36:27:ab:8b: d2:a1:46:1d:9f:c7:f8:70:db:7d:9e:2d:db:7d:58: 34:e9:ba:a5:7a:4d:51:dc:b3:83:0f:d3:1e:ff:c1: 66:aa:0a:67:0e:2b:cd:c5:a6:02:1b:d4:7b:fc:fc: f0:a4:9f:89:ef:8b:5f:35:d7:7b:31:6a:ae:89:30: 02:f2:74:b5:44:0d:91:dd:76:2e:07:2f:35:63:66: 08:f6:12:58:4f:2b:09:4a:30:02:0a:a6:1d:0d:79: b9:df:38:a7:c5:92:67:96:af:4c:d2:40:7e:d1:13: 70:66:4d:36:c4:7d:11:ca:9c:b7:d5:71:80:72:c0: e3:40:73:be:d3:d8:a7:65:4a:b0:30:09:66:ac:45: 0c:ec:74:98:8c:31:0d:65:c6:df:c6:04:70:7b:40: 8a:cb:75:fa:31:e6:8c:12:8d:7b:7f:61:e9:4e:73: 64:74:d9:de:40:9d:73:a5:54:c4:0f:19:4d:23:7e: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CA:53:CC:FB:F5:47:55:27:DE:90:3B:CF:F7:53:E4:45:72:30:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4374ed77-fe24-3463-832e-9cf2154ac15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.127.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:a9:8c:25:9a:1e:72:90:8b:b6:ae:1d:71:69:6b:b2:f2:c0: da:54:5b:e0:4a:1b:fa:a5:f5:8d:99:b4:c8:b8:53:72:5f:18: 6d:fa:eb:07:af:44:1b:b1:f0:7f:35:98:9a:ee:b7:77:04:50: 30:67:f8:88:51:52:75:7b:3b:1c:6d:8b:53:23:e3:c7:60:39: dc:69:ba:b9:49:d5:83:72:12:ae:9a:10:f6:38:1a:71:c2:d2: ee:00:3f:01:fa:b2:3f:0b:75:5c:d5:db:eb:6b:00:00:d2:93: dd:5e:f3:a5:3e:c7:49:df:68:d6:03:30:48:46:6c:1e:a1:c0: 33:8b:67:16:f2:ab:16:6c:20:b6:82:ad:b1:11:3b:e6:df:6e: e2:54:28:f1:37:41:73:89:58:eb:6f:53:1c:b0:7b:09:d7:89: a4:45:76:bc:ae:ea:46:33:2a:1c:bd:d4:a5:76:f4:0d:cd:e6: 5c:bb:c8:4c:bc:09:7d:9f:ca:22:0f:dd:d1:28:47:2b:2a:29: 33:08:79:5a:0f:dc:b4:8f:7a:52:0e:77:38:b5:77:fd:d9:12: 6a:e9:a0:d3:c7:d0:4d:ba:9f:8e:a5:18:1d:e0:23:e3:e4:ab: 14:a5:74:6f:cb:70:a3:11:d7:be:91:eb:e7:3e:c9:57:67:84: 2c:c1:73:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTKLIYx3P911hyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDIxMDU1N1oXDTI1MTExODIyMDU1N1owLzEtMCsGA1UEAxMk YzQwYWY3NjYtM2M1Ni00YjI0LWI4ZDYtN2EwOTNhZjYzM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPKzJWQi4VS6iz4OTrqa3vzcIJwuSjTfKZIB Pg+UfmwUrl89Ht+Q12F/+gtGpGNjqTOf0mXBaaCWsyQ4nxWZ+Lt+E1k86DYnq4vS oUYdn8f4cNt9ni3bfVg06bqlek1R3LODD9Me/8FmqgpnDivNxaYCG9R7/PzwpJ+J 74tfNdd7MWquiTAC8nS1RA2R3XYuBy81Y2YI9hJYTysJSjACCqYdDXm53zinxZJn lq9M0kB+0RNwZk02xH0Rypy31XGAcsDjQHO+09inZUqwMAlmrEUM7HSYjDENZcbf xgRwe0CKy3X6MeaMEo17f2HpTnNkdNneQJ1zpVTEDxlNI35WLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPKU8z79UdVJ96QO8/3U+RFcjBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDM3NGVkNzctZmUyNC0z NDYzLTgzMmUtOWNmMjE1NGFjMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz39sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKupjCWaHnKQi7auHXFpa7LywNpUW+BKG/ql9Y2ZtMi4U3JfGG366wev RBux8H81mJrut3cEUDBn+IhRUnV7Oxxti1Mj48dgOdxpurlJ1YNyEq6aEPY4GnHC 0u4APwH6sj8LdVzV2+trAADSk91e86U+x0nfaNYDMEhGbB6hwDOLZxbyqxZsILaC rbERO+bfbuJUKPE3QXOJWOtvUxywewnXiaRFdryu6kYzKhy91KV29A3N5ly7yEy8 CX2fyiIP3dEoRysqKTMIeVoP3LSPelIOdzi1d/3ZEmrpoNPH0E26n46lGB3gI+Pk qxSldG/LcKMR176R6+c+yVdnhCzBc0o= -----END CERTIFICATE-----Generated at Wed Nov 5 16:52:15 2025 by rpki-client