$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa File: 4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa (raw, json) Hash identifier: 0iB9L7iAvakMl4KAzecdneg0pAr4WFxXrv06/qw60D0= Subject key identifier: D1:FC:1B:34:9C:BA:51:1F:EA:80:FF:73:5E:7C:ED:6C:FE:7D:3C:2C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD436522FDF9D88B7AB2C860 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa Signing time: Tue 26 Aug 2025 22:56:04 +0000 ROA not before: Tue 26 Aug 2025 22:56:04 +0000 ROA not after: Mon 24 Nov 2025 23:56:04 +0000 asID: 31898 IP address blocks: 168.107.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:65:22:fd:f9:d8:8b:7a:b2:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:56:04 2025 GMT Not After : Nov 24 23:56:04 2025 GMT Subject: CN=26df8090-b414-4e7b-9a73-b8a741a534c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:34:74:1d:ff:a3:c2:5e:64:b1:d8:b0:34:e1: e1:8d:4a:52:9c:eb:1b:cd:7b:f8:cf:37:2a:5c:65: 0e:73:a9:fe:82:5a:10:35:c7:84:60:00:3f:65:e2: c3:33:a9:0a:76:38:4f:e6:ab:1f:a2:ce:2f:a1:27: 53:f8:78:fe:b8:fc:bf:12:0d:48:a9:59:85:e7:2d: b3:b2:39:96:b3:53:76:9b:d7:49:7a:36:57:7f:67: 4b:c4:61:22:29:eb:2b:29:de:11:01:d7:92:21:bb: d0:30:9c:40:55:0a:64:0d:b8:35:50:bd:83:c5:20: 47:17:9c:f7:8c:7d:17:1f:13:8c:7a:21:2f:8a:6a: 89:5f:ac:2f:a2:98:cf:c5:7f:3b:21:da:09:4f:df: 08:27:82:2f:9b:2e:5b:78:58:95:b2:93:16:ca:88: 2d:8b:5a:db:50:be:3b:e0:65:e5:4c:82:95:bd:49: dd:8b:4e:8f:11:4b:8d:5d:89:cc:fc:02:51:d4:f1: 45:ec:2d:fa:d0:4b:0e:f3:b6:49:88:ef:bd:24:2d: 48:f6:80:fa:f4:a9:82:7a:a1:ad:d4:ea:40:b1:c1: fb:33:c9:53:e3:b2:79:13:0a:82:1b:58:0e:19:40: af:1d:a2:30:e1:65:7f:ba:29:2d:3b:49:e6:b5:83: 65:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FC:1B:34:9C:BA:51:1F:EA:80:FF:73:5E:7C:ED:6C:FE:7D:3C:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a5:5c:c3:b3:4d:91:da:69:af:ea:15:79:f5:01:ef:57:dd: c3:e2:9e:95:fc:fe:11:b9:bb:75:1c:4c:5b:09:03:f9:c4:6f: 62:5a:0a:b5:a9:fc:23:ac:a5:14:71:8c:d1:54:04:2a:4b:bc: 9b:b9:6f:86:32:d6:07:30:ec:c1:c6:6b:b3:0d:46:7d:95:fa: 7c:4c:a9:23:2b:ce:a7:51:10:1b:17:c5:a2:94:bb:65:74:bb: e3:ce:b5:60:47:34:41:e7:6e:42:24:41:25:41:31:6e:ac:ed: f4:5f:a3:c0:0d:d5:81:b9:93:0d:76:83:20:90:56:28:57:ac: 4f:a4:22:a2:a0:c7:12:56:2e:f8:c1:42:ec:1d:91:9f:c2:fc: 78:d2:94:66:e5:9b:bf:d0:1b:89:03:aa:db:ca:2a:8c:b0:85: e0:85:c3:a0:87:f5:42:44:6d:1f:7f:96:26:43:71:9e:3e:c7: 5a:71:66:9e:07:ff:5a:ec:47:01:4e:ff:d4:db:7c:d0:64:83: a9:84:8e:41:51:1a:82:f2:2c:60:c7:fe:eb:cd:ea:1f:ce:3c: 04:47:43:d0:cf:0d:1b:32:94:52:9e:32:b1:d6:51:61:e3:9c: 68:d1:4c:9c:10:e5:bb:69:79:82:26:6d:c2:75:fd:2f:05:a8: d1:ee:74:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q2Ui/fnYi3qyyGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTYwNFoXDTI1MTEyNDIzNTYwNFowLzEtMCsGA1UEAxMk MjZkZjgwOTAtYjQxNC00ZTdiLTlhNzMtYjhhNzQxYTUzNGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizR0Hf+jwl5ksdiwNOHhjUpSnOsbzXv4zzcq XGUOc6n+gloQNceEYAA/ZeLDM6kKdjhP5qsfos4voSdT+Hj+uPy/Eg1IqVmF5y2z sjmWs1N2m9dJejZXf2dLxGEiKesrKd4RAdeSIbvQMJxAVQpkDbg1UL2DxSBHF5z3 jH0XHxOMeiEvimqJX6wvopjPxX87IdoJT98IJ4Ivmy5beFiVspMWyogti1rbUL47 4GXlTIKVvUndi06PEUuNXYnM/AJR1PFF7C360EsO87ZJiO+9JC1I9oD69KmCeqGt 1OpAscH7M8lT47J5EwqCG1gOGUCvHaIw4WV/uiktO0nmtYNlvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH8GzSculEf6oD/c1587Wz+fTwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGZmYjZjZTYtNDI1Yi0z MTQwLTljZmMtMzllYjZkMjU3OTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+lXMOzTZHaaa/qFXn1Ae9X3cPinpX8/hG5u3UcTFsJA/nEb2JaCrWp /COspRRxjNFUBCpLvJu5b4Yy1gcw7MHGa7MNRn2V+nxMqSMrzqdREBsXxaKUu2V0 u+POtWBHNEHnbkIkQSVBMW6s7fRfo8AN1YG5kw12gyCQVihXrE+kIqKgxxJWLvjB QuwdkZ/C/HjSlGblm7/QG4kDqtvKKoywheCFw6CH9UJEbR9/liZDcZ4+x1pxZp4H /1rsRwFO/9TbfNBkg6mEjkFRGoLyLGDH/uvN6h/OPARHQ9DPDRsylFKeMrHWUWHj nGjRTJwQ5btpeYImbcJ1/S8FqNHudDU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:49 2025 by rpki-client