$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/5f27fd12-e6a7-31f5-b302-d28f4d3d3906.roa File: 5f27fd12-e6a7-31f5-b302-d28f4d3d3906.roa (raw, json) Hash identifier: CVQ7TNBJpze9KQcE3izt+Ibg/VtCuO/jmSTr4jkc7k0= Subject key identifier: DC:9F:E1:C4:4D:9B:0C:DB:CA:55:20:AC:D7:1C:AB:DD:62:0E:DE:0F Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584B18B5D4E8CE96E7D32C485F40 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/5f27fd12-e6a7-31f5-b302-d28f4d3d3906.roa Signing time: Fri 05 Sep 2025 18:53:28 +0000 ROA not before: Fri 05 Sep 2025 18:53:28 +0000 ROA not after: Thu 04 Dec 2025 19:53:28 +0000 asID: 46844 IP address blocks: 209.107.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:b5:d4:e8:ce:96:e7:d3:2c:48:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Sep 5 18:53:28 2025 GMT Not After : Dec 4 19:53:28 2025 GMT Subject: CN=65d925fa-7223-4093-b51a-7486693dd893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:75:13:19:7f:97:4f:df:6a:61:bf:8b:96: 27:cf:6d:9e:f7:e0:f4:b5:f5:84:34:3b:b1:da:51: b5:89:bc:9b:51:25:7d:57:0a:7a:f4:8d:30:de:c5: da:a7:08:b7:d5:b2:46:32:d4:65:29:88:84:75:cc: 10:1d:1d:56:f3:ff:a5:cf:dd:bf:e8:43:79:d5:12: bb:3b:fe:9d:b8:85:b5:f0:ee:55:e1:71:49:e5:c8: 84:93:5e:45:49:ac:f3:5f:d3:0d:5f:41:82:64:ac: e2:e9:2d:c8:76:dd:81:35:3f:d6:ea:81:6d:a5:bf: ce:13:cb:55:b2:8d:4e:78:30:fa:07:5c:10:70:9a: 85:b1:76:1d:3d:36:4e:6f:96:5d:ad:dd:fa:ee:4d: ad:a4:0f:69:c8:93:ea:a8:de:a5:35:d6:5e:3e:8d: e4:be:4c:9c:2d:64:3c:ff:94:8d:97:96:b4:0e:2f: 89:56:a9:3b:86:71:01:23:3b:84:42:b4:87:ae:75: f9:83:e0:85:c3:89:23:ea:d9:24:00:c7:47:fe:cc: bd:67:43:4b:71:d9:f0:7c:ce:d6:65:4d:32:86:30: 23:08:d8:dc:29:2d:71:75:fe:16:2f:a5:5c:93:cb: ed:26:c7:ce:d4:2a:4b:d7:c1:0f:c4:3e:64:e9:4d: 14:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9F:E1:C4:4D:9B:0C:DB:CA:55:20:AC:D7:1C:AB:DD:62:0E:DE:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/5f27fd12-e6a7-31f5-b302-d28f4d3d3906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:46:e4:62:05:02:91:c6:81:27:bc:4a:27:35:6b:95:b0:d3: 13:39:f4:c8:c6:df:22:d4:15:c4:1e:9b:13:b8:46:e4:c2:93: 92:dd:77:71:35:0e:e6:da:5a:62:2b:c6:80:14:11:e4:bf:c6: ec:79:b4:72:ab:9b:4f:ca:50:77:88:3f:83:8e:b4:19:00:e8: 53:d0:bd:81:f3:da:f2:8c:8c:0e:0b:4e:43:09:32:8e:06:a1: 65:8d:bb:7d:1e:30:2a:bf:ea:43:1c:12:08:85:16:d3:ba:7a: 88:e9:1d:b9:bb:18:37:f3:38:e1:d7:49:a8:8f:fc:34:d2:68: 63:16:69:5b:2c:b7:f5:24:4f:19:8c:e9:09:18:2c:4b:15:18: 77:71:df:61:92:bb:ff:4d:7b:70:d6:68:b3:26:4c:77:f8:d8: 7d:08:c6:9e:3f:a2:d9:12:ef:c5:3a:55:fa:c2:12:ef:c1:1c: 0c:39:84:79:4a:2b:9e:4c:8b:47:02:bb:b3:16:83:e6:92:b9: 0d:2e:24:66:85:ce:62:18:90:49:e1:50:77:3c:c6:3e:e5:1b: de:79:a8:86:ff:af:da:80:aa:96:de:e4:08:a2:88:03:bf:49: bd:7e:28:48:23:5d:a7:4b:da:0e:08:41:3d:ae:17:8c:fc:21: 7a:e6:e9:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYtdTozpbn0yxIX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDkwNTE4NTMyOFoXDTI1MTIwNDE5NTMyOFowLzEtMCsGA1UEAxMk NjVkOTI1ZmEtNzIyMy00MDkzLWI1MWEtNzQ4NjY5M2RkODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdp1Exl/l0/famG/i5Ynz22e9+D0tfWENDux 2lG1ibybUSV9Vwp69I0w3sXapwi31bJGMtRlKYiEdcwQHR1W8/+lz92/6EN51RK7 O/6duIW18O5V4XFJ5ciEk15FSazzX9MNX0GCZKzi6S3Idt2BNT/W6oFtpb/OE8tV so1OeDD6B1wQcJqFsXYdPTZOb5Zdrd367k2tpA9pyJPqqN6lNdZePo3kvkycLWQ8 /5SNl5a0Di+JVqk7hnEBIzuEQrSHrnX5g+CFw4kj6tkkAMdH/sy9Z0NLcdnwfM7W ZU0yhjAjCNjcKS1xdf4WL6Vck8vtJsfO1CpL18EPxD5k6U0UFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyf4cRNmwzbylUgrNccq91iDt4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvNWYyN2ZkMTItZTZhNy0z MWY1LWIzMDItZDI4ZjRkM2QzOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlG5GIFApHGgSe8Sic1a5Ww0xM59MjG3yLUFcQemxO4RuTCk5Ldd3E1 DubaWmIrxoAUEeS/xux5tHKrm0/KUHeIP4OOtBkA6FPQvYHz2vKMjA4LTkMJMo4G oWWNu30eMCq/6kMcEgiFFtO6eojpHbm7GDfzOOHXSaiP/DTSaGMWaVsst/UkTxmM 6QkYLEsVGHdx32GSu/9Ne3DWaLMmTHf42H0Ixp4/otkS78U6VfrCEu/BHAw5hHlK K55Mi0cCu7MWg+aSuQ0uJGaFzmIYkEnhUHc8xj7lG955qIb/r9qAqpbe5AiiiAO/ Sb1+KEgjXadL2g4IQT2uF4z8IXrm6Ww= -----END CERTIFICATE-----Generated at Mon Sep 8 08:15:26 2025 by rpki-client