$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8c9463a1-929c-31fa-a4f5-afed964ece4b.roa File: 8c9463a1-929c-31fa-a4f5-afed964ece4b.roa (raw, json) Hash identifier: YmSxYGVvq4O66hHdkeIL8oQYOOWMo8z4y31SzuFIU+Y= Subject key identifier: D9:56:83:0B:93:81:F1:F7:A0:C6:C2:88:8F:7D:FB:25:0D:F6:15:0B Certificate issuer: /CN=8312a3ad-6ed7-4c70-90af-bc1b5471ce70 Certificate serial: 010D0C9F4328584B047BFF0A2111BAC4EDD68800 Authority key identifier: 8F:3A:34:CE:33:4D:F5:49:54:C1:61:0D:F5:F5:B8:33:C6:7E:ED:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8c9463a1-929c-31fa-a4f5-afed964ece4b.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 400363 IP address blocks: 207.167.122.0/24 maxlen: 24 2606:a1c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:ff:0a:21:11:ba:c4:ed:d6:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8312a3ad-6ed7-4c70-90af-bc1b5471ce70 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=b2fd2293-9ceb-4b37-953a-f3431dc72852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:32:66:bd:e7:ce:be:00:18:90:42:5b:44:09: 3f:83:65:40:c8:a4:70:de:27:9e:52:c4:9a:23:e8: 46:ee:81:99:56:ca:cb:8d:90:5d:08:e3:0b:9d:30: b6:57:63:15:c4:9b:a8:18:65:6a:88:7d:4a:78:e9: 12:06:8b:1a:13:40:86:1b:bd:09:67:60:7b:8f:3b: 29:10:c2:15:08:8d:bc:92:bc:3f:47:79:f7:da:ad: 36:40:06:24:7f:56:47:bc:d6:38:29:58:14:c8:17: 42:b3:b6:c4:2c:8a:3a:49:25:97:79:d1:6d:ef:e9: 35:c3:ac:e7:59:21:86:bf:81:b3:01:26:35:56:f8: bc:2f:b7:7a:fe:5f:56:85:44:dd:8e:09:bf:77:37: 40:a1:45:c6:9b:96:91:31:aa:7e:ab:e1:f8:8b:75: a9:25:d6:f7:c9:bd:75:19:08:04:a9:d9:f8:d5:e6: 3f:c6:9a:05:e2:b9:d0:c4:2f:84:2b:a6:e7:91:ad: c6:10:c1:b3:de:95:a6:ba:bc:9f:a5:b6:39:ab:ad: 0d:21:6e:ed:7f:11:24:44:24:c7:3a:38:32:cb:de: a4:ab:4c:6f:4a:f0:38:eb:87:1d:09:80:e6:35:2d: fa:d3:df:a5:66:62:8d:68:9f:2d:6b:1a:d0:79:bc: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:56:83:0B:93:81:F1:F7:A0:C6:C2:88:8F:7D:FB:25:0D:F6:15:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8c9463a1-929c-31fa-a4f5-afed964ece4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.crl X509v3 Authority Key Identifier: keyid:8F:3A:34:CE:33:4D:F5:49:54:C1:61:0D:F5:F5:B8:33:C6:7E:ED:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.cer sbgp-ipAddrBlock: critical IPv4: 207.167.122.0/24 IPv6: 2606:a1c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:35:72:ba:6c:d3:9b:9b:88:6f:02:8c:ce:51:92:96:5d:8d: 8d:99:a1:0a:1f:37:98:51:46:f5:83:48:31:22:8f:4c:32:b8: 7a:f7:4d:d8:60:93:48:b3:03:7c:f0:bc:5a:d8:92:fe:62:fa: 9a:73:91:e1:68:88:24:ff:3e:21:2b:39:c7:05:f9:1d:db:92: 8e:b7:5b:c3:cd:78:67:c6:26:c9:11:3d:d5:71:b1:8b:2c:19: 23:b0:90:a8:b3:1b:0a:b3:b8:69:44:55:54:92:3d:f1:a7:0b: 7b:89:a3:10:ae:c5:87:52:a6:68:7c:a0:d2:a1:2a:6b:8f:81: d5:f5:cc:92:5e:61:1f:ba:f0:bf:a4:6e:7f:39:68:73:7c:af: e5:b3:f1:31:b9:e5:9f:c8:1c:12:ca:a9:6b:96:c0:88:2d:ed: 4f:43:19:16:17:9d:2f:a7:d5:ba:c5:8d:5d:21:b1:5d:ee:27: 24:37:f1:ab:87:8f:7a:68:b7:e2:12:6a:8b:16:fa:bc:52:77: 3f:31:0b:9d:89:81:21:22:15:c3:59:30:d5:af:6e:c8:19:6b: 71:fc:9a:c4:5d:09:e4:82:a7:6d:aa:b1:d8:d6:4c:38:6c:78: 94:09:5d:0f:94:7f:f1:2f:04:a2:83:fa:5a:8e:86:17:57:69: 49:fb:d8:dc -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEsEe/8KIRG6xO3WiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxMmEzYWQtNmVkNy00YzcwLTkwYWYtYmMxYjU0NzFj ZTcwMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YjJmZDIyOTMtOWNlYi00YjM3LTk1M2EtZjM0MzFkYzcyODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjJmvefOvgAYkEJbRAk/g2VAyKRw3ieeUsSa I+hG7oGZVsrLjZBdCOMLnTC2V2MVxJuoGGVqiH1KeOkSBosaE0CGG70JZ2B7jzsp EMIVCI28krw/R3n32q02QAYkf1ZHvNY4KVgUyBdCs7bELIo6SSWXedFt7+k1w6zn WSGGv4GzASY1Vvi8L7d6/l9WhUTdjgm/dzdAoUXGm5aRMap+q+H4i3WpJdb3yb11 GQgEqdn41eY/xpoF4rnQxC+EK6bnka3GEMGz3pWmuryfpbY5q60NIW7tfxEkRCTH Ojgyy96kq0xvSvA464cdCYDmNS3609+lZmKNaJ8taxrQebyb5wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFNlWgwuTgfH3oMbCiI99+yUN9hULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzEy YTNhZC02ZWQ3LTRjNzAtOTBhZi1iYzFiNTQ3MWNlNzAvOGM5NDYzYTEtOTI5Yy0z MWZhLWE0ZjUtYWZlZDk2NGVjZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODMxMmEzYWQtNmVkNy00YzcwLTkw YWYtYmMxYjU0NzFjZTcwLzgzMTJhM2FkLTZlZDctNGM3MC05MGFmLWJjMWI1NDcx Y2U3MC5jcmwwHwYDVR0jBBgwFoAUjzo0zjNN9UlUwWEN9fW4M8Z+7cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzEyYTNhZC02ZWQ3LTRjNzAtOTBhZi1iYzFi NTQ3MWNlNzAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAz6d6MA0E AgACMAcDBQAmBqHAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAMk1crps05ubiG8CjM5RkpZdjY2ZoQofN5hR RvWDSDEij0wyuHr3Tdhgk0izA3zwvFrYkv5i+ppzkeFoiCT/PiErOccF+R3bko63 W8PNeGfGJskRPdVxsYssGSOwkKizGwqzuGlEVVSSPfGnC3uJoxCuxYdSpmh8oNKh KmuPgdX1zJJeYR+68L+kbn85aHN8r+Wz8TG55Z/IHBLKqWuWwIgt7U9DGRYXnS+n 1brFjV0hsV3uJyQ38auHj3pot+ISaosW+rxSdz8xC52JgSEiFcNZMNWvbsgZa3H8 msRdCeSCp22qsdjWTDhseJQJXQ+Uf/EvBKKD+lqOhhdXaUn72Nw= -----END CERTIFICATE-----Generated at Mon Sep 15 21:53:22 2025 by rpki-client