$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa File: c8f662c9-10ab-353c-9436-2b1250c74c9a.roa (raw, json) Hash identifier: CqvRzz8bB7dgKWI0pBzjHgKPkj9ow1KXxk1qe09y/CI= Subject key identifier: C3:FB:56:79:B3:AB:09:E3:ED:2F:E5:31:6A:AD:DB:78:A6:73:1B:89 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584B1806CDE06468070A97D40CA0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 54203 IP address blocks: 209.107.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:cd:e0:64:68:07:0a:97:d4:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=cfa061b8-6f3d-4fb8-97a0-0c7d4ac3acd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ec:99:6e:ba:16:2a:09:84:f7:d7:3e:fb:97: 9e:c7:e8:10:03:db:fd:e1:55:6d:b7:4b:80:cc:cd: 3f:c4:bf:0b:74:22:f2:cd:66:92:f8:15:12:a9:20: e0:a9:14:c7:1d:52:66:54:90:13:c7:c2:bc:5e:cc: 18:be:d5:a8:ff:05:67:a4:d2:a9:8a:ab:c1:e8:60: c2:01:bb:eb:d3:dd:f5:dd:c9:d7:e8:58:f5:58:5c: 50:09:aa:d0:bb:4f:23:24:6b:b6:68:8d:8b:c3:43: 8b:60:a0:56:67:17:3d:f4:a5:e1:4f:1f:3e:e6:9a: de:89:fd:43:ca:50:83:ed:58:a0:54:ca:43:68:7c: 8d:da:d5:60:a5:27:d2:66:ee:13:dd:61:b2:8b:b9: e7:99:58:1a:b6:f9:80:d9:86:52:41:af:96:95:8c: f6:9a:9d:b8:5d:0c:60:1b:2a:3a:f1:dd:6a:99:d3: c8:d0:72:42:86:6a:c9:fd:3d:d1:80:f5:a0:b3:d9: b8:4c:6d:c0:f0:68:ae:dc:68:ba:68:6b:a7:27:ae: 76:aa:22:9b:49:9b:4c:2c:7d:b4:3c:6c:76:79:11: 85:99:c5:ae:25:12:88:26:36:dc:84:21:2d:64:bd: 51:67:06:70:b2:7b:b8:b2:5b:00:13:26:a7:e3:d7: a5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FB:56:79:B3:AB:09:E3:ED:2F:E5:31:6A:AD:DB:78:A6:73:1B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:fc:b8:6c:77:2a:78:70:0d:35:2b:8f:b6:f3:05:ab:59:e2: af:34:f9:a3:1a:ae:ff:fe:29:70:a2:e1:66:1c:34:ae:8c:b4: 2f:b7:08:5f:85:bf:21:31:eb:ee:f3:d4:de:73:c0:96:c8:f5: f4:34:07:97:14:98:f5:d3:da:b7:50:99:ac:fe:5f:db:67:0c: 59:04:bb:b0:80:4b:4a:23:68:ac:3a:d0:25:ff:dc:72:58:de: 70:2f:dc:93:0b:d6:43:f2:e9:08:78:43:e9:e0:f6:8d:52:2b: 78:85:be:ee:7f:d5:68:b4:ac:76:ac:ef:98:92:30:b8:fe:82: 63:b9:5c:f9:0f:a7:64:cc:4b:58:bc:40:c9:d1:e7:01:85:73: c9:35:f6:4f:8d:47:71:d6:b1:63:91:f9:9d:f9:7d:7a:7c:32: c4:3e:15:c6:42:d6:d9:5f:48:56:52:ce:58:90:b6:0f:58:73: 72:d4:e4:89:61:54:af:ec:84:e7:f7:13:eb:9e:c2:40:5e:ab: 3e:f4:7e:6d:e8:c4:9a:78:20:dd:2e:70:53:ec:5c:ce:53:4b: 81:2c:67:02:d0:59:10:c8:1e:42:c3:f7:76:5e:ad:e0:21:12: ed:83:08:db:7e:88:64:b6:50:cb:25:cf:79:89:1c:e7:74:18: cf:76:cc:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBs3gZGgHCpfUDKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk Y2ZhMDYxYjgtNmYzZC00ZmI4LTk3YTAtMGM3ZDRhYzNhY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieyZbroWKgmE99c++5eex+gQA9v94VVtt0uA zM0/xL8LdCLyzWaS+BUSqSDgqRTHHVJmVJATx8K8XswYvtWo/wVnpNKpiqvB6GDC Abvr09313cnX6Fj1WFxQCarQu08jJGu2aI2Lw0OLYKBWZxc99KXhTx8+5preif1D ylCD7VigVMpDaHyN2tVgpSfSZu4T3WGyi7nnmVgatvmA2YZSQa+WlYz2mp24XQxg Gyo68d1qmdPI0HJChmrJ/T3RgPWgs9m4TG3A8Giu3Gi6aGunJ652qiKbSZtMLH20 PGx2eRGFmcWuJRKIJjbchCEtZL1RZwZwsnu4slsAEyan49elgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMP7Vnmzqwnj7S/lMWqt23imcxuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYzhmNjYyYzktMTBhYi0z NTNjLTk0MzYtMmIxMjUwYzc0YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL8uGx3KnhwDTUrj7bzBatZ4q80+aMarv/+KXCi4WYcNK6MtC+3CF+F vyEx6+7z1N5zwJbI9fQ0B5cUmPXT2rdQmaz+X9tnDFkEu7CAS0ojaKw60CX/3HJY 3nAv3JML1kPy6Qh4Q+ng9o1SK3iFvu5/1Wi0rHas75iSMLj+gmO5XPkPp2TMS1i8 QMnR5wGFc8k19k+NR3HWsWOR+Z35fXp8MsQ+FcZC1tlfSFZSzliQtg9Yc3LU5Ilh VK/shOf3E+uewkBeqz70fm3oxJp4IN0ucFPsXM5TS4EsZwLQWRDIHkLD93ZereAh Eu2DCNt+iGS2UMslz3mJHOd0GM92zHA= -----END CERTIFICATE-----Generated at Mon Sep 8 08:15:14 2025 by rpki-client