$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2da581-41e1-31da-a819-33c8e5a40b7c.roa File: aa2da581-41e1-31da-a819-33c8e5a40b7c.roa (raw, json) Hash identifier: igpbKTgRjy4DRqzIQr+9YooOVzQVs31i7C+xg5Ur5Yg= Subject key identifier: E3:E3:B9:79:FE:13:A4:DB:DC:A2:04:0C:6F:23:A3:6D:3F:79:91:5A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B3556E745411F73457C883E40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2da581-41e1-31da-a819-33c8e5a40b7c.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 107.167.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e7:45:41:1f:73:45:7c:88:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=9bf10e24-738b-467f-ad6d-b08b05107f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:e3:c8:da:91:2c:9c:b6:09:48:6f:d2:9d: 2f:0a:45:79:f7:27:c0:92:ea:2f:af:51:ba:ea:24: 27:21:1c:12:42:a7:3c:e8:9a:45:5e:ab:a6:0e:02: e1:44:cc:4d:de:b3:bc:0b:f2:78:d6:f0:90:37:00: 16:78:93:a6:ea:cf:7c:66:ca:2a:5e:00:48:e4:49: f0:11:c5:26:c0:76:bd:db:52:80:6f:f5:ae:89:d2: 26:0f:4e:ea:74:97:e6:b1:3c:df:b2:6d:b1:33:3d: ab:c6:78:18:75:c8:ff:c4:35:da:fc:44:be:44:11: 0d:08:8d:db:9b:3d:1f:5c:9d:fe:5f:59:4d:70:d0: eb:f6:1f:67:74:e0:ce:84:a9:e4:a7:ca:37:3a:2b: 50:e5:5e:61:f1:d1:18:a8:d0:3e:1e:bd:ca:1c:da: c5:b5:44:be:3e:53:c4:b7:55:40:60:52:02:5e:ac: f0:65:39:04:09:1f:6b:bb:5e:f5:50:3f:af:4e:f2: 1f:8f:07:c2:df:17:d1:be:1d:0c:c2:5f:b1:2e:be: bb:4f:0c:f3:d9:1b:21:85:f5:ae:30:06:04:07:4f: 7f:3b:24:87:b5:e8:6c:b2:06:06:ff:4e:f7:f9:3c: d4:cc:93:9b:80:cb:b6:55:b9:e0:2f:30:a2:0a:d6: 48:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E3:B9:79:FE:13:A4:DB:DC:A2:04:0C:6F:23:A3:6D:3F:79:91:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2da581-41e1-31da-a819-33c8e5a40b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8d:74:5f:4f:56:fd:d2:b7:67:1b:ce:16:2c:25:c0:24:a1: 57:0e:7e:a0:a4:26:3c:f2:a7:75:13:8f:4e:5e:b6:9b:ba:fa: ac:75:56:2f:ca:9c:e2:3a:d1:d2:cd:e0:18:9f:49:0e:6a:b9: 18:37:ae:a5:c5:de:27:31:27:13:1c:0f:78:9e:37:35:78:d6: 43:4d:4d:a9:2a:fb:fa:0e:49:6a:1c:27:b9:24:4f:f0:00:7c: ca:a1:bc:90:fe:d4:e5:6a:db:03:5e:ca:27:ad:80:17:a8:23: 75:f3:e7:b3:97:6d:3c:12:83:b1:ce:8e:89:a1:e6:91:e7:e0: c4:3e:d8:5f:ea:eb:d4:f8:48:60:0e:ef:fe:ff:44:af:6d:f4: 65:8c:a5:c0:8f:6c:2f:d7:65:b6:0e:57:45:0f:c5:ab:09:7c: 3c:59:a4:80:ad:69:18:b1:b0:d6:c6:f1:55:d4:77:70:a6:b7: 50:58:d6:fa:0c:2d:90:fa:e6:0c:70:05:92:7d:d8:c2:a1:1d: bb:b5:bd:c4:3b:d3:89:d5:fb:ca:49:78:46:82:4b:b6:c7:ce: fc:3d:86:bc:26:97:38:7f:1d:b0:a1:5b:fc:0f:cd:d7:de:b6: 74:ec:f6:f0:7a:4b:33:c8:25:08:0c:a3:c0:2e:0a:e4:87:41: fb:cb:ce:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VudFQR9zRXyIPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OWJmMTBlMjQtNzM4Yi00NjdmLWFkNmQtYjA4YjA1MTA3ZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny7jyNqRLJy2CUhv0p0vCkV59yfAkuovr1G6 6iQnIRwSQqc86JpFXqumDgLhRMxN3rO8C/J41vCQNwAWeJOm6s98ZsoqXgBI5Enw EcUmwHa921KAb/WuidImD07qdJfmsTzfsm2xMz2rxngYdcj/xDXa/ES+RBENCI3b mz0fXJ3+X1lNcNDr9h9ndODOhKnkp8o3OitQ5V5h8dEYqNA+Hr3KHNrFtUS+PlPE t1VAYFICXqzwZTkECR9ru171UD+vTvIfjwfC3xfRvh0Mwl+xLr67Twzz2RshhfWu MAYEB09/OySHtehssgYG/073+TzUzJObgMu2VbngLzCiCtZI+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPjuXn+E6Tb3KIEDG8jo20/eZFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWEyZGE1ODEtNDFlMS0z MWRhLWE4MTktMzNjOGU1YTQwYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuNdF9PVv3St2cbzhYsJcAkoVcOfqCkJjzyp3UTj05etpu6+qx1Vi/K nOI60dLN4BifSQ5quRg3rqXF3icxJxMcD3ieNzV41kNNTakq+/oOSWocJ7kkT/AA fMqhvJD+1OVq2wNeyietgBeoI3Xz57OXbTwSg7HOjomh5pHn4MQ+2F/q69T4SGAO 7/7/RK9t9GWMpcCPbC/XZbYOV0UPxasJfDxZpICtaRixsNbG8VXUd3Cmt1BY1voM LZD65gxwBZJ92MKhHbu1vcQ704nV+8pJeEaCS7bHzvw9hrwmlzh/HbChW/wPzdfe tnTs9vB6SzPIJQgMo8AuCuSHQfvLzt0= -----END CERTIFICATE-----Generated at Sat Oct 11 07:12:30 2025 by rpki-client