$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87c86eb2-4a3b-348a-9316-65ffc2b7a36a.roa File: 87c86eb2-4a3b-348a-9316-65ffc2b7a36a.roa (raw, json) Hash identifier: t1z0GKRTi+xFqD+T9WJrL4CLGkMxQjxpgmRXvu+Aqus= Subject key identifier: 06:40:6D:FF:9A:1A:77:61:67:F1:53:09:C1:55:FD:A3:1D:DA:1F:6C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C51B80A692CB875D203320 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87c86eb2-4a3b-348a-9316-65ffc2b7a36a.roa Signing time: Mon 25 Aug 2025 08:18:23 +0000 ROA not before: Mon 25 Aug 2025 08:18:23 +0000 ROA not after: Sun 23 Nov 2025 09:18:23 +0000 asID: 31898 IP address blocks: 207.135.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c5:1b:80:a6:92:cb:87:5d:20:33:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:18:23 2025 GMT Not After : Nov 23 09:18:23 2025 GMT Subject: CN=53eab0bf-0ff1-4ac5-a1a5-df96e7c0b09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:a2:2b:95:9a:2b:71:d9:23:fd:aa:25:0c: 57:2b:be:4e:0d:15:05:be:78:8f:6b:e4:08:f7:5c: 04:09:10:f0:fe:b8:6d:ee:ee:bb:13:24:be:4d:0a: c8:50:07:2d:74:5e:81:3e:cc:43:30:c1:6c:c7:f6: 97:2d:78:42:c0:ca:36:22:4d:4e:53:2d:c3:cb:c7: 10:4b:4e:b5:d2:12:c7:0d:84:ec:3e:88:ac:d7:dd: 11:5d:8b:3e:11:95:20:2b:3d:33:40:24:79:96:22: db:d6:0d:60:94:34:80:a2:54:64:11:96:64:70:7d: d8:8c:dc:16:86:ca:b4:40:f3:9b:93:82:d9:d6:9a: fe:80:67:0f:f5:e6:b0:4f:56:b4:92:ce:e5:d1:45: d5:70:da:4d:1b:0d:ab:8e:11:f6:29:fd:8c:23:33: 6b:44:3a:f7:4a:76:5f:06:63:cb:e4:86:ea:e7:76: 3f:cb:d6:78:1c:16:87:b5:81:70:ec:56:6f:68:6b: 19:6e:e0:cd:97:44:76:1b:91:cf:cf:8c:9f:a4:fc: 2f:67:8e:12:af:6a:10:b6:c8:e0:07:ec:6a:29:6d: 73:a6:ff:a2:31:26:97:ed:ae:4c:75:90:47:de:8e: 71:71:14:9c:5c:df:83:02:77:68:90:43:ef:49:79: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:40:6D:FF:9A:1A:77:61:67:F1:53:09:C1:55:FD:A3:1D:DA:1F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87c86eb2-4a3b-348a-9316-65ffc2b7a36a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.135.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8c:24:2f:f9:7d:75:50:45:46:6e:7e:2e:49:7b:5a:54:8e: 10:c1:19:0f:ff:70:8b:60:6a:69:d4:f8:dd:5e:be:3a:4f:2f: 75:6e:8d:cc:18:90:96:9f:91:91:2c:2a:37:eb:59:9e:d2:4f: 78:9e:de:4a:aa:43:c6:8f:1a:cd:7a:7e:e1:fb:b3:17:7a:82: 76:23:6c:a4:84:03:76:c6:48:53:98:3b:43:79:b2:f6:f1:61: 4f:6b:38:3d:03:63:2d:aa:4f:ba:cf:25:6a:88:1d:0a:84:d6: 41:46:b9:e3:13:7c:27:32:b6:fa:0f:19:d2:f1:6f:c1:c3:c3: 10:8c:93:86:cc:13:f8:0d:3a:44:e5:6e:90:96:b4:0a:3e:7c: 05:ef:53:c7:86:b7:c1:fc:47:93:60:35:1c:b7:19:e3:f3:69: a6:6f:f8:8e:eb:1f:c6:0f:0f:1f:2d:38:a6:8e:bd:db:44:d4: 65:02:90:a7:40:46:be:5b:bf:d5:64:b1:fc:22:90:10:ce:6a: 28:ac:32:03:dc:9b:8b:05:af:97:ba:e0:ea:77:b0:8e:62:ea: 33:7c:b9:2f:3f:c5:a5:8a:c1:32:37:de:cb:eb:b9:08:15:50: af:7b:8a:c0:7d:fa:bd:02:2a:d5:28:6b:6c:a8:ac:2a:d1:8f: b4:d9:f9:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4xRuAppLLh10gMyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTgyM1oXDTI1MTEyMzA5MTgyM1owLzEtMCsGA1UEAxMk NTNlYWIwYmYtMGZmMS00YWM1LWExYTUtZGY5NmU3YzBiMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6KiK5WaK3HZI/2qJQxXK75ODRUFvniPa+QI 91wECRDw/rht7u67EyS+TQrIUActdF6BPsxDMMFsx/aXLXhCwMo2Ik1OUy3Dy8cQ S0610hLHDYTsPois190RXYs+EZUgKz0zQCR5liLb1g1glDSAolRkEZZkcH3YjNwW hsq0QPObk4LZ1pr+gGcP9eawT1a0ks7l0UXVcNpNGw2rjhH2Kf2MIzNrRDr3SnZf BmPL5Ibq53Y/y9Z4HBaHtYFw7FZvaGsZbuDNl0R2G5HPz4yfpPwvZ44Sr2oQtsjg B+xqKW1zpv+iMSaX7a5MdZBH3o5xcRScXN+DAndokEPvSXlkoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZAbf+aGndhZ/FTCcFV/aMd2h9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODdjODZlYjItNGEzYi0z NDhhLTkzMTYtNjVmZmMyYjdhMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz4cKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCMJC/5fXVQRUZufi5Je1pUjhDBGQ//cItgamnU+N1evjpPL3VujcwY kJafkZEsKjfrWZ7ST3ie3kqqQ8aPGs16fuH7sxd6gnYjbKSEA3bGSFOYO0N5svbx YU9rOD0DYy2qT7rPJWqIHQqE1kFGueMTfCcytvoPGdLxb8HDwxCMk4bME/gNOkTl bpCWtAo+fAXvU8eGt8H8R5NgNRy3GePzaaZv+I7rH8YPDx8tOKaOvdtE1GUCkKdA Rr5bv9VksfwikBDOaiisMgPcm4sFr5e64Op3sI5i6jN8uS8/xaWKwTI33svruQgV UK97isB9+r0CKtUoa2yorCrRj7TZ+Qk= -----END CERTIFICATE-----Generated at Thu Oct 9 00:56:00 2025 by rpki-client