$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa File: bf485a80-ca0b-337a-ab13-dda71416c121.roa (raw, json) Hash identifier: J2qwqF75mXxL721s+qk2w3PMwFizCb28mInHfUIrZ/s= Subject key identifier: 1F:74:2E:B5:F0:39:D3:D7:F8:3F:A2:D1:92:61:69:6B:2C:4F:88:FA Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B1271652724B5616454B0E100 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 9009 IP address blocks: 207.230.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:65:27:24:b5:61:64:54:b0:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=0197b187-ac1b-41a7-bb9a-c1be5842ab80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:27:22:de:d8:84:05:88:41:64:b5:bd:18:2f: f3:25:70:b0:03:9c:d6:8f:8b:89:fe:fd:84:50:5e: 86:5c:d8:57:f6:c0:4b:94:74:d1:57:4b:85:fd:1a: c4:c4:27:72:14:e8:69:de:fd:b4:91:fb:96:83:b2: bb:13:59:7c:35:1f:ee:c6:ac:5e:4e:10:51:91:ff: f1:2a:8e:ca:14:e8:ac:f8:82:c6:7b:f9:be:87:e2: 75:af:4d:68:28:01:89:b3:f5:93:b9:d6:10:64:52: ce:68:f1:e0:36:25:53:f5:95:78:70:f2:e9:9c:e8: ae:e4:a0:a9:07:d2:77:d8:da:37:b6:27:0f:74:5f: 15:df:77:b3:71:29:d1:6f:10:65:66:43:50:c8:5a: 55:52:b2:25:6e:d6:fa:41:bd:08:fb:21:10:5a:a9: 2b:1c:6f:ba:0f:26:a9:19:63:6d:ad:b2:3b:df:43: 13:a7:15:81:97:65:76:ff:d2:33:d1:de:2c:28:8d: 3c:06:3d:a5:30:24:bf:20:f8:3b:ee:19:af:cb:c0: ff:45:59:45:e4:9e:22:5d:dc:9a:7e:7f:3a:95:37: 10:9c:93:09:79:a2:ba:44:14:f0:a7:a5:d1:f6:b7: 2d:e6:2a:6b:b2:2f:e1:cc:5f:55:cd:77:0f:8c:7f: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:74:2E:B5:F0:39:D3:D7:F8:3F:A2:D1:92:61:69:6B:2C:4F:88:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 207.230.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d6:48:5e:eb:02:85:01:5c:b6:7b:9a:ad:f6:c3:d1:76:a0: 1b:c8:5b:74:ee:b4:d9:76:a0:23:7c:65:fe:4c:ef:7f:86:62: ba:be:c3:f2:b3:73:b7:a9:8f:1f:22:64:cd:82:8d:e6:03:45: fb:3c:01:e1:a1:f8:25:6e:80:c1:09:f3:76:c7:c0:83:8d:f4: 01:09:5e:e3:cf:22:48:1c:be:49:c1:09:64:a4:85:f5:8f:42: f9:84:f1:b5:fc:11:59:f0:38:9b:f3:f0:9f:39:32:98:b4:d9: a8:7b:07:43:7c:bf:c8:b8:4d:e9:0d:b2:4b:de:fd:02:8d:68: 0a:b2:6e:dc:f8:31:02:bc:2a:57:44:7f:43:94:d7:73:ce:d7: 53:81:28:a6:91:50:a0:74:58:d1:1c:66:c9:a7:f4:08:43:14: da:6a:9f:97:63:ac:05:d2:2d:c3:70:5c:39:7d:1b:8f:65:48: 9c:a2:45:50:84:1c:20:b8:04:ab:88:f1:e6:87:de:87:86:56: c5:d4:69:66:ad:37:d4:c5:98:d3:e9:14:fd:67:12:f6:8b:b5: 8d:5e:9c:9e:69:b8:fe:af:41:38:bc:20:f3:ac:3a:64:64:5f: 6d:30:e7:d0:b7:42:cc:89:9f:0f:20:96:b0:9b:a3:56:13:ca: 14:5e:4d:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWUnJLVhZFSw4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk MDE5N2IxODctYWMxYi00MWE3LWJiOWEtYzFiZTU4NDJhYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSci3tiEBYhBZLW9GC/zJXCwA5zWj4uJ/v2E UF6GXNhX9sBLlHTRV0uF/RrExCdyFOhp3v20kfuWg7K7E1l8NR/uxqxeThBRkf/x Ko7KFOis+ILGe/m+h+J1r01oKAGJs/WTudYQZFLOaPHgNiVT9ZV4cPLpnOiu5KCp B9J32No3ticPdF8V33ezcSnRbxBlZkNQyFpVUrIlbtb6Qb0I+yEQWqkrHG+6Dyap GWNtrbI730MTpxWBl2V2/9Iz0d4sKI08Bj2lMCS/IPg77hmvy8D/RVlF5J4iXdya fn86lTcQnJMJeaK6RBTwp6XR9rct5iprsi/hzF9VzXcPjH8G2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB90LrXwOdPX+D+i0ZJhaWssT4j6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYmY0ODVhODAtY2EwYi0z MzdhLWFiMTMtZGRhNzE0MTZjMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz+Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPWSF7rAoUBXLZ7mq32w9F2oBvIW3TutNl2oCN8Zf5M73+GYrq+w/Kz c7epjx8iZM2CjeYDRfs8AeGh+CVugMEJ83bHwION9AEJXuPPIkgcvknBCWSkhfWP QvmE8bX8EVnwOJvz8J85Mpi02ah7B0N8v8i4TekNskve/QKNaAqybtz4MQK8KldE f0OU13PO11OBKKaRUKB0WNEcZsmn9AhDFNpqn5djrAXSLcNwXDl9G49lSJyiRVCE HCC4BKuI8eaH3oeGVsXUaWatN9TFmNPpFP1nEvaLtY1enJ5puP6vQTi8IPOsOmRk X20w59C3QsyJnw8glrCbo1YTyhReTU4= -----END CERTIFICATE-----Generated at Fri Oct 10 23:37:52 2025 by rpki-client