$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa File: 9f402ac2-805b-33f9-8973-e24027b97258.roa (raw, json) Hash identifier: YATmkJu2TDcgS7x61hvBytFBplQ1y7D7+ILyqq5dJ0Y= Subject key identifier: 89:73:99:79:63:7F:F7:94:C4:92:FA:90:B2:68:DC:3F:02:05:24:39 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD436D5B6BB0AD4751484F48 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa Signing time: Tue 26 Aug 2025 22:56:08 +0000 ROA not before: Tue 26 Aug 2025 22:56:08 +0000 ROA not after: Mon 24 Nov 2025 23:56:08 +0000 asID: 31898 IP address blocks: 168.107.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:6d:5b:6b:b0:ad:47:51:48:4f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:56:08 2025 GMT Not After : Nov 24 23:56:08 2025 GMT Subject: CN=9123c1b1-6eee-4382-b0c1-1a0ab4af74f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:eb:c8:d4:3b:80:25:8b:07:f4:d4:ec:6e: 2c:13:ee:ca:77:fb:81:a4:f1:73:ef:93:0c:a9:23: cc:93:cf:5f:8c:49:10:6e:65:aa:5e:b3:a2:ee:6b: e0:46:92:1f:52:d7:1d:bf:3d:72:dd:72:f8:ae:9e: 92:0b:9a:c9:6f:33:47:01:f3:17:6e:01:cc:a0:65: a5:62:00:8f:f8:25:fb:20:e1:28:5b:63:49:07:20: eb:5a:c4:ee:6c:3c:e8:4a:84:f1:35:1e:18:75:16: fb:9c:ac:ae:61:9b:35:b1:5b:f9:2b:74:c9:d7:59: 1f:29:fb:12:7e:31:8b:3f:1b:68:c1:90:49:8e:9d: 18:66:e5:9c:c0:3d:c4:e8:4c:4a:e0:71:58:63:d7: 65:8c:73:10:df:5b:fc:3e:b6:d3:e0:6b:ca:c7:48: 77:d8:85:82:0e:a2:3a:4d:f4:c0:f0:01:d2:e6:e7: 16:24:08:78:94:e2:32:0f:90:e9:e1:ab:fe:b9:ef: b1:67:62:65:9c:75:bd:bc:21:c1:b0:1a:45:65:e7: cf:05:f8:3b:a0:63:29:a6:15:a0:b9:cf:a3:49:34: ef:36:43:38:b6:b6:11:ee:fa:59:1e:07:da:e0:98: 9a:5d:fc:1e:2c:ac:f3:72:47:25:a3:05:e7:e9:5d: d5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:73:99:79:63:7F:F7:94:C4:92:FA:90:B2:68:DC:3F:02:05:24:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e6:05:6e:88:26:fa:b1:e1:39:8c:51:99:e2:f9:ba:0e:8a: 48:72:72:dc:0a:29:ea:71:72:08:8a:5f:93:2c:ab:c3:7c:3a: 0d:05:e6:eb:91:84:eb:db:cc:1f:f1:14:fc:27:36:c2:c6:ee: a7:fd:96:67:a7:73:2d:12:5e:05:b4:31:36:73:e4:de:aa:b1: d5:8a:73:cc:93:58:e2:87:00:8f:23:0a:a3:e3:ed:c5:fa:ae: 1a:7d:85:29:69:8e:7b:e8:55:11:8e:41:52:06:61:14:6b:c9: 57:7f:7b:76:65:3f:7f:43:20:21:5d:94:f2:f2:70:99:32:a7: e6:7f:99:70:c8:06:97:91:8a:93:f0:e9:7d:9e:9b:a2:6e:82: eb:1c:4e:b8:b1:fb:9f:fe:a4:29:29:46:35:4e:56:75:7c:ea: 84:84:32:db:a7:86:49:d8:11:a5:9c:14:7b:27:a8:46:8e:9b: 4b:f7:56:d9:a1:37:a5:50:6b:2d:59:29:a6:e7:0f:15:54:9b: 18:cb:0f:44:bd:f4:3d:da:23:ac:b5:b2:9f:63:f6:f1:81:bb: 3c:e0:54:88:24:45:fa:f8:10:4f:dd:02:ed:6a:ae:09:f6:36: bd:43:cc:c2:f3:9b:20:2f:f0:f2:3d:b6:26:70:3c:18:92:f2: 21:d1:e8:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q21ba7CtR1FIT0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTYwOFoXDTI1MTEyNDIzNTYwOFowLzEtMCsGA1UEAxMk OTEyM2MxYjEtNmVlZS00MzgyLWIwYzEtMWEwYWI0YWY3NGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4zryNQ7gCWLB/TU7G4sE+7Kd/uBpPFz75MM qSPMk89fjEkQbmWqXrOi7mvgRpIfUtcdvz1y3XL4rp6SC5rJbzNHAfMXbgHMoGWl YgCP+CX7IOEoW2NJByDrWsTubDzoSoTxNR4YdRb7nKyuYZs1sVv5K3TJ11kfKfsS fjGLPxtowZBJjp0YZuWcwD3E6ExK4HFYY9dljHMQ31v8PrbT4GvKx0h32IWCDqI6 TfTA8AHS5ucWJAh4lOIyD5Dp4av+ue+xZ2JlnHW9vCHBsBpFZefPBfg7oGMpphWg uc+jSTTvNkM4trYR7vpZHgfa4JiaXfweLKzzckclowXn6V3VuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlzmXljf/eUxJL6kLJo3D8CBSQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWY0MDJhYzItODA1Yi0z M2Y5LTg5NzMtZTI0MDI3Yjk3MjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzmBW6IJvqx4TmMUZni+boOikhyctwKKepxcgiKX5Msq8N8Og0F5uuR hOvbzB/xFPwnNsLG7qf9lmency0SXgW0MTZz5N6qsdWKc8yTWOKHAI8jCqPj7cX6 rhp9hSlpjnvoVRGOQVIGYRRryVd/e3ZlP39DICFdlPLycJkyp+Z/mXDIBpeRipPw 6X2em6JuguscTrix+5/+pCkpRjVOVnV86oSEMtunhknYEaWcFHsnqEaOm0v3Vtmh N6VQay1ZKabnDxVUmxjLD0S99D3aI6y1sp9j9vGBuzzgVIgkRfr4EE/dAu1qrgn2 Nr1DzMLzmyAv8PI9tiZwPBiS8iHR6Jw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:33:14 2025 by rpki-client