$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa File: 2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa (raw, json) Hash identifier: QfR2OwkwUc51cj5lf6lwkbyfQG9HUQu0HTEAdCIEboE= Subject key identifier: 96:26:93:C0:53:41:CF:35:B8:FE:77:E1:85:D6:DA:F8:0A:96:ED:E7 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584B5DD1DA4BDA97EFEA22B2BBB8 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 8011 IP address blocks: 167.17.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:da:4b:da:97:ef:ea:22:b2:bb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=ede3de98-38a0-4b51-908a-571a7ca59612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:52:04:b6:81:e2:55:9a:61:78:81:b6:31:5e: 66:06:da:4a:6d:7d:ef:55:49:6f:50:03:fa:3e:d3: 6e:60:9c:1a:cf:a5:1e:63:84:80:b8:7e:3a:e7:df: 58:54:d2:07:44:18:ad:71:8d:b4:b3:60:ac:87:3f: 40:96:32:ac:14:56:82:be:7a:8f:1b:28:de:ef:b3: bb:b5:7e:0a:99:d2:d0:af:75:1c:b6:12:10:91:88: 1d:67:81:88:bc:79:cd:57:c1:d0:d5:44:1b:9b:7e: 45:5d:68:33:ee:6f:65:f8:d6:f5:f9:0c:67:4f:9b: f3:3d:8c:82:39:25:d0:85:64:c4:5d:60:a5:aa:d6: 12:8b:b2:89:ec:1c:22:08:59:21:66:e2:94:ba:23: c7:56:e6:e9:57:bc:77:66:15:15:77:dc:b2:d1:53: ee:68:6a:e0:4d:3e:49:db:c6:d8:1c:34:f7:fb:7d: 89:42:64:47:f9:14:4b:9f:1d:6c:a6:cf:d7:5b:16: 3d:74:a3:2b:68:46:07:26:2a:2f:de:5a:86:c3:5a: d2:00:ef:00:7e:1d:82:43:71:01:c1:23:45:4b:e9: ac:65:7a:b7:9c:37:f1:7d:0d:f7:c4:48:14:e9:e8: 05:ab:62:92:a5:18:f4:b0:c7:69:d9:bb:e4:4a:0f: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:26:93:C0:53:41:CF:35:B8:FE:77:E1:85:D6:DA:F8:0A:96:ED:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 167.17.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d9:b1:40:5c:54:39:53:80:76:68:9c:03:4d:ee:66:35:c1: cf:96:5b:39:52:4b:04:64:86:e8:40:8c:55:61:32:58:50:70: 81:4a:d0:70:81:8f:2f:43:df:03:57:5a:43:ce:14:d5:94:1e: d6:fa:ac:80:db:14:84:ee:50:e5:1c:61:a5:dd:8c:48:b4:8f: 39:a1:c5:32:af:6c:1d:ae:f7:e6:c1:73:b7:85:18:89:60:ba: 09:35:03:65:f0:77:68:ab:93:8c:4b:a1:be:5f:ce:65:06:e0: e0:37:fc:e4:eb:75:d0:4c:ec:7c:f1:cd:7d:4f:65:6b:4b:cc: a1:f5:42:02:76:0c:8b:75:b3:a2:78:7a:10:b4:b1:6f:52:3e: 6b:68:70:ae:cb:e3:05:77:ec:87:7a:6b:e5:1e:46:a5:4e:2c: b7:57:8a:65:03:ae:29:1a:07:4a:3d:bb:aa:cf:ad:68:84:30: ff:71:53:0f:4b:99:e9:01:52:f2:48:4f:ec:bd:e5:08:16:82: 46:f5:d0:5a:54:3e:f7:7e:9a:32:a7:87:b1:0c:08:99:bc:35: 9c:ae:7b:a4:00:34:9f:bd:db:fd:ae:50:ee:e9:44:dc:13:7c: 10:b7:c2:b0:45:fb:fc:8a:94:f4:16:b1:d2:ce:65:da:7d:c8: 24:0f:98:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0dpL2pfv6iKyu7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZWRlM2RlOTgtMzhhMC00YjUxLTkwOGEtNTcxYTdjYTU5NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1IEtoHiVZpheIG2MV5mBtpKbX3vVUlvUAP6 PtNuYJwaz6UeY4SAuH46599YVNIHRBitcY20s2Cshz9AljKsFFaCvnqPGyje77O7 tX4KmdLQr3UcthIQkYgdZ4GIvHnNV8HQ1UQbm35FXWgz7m9l+Nb1+QxnT5vzPYyC OSXQhWTEXWClqtYSi7KJ7BwiCFkhZuKUuiPHVubpV7x3ZhUVd9yy0VPuaGrgTT5J 28bYHDT3+32JQmRH+RRLnx1sps/XWxY9dKMraEYHJiov3lqGw1rSAO8Afh2CQ3EB wSNFS+msZXq3nDfxfQ33xEgU6egFq2KSpRj0sMdp2bvkSg/vyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYmk8BTQc81uP534YXW2vgKlu3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMmZmYjM1ZDQtMGMwZC0z MzY0LTg4MWMtNGMxZTU4NDIyZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGpxHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3ZsUBcVDlTgHZonANN7mY1wc+WWzlSSwRkhuhAjFVhMlhQcIFK0HCB jy9D3wNXWkPOFNWUHtb6rIDbFITuUOUcYaXdjEi0jzmhxTKvbB2u9+bBc7eFGIlg ugk1A2Xwd2irk4xLob5fzmUG4OA3/OTrddBM7HzxzX1PZWtLzKH1QgJ2DIt1s6J4 ehC0sW9SPmtocK7L4wV37Id6a+UeRqVOLLdXimUDrikaB0o9u6rPrWiEMP9xUw9L mekBUvJIT+y95QgWgkb10FpUPvd+mjKnh7EMCJm8NZyue6QANJ+92/2uUO7pRNwT fBC3wrBF+/yKlPQWsdLOZdp9yCQPmH0= -----END CERTIFICATE-----Generated at Fri Oct 10 17:28:47 2025 by rpki-client