$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e315378-0b69-3961-8922-e06afc3e94b2.roa File: 4e315378-0b69-3961-8922-e06afc3e94b2.roa (raw, json) Hash identifier: MbptQUdf5ApzI1+Sf+7MRbn9BSq4UwHirOxt8ynNn7Y= Subject key identifier: 97:81:7C:4C:8B:11:F1:DA:5A:A6:02:88:AC:7C:42:38:16:BC:7A:68 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD436AA84184046C00C0F200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e315378-0b69-3961-8922-e06afc3e94b2.roa Signing time: Tue 26 Aug 2025 22:56:07 +0000 ROA not before: Tue 26 Aug 2025 22:56:07 +0000 ROA not after: Mon 24 Nov 2025 23:56:07 +0000 asID: 31898 IP address blocks: 168.107.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:6a:a8:41:84:04:6c:00:c0:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:56:07 2025 GMT Not After : Nov 24 23:56:07 2025 GMT Subject: CN=0d4f1de2-64b5-4f15-954f-80f2a8797be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4a:6d:ed:44:ac:b5:31:13:c6:b0:f1:76:17: 24:e0:f0:f8:31:77:d4:44:71:19:e4:d7:75:55:80: 30:3e:e7:0e:44:ec:22:94:00:ea:81:37:7c:45:d5: d6:9c:61:74:7b:a1:2b:c3:7f:3a:f3:c6:66:a8:1d: 22:d6:97:e4:fa:ae:dd:2b:ac:79:f0:2c:db:db:bb: 94:1e:fd:aa:8e:f8:b9:99:b7:f3:00:02:cf:5e:94: 47:25:a8:ec:d3:59:39:24:0a:0e:fe:e3:53:ba:29: 06:cb:77:81:1c:16:fa:76:3c:11:f5:7c:61:3b:a2: d6:f5:d2:54:9e:ad:57:f6:95:8e:78:0f:8a:ec:e5: 07:c7:ac:f2:e4:95:59:7c:b3:86:62:f0:ec:cb:e6: 2c:c6:5a:26:c0:16:4c:4d:cd:ec:6e:71:0d:ec:1c: 67:46:c3:7f:d6:f0:40:79:ca:0f:c5:6c:1c:58:64: ee:27:b0:3a:c6:e8:e9:7e:bf:3d:98:22:c5:4b:1f: 0b:48:6f:4b:7b:33:5a:d8:ca:28:d7:25:ee:46:12: 62:5e:1c:54:9e:37:bb:a0:4b:92:7c:98:5b:28:50: 1d:9f:5f:18:96:72:e2:29:5a:e3:6e:af:03:5b:4d: 5d:03:6f:41:1a:64:c4:ad:75:ba:b5:4f:6f:85:41: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:81:7C:4C:8B:11:F1:DA:5A:A6:02:88:AC:7C:42:38:16:BC:7A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e315378-0b69-3961-8922-e06afc3e94b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:24:61:61:db:c4:85:84:cd:df:8e:e0:33:84:a6:be:18:8b: c8:98:35:3b:d7:64:fd:2b:73:04:f9:3b:9e:70:07:b7:2e:a2: c7:20:64:5e:1e:7f:1d:d4:3b:1f:d1:a4:18:d8:88:d8:c8:a3: 5f:14:79:94:c1:95:e4:6b:6f:16:09:a5:e7:92:9c:33:4f:b5: fd:be:9f:f3:9f:72:5a:d4:86:5e:14:ef:f6:c3:3d:54:4c:b8: 65:e5:6c:4c:08:2c:8f:b0:a6:c7:5b:d9:c0:40:33:5d:5f:36: cb:d1:1b:2b:f6:60:b4:10:28:04:8d:e1:6e:13:21:93:ce:47: 8c:bc:70:7d:5b:90:3d:81:04:75:45:83:e9:20:9b:32:4b:e3: a0:80:b8:5b:57:4e:55:98:d7:ca:b9:85:bf:2f:3d:c7:d7:d0: 83:1b:2d:cc:96:0e:ef:f1:d7:0f:a1:d5:33:30:6d:fb:49:0d: 54:a1:7b:34:fe:78:3a:11:69:5a:39:ae:0e:a3:15:df:bb:e9: 60:cf:37:44:18:48:81:ee:bf:7b:d5:eb:ab:87:01:54:38:e3: cf:bc:58:ed:6c:5e:e5:6f:59:18:4f:a8:f9:07:b9:fe:29:6e: de:81:a6:ea:90:2f:bf:48:44:4d:fa:28:da:ff:59:07:d9:34: 30:1c:02:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q2qoQYQEbADA8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTYwN1oXDTI1MTEyNDIzNTYwN1owLzEtMCsGA1UEAxMk MGQ0ZjFkZTItNjRiNS00ZjE1LTk1NGYtODBmMmE4Nzk3YmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0pt7USstTETxrDxdhck4PD4MXfURHEZ5Nd1 VYAwPucOROwilADqgTd8RdXWnGF0e6Erw38688ZmqB0i1pfk+q7dK6x58Czb27uU Hv2qjvi5mbfzAALPXpRHJajs01k5JAoO/uNTuikGy3eBHBb6djwR9XxhO6LW9dJU nq1X9pWOeA+K7OUHx6zy5JVZfLOGYvDsy+YsxlomwBZMTc3sbnEN7BxnRsN/1vBA ecoPxWwcWGTuJ7A6xujpfr89mCLFSx8LSG9LezNa2Moo1yXuRhJiXhxUnje7oEuS fJhbKFAdn18YlnLiKVrjbq8DW01dA29BGmTErXW6tU9vhUHSSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeBfEyLEfHaWqYCiKx8QjgWvHpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGUzMTUzNzgtMGI2OS0z OTYxLTg5MjItZTA2YWZjM2U5NGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIckYWHbxIWEzd+O4DOEpr4Yi8iYNTvXZP0rcwT5O55wB7cuoscgZF4e fx3UOx/RpBjYiNjIo18UeZTBleRrbxYJpeeSnDNPtf2+n/OfclrUhl4U7/bDPVRM uGXlbEwILI+wpsdb2cBAM11fNsvRGyv2YLQQKASN4W4TIZPOR4y8cH1bkD2BBHVF g+kgmzJL46CAuFtXTlWY18q5hb8vPcfX0IMbLcyWDu/x1w+h1TMwbftJDVShezT+ eDoRaVo5rg6jFd+76WDPN0QYSIHuv3vV66uHAVQ448+8WO1sXuVvWRhPqPkHuf4p bt6BpuqQL79IRE36KNr/WQfZNDAcAhU= -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:33 2025 by rpki-client