$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1e7e00a-bef7-3405-9935-23a707f0b71b.roa File: d1e7e00a-bef7-3405-9935-23a707f0b71b.roa (raw, json) Hash identifier: VLndHNveJiIM7Ofo+IRTzWY64AlTn9sUWeiOoXh3uwI= Subject key identifier: 2E:98:A2:92:40:25:21:05:80:66:5C:C9:93:78:66:01:44:F7:AD:E5 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B0746D46F8CD2B67D3DDE4180 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1e7e00a-bef7-3405-9935-23a707f0b71b.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 397373 IP address blocks: 207.230.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:d4:6f:8c:d2:b6:7d:3d:de:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=fc5fe99a-c5a0-4906-81f6-fc5ba127a59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:02:02:d1:3d:eb:e3:55:3d:20:ef:fa:f6: d9:65:cb:5e:8f:c3:ce:19:3d:9c:3b:b8:43:ad:38: cd:34:1e:52:39:97:48:d4:eb:53:ce:f4:2b:8b:1d: 67:10:b8:ff:8d:16:e7:74:28:a6:ee:62:b5:1f:87: 60:d9:f2:c6:7f:2c:4e:b2:2d:de:af:ae:67:c7:73: 8c:54:07:54:9d:06:f8:50:9b:df:a5:42:5e:97:ea: f3:58:d9:e4:d2:8e:ad:52:20:ca:4d:9a:94:ea:48: 60:fa:32:a1:f6:d6:e6:b9:c1:62:f5:14:a7:9d:be: 68:96:37:5c:d7:d8:6d:9f:35:9a:58:57:48:e0:50: e6:64:d6:70:82:96:2c:a9:97:58:80:fe:a9:d1:e5: 2f:0c:27:b4:6c:36:94:d4:2a:2b:2d:e2:83:93:c6: 14:3b:a8:a0:ce:5a:63:31:f0:b0:74:6f:93:e9:92: 6c:5b:40:d3:97:98:60:c9:c3:3e:9c:68:c9:2f:37: 1b:69:21:32:da:04:3d:f1:42:33:d9:14:29:6b:57: 06:f7:6a:8b:ad:0c:71:19:ae:86:2e:75:58:b3:60: 18:e6:56:4e:f6:86:fe:c0:ee:e8:5b:9f:ee:2e:c9: 47:07:a7:3a:fd:35:84:bc:91:d3:83:d3:6b:d7:47: 30:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:98:A2:92:40:25:21:05:80:66:5C:C9:93:78:66:01:44:F7:AD:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1e7e00a-bef7-3405-9935-23a707f0b71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 207.230.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:17:03:c9:51:3c:20:1e:f4:f5:40:2d:c0:c1:38:1e:8f:fd: 3f:65:29:2d:81:1e:de:f8:63:c3:bf:1b:79:fa:d2:ef:95:25: 92:c5:27:96:38:36:90:85:c5:b8:92:bc:80:c8:88:14:f3:e1: aa:c0:d1:a1:14:85:8b:ae:e5:cb:30:1d:db:88:bb:ed:b5:97: 9a:d5:82:e6:67:94:da:94:62:39:05:a4:65:03:21:26:91:04: 28:4d:d7:1a:41:5b:4a:60:18:69:8e:f3:9e:61:22:c8:95:d6: e3:f8:fb:1a:22:0a:d6:4e:22:87:91:bf:c9:ab:f9:52:09:a1: 33:1f:89:50:fe:84:24:59:37:a8:92:6a:06:87:15:79:5a:47: 12:16:87:7f:da:37:b5:37:e4:3b:7b:99:94:91:10:61:af:3a: 2d:4d:72:b2:cd:7c:57:8b:27:0b:2b:cc:e6:6e:1b:4f:ec:af: 7d:54:3b:5f:3b:ab:6c:d2:49:82:02:3e:3a:2e:41:e6:17:3d: 84:19:92:b6:02:b8:04:b2:ed:5d:d8:e1:38:77:c0:44:c6:4f: f3:b4:47:14:31:40:b4:6f:d8:8f:7d:f0:1d:13:1e:d9:8a:53: cf:73:dc:10:c4:e6:db:56:c9:2b:89:32:99:32:76:b8:06:9e: e8:c7:af:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRtRvjNK2fT3eQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZmM1ZmU5OWEtYzVhMC00OTA2LTgxZjYtZmM1YmExMjdhNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7ACAtE96+NVPSDv+vbZZctej8POGT2cO7hD rTjNNB5SOZdI1OtTzvQrix1nELj/jRbndCim7mK1H4dg2fLGfyxOsi3er65nx3OM VAdUnQb4UJvfpUJel+rzWNnk0o6tUiDKTZqU6khg+jKh9tbmucFi9RSnnb5oljdc 19htnzWaWFdI4FDmZNZwgpYsqZdYgP6p0eUvDCe0bDaU1CorLeKDk8YUO6igzlpj MfCwdG+T6ZJsW0DTl5hgycM+nGjJLzcbaSEy2gQ98UIz2RQpa1cG92qLrQxxGa6G LnVYs2AY5lZO9ob+wO7oW5/uLslHB6c6/TWEvJHTg9Nr10cw0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6YopJAJSEFgGZcyZN4ZgFE963lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDFlN2UwMGEtYmVmNy0z NDA1LTk5MzUtMjNhNzA3ZjBiNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+Z0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0XA8lRPCAe9PVALcDBOB6P/T9lKS2BHt74Y8O/G3n60u+VJZLFJ5Y4 NpCFxbiSvIDIiBTz4arA0aEUhYuu5cswHduIu+21l5rVguZnlNqUYjkFpGUDISaR BChN1xpBW0pgGGmO855hIsiV1uP4+xoiCtZOIoeRv8mr+VIJoTMfiVD+hCRZN6iS agaHFXlaRxIWh3/aN7U35Dt7mZSREGGvOi1NcrLNfFeLJwsrzOZuG0/sr31UO187 q2zSSYICPjouQeYXPYQZkrYCuASy7V3Y4Th3wETGT/O0RxQxQLRv2I998B0THtmK U89z3BDE5ttWySuJMpkydrgGnujHr/s= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:39 2025 by rpki-client