$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf1c878-0f5a-35f3-834c-70d654786038.roa File: aaf1c878-0f5a-35f3-834c-70d654786038.roa (raw, json) Hash identifier: 5mnK1F2Ei41kNqOR7mc7hlWbGCnPKSnvjc09YUIUw3g= Subject key identifier: 1D:99:F3:7E:E8:B6:C8:AC:FC:05:5B:4C:FC:A9:EE:71:A3:FC:B4:A0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79F6C716567F83995364780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf1c878-0f5a-35f3-834c-70d654786038.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 75.107.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:6c:71:65:67:f8:39:95:36:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=20222e57-a840-46f0-bee9-dbb50f2df4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:5d:0a:f7:38:e0:6f:ac:06:05:45:65:97: a5:83:a1:af:2c:08:13:cf:cc:af:51:1f:97:80:24: f7:13:37:20:c1:d6:da:38:e7:0c:a8:81:ac:24:21: 44:86:08:cc:5c:8e:24:a6:e2:f7:ce:e2:85:63:83: 68:c4:56:4b:79:3e:10:cd:83:c1:98:6a:74:69:ed: e2:d3:21:2e:f0:3b:79:92:e6:42:fb:25:56:38:2c: 77:1d:69:56:b7:c9:b6:84:7e:59:dd:a9:3d:bb:db: 09:8f:0e:e4:2d:67:1a:df:b4:31:7b:4f:77:1c:12: 7a:d4:ab:e0:c1:8e:4f:a3:17:a2:90:0b:bc:fa:d9: e7:5e:7a:ee:e3:15:92:6d:a8:5f:b7:cb:4c:84:f5: 54:c1:b5:77:6c:cb:ca:39:fa:c7:05:cc:b8:26:15: 4e:cb:dd:c1:81:8a:ee:3a:43:72:18:ad:bd:1d:52: 3e:be:42:59:84:ba:23:82:57:10:ae:8a:c4:0c:04: 8d:5e:70:e7:e7:27:7e:29:02:42:d4:32:4b:87:71: 1b:ed:2c:f5:db:cd:88:3b:a9:8a:7c:18:f2:ba:e5: 4e:cb:c7:f8:a4:d2:8e:fb:cb:5e:73:49:35:dd:36: cf:87:79:2d:d7:66:e9:00:fb:6b:07:c9:30:81:75: 40:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:99:F3:7E:E8:B6:C8:AC:FC:05:5B:4C:FC:A9:EE:71:A3:FC:B4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf1c878-0f5a-35f3-834c-70d654786038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:73:98:9f:1a:67:45:f0:54:4d:c4:4a:aa:eb:86:e9:9f:27: 60:7d:9c:d0:e7:2a:8e:8b:1c:24:d7:0c:9e:03:1d:fa:92:0e: b1:49:ed:19:0a:5e:dc:d7:1b:1b:eb:e5:39:8c:9d:b6:f5:49: 37:07:80:88:c7:4f:1f:2c:2b:84:be:58:9b:e1:6e:98:2c:8d: 40:4c:94:cf:77:7f:3e:05:20:2b:13:c7:30:e3:1d:a9:07:5c: 39:75:c3:63:12:a9:5f:4e:11:eb:55:a5:7d:f4:6e:a6:e6:da: 6d:1c:75:ef:75:57:ae:34:7b:8b:30:fb:2c:fd:c1:7c:1a:38: af:da:b6:7a:a5:1a:8c:e7:6f:2a:8a:b9:51:e5:15:cc:4a:9c: 19:c6:fe:95:f4:7f:f3:24:cc:e7:4b:90:dd:6a:c4:c5:f9:06: d7:79:8f:d1:4c:c2:84:e2:f3:bf:08:73:82:59:55:ad:f7:11: 5a:94:7d:e6:1f:1b:19:66:44:d1:5d:e7:d4:e4:2e:51:65:5c: 86:85:e3:15:4d:3b:58:65:55:17:ae:5e:fb:b8:ac:6c:72:98: 30:f5:15:66:b5:04:25:1c:24:8f:c3:46:19:3d:88:58:5f:e3: 4a:14:b0:15:b6:78:f8:13:4b:fb:13:7d:5b:9a:88:23:44:95: bc:52:47:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn2xxZWf4OZU2R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjAyMjJlNTctYTg0MC00NmYwLWJlZTktZGJiNTBmMmRmNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7JdCvc44G+sBgVFZZelg6GvLAgTz8yvUR+X gCT3EzcgwdbaOOcMqIGsJCFEhgjMXI4kpuL3zuKFY4NoxFZLeT4QzYPBmGp0ae3i 0yEu8Dt5kuZC+yVWOCx3HWlWt8m2hH5Z3ak9u9sJjw7kLWca37Qxe093HBJ61Kvg wY5PoxeikAu8+tnnXnru4xWSbahft8tMhPVUwbV3bMvKOfrHBcy4JhVOy93BgYru OkNyGK29HVI+vkJZhLojglcQrorEDASNXnDn5yd+KQJC1DJLh3Eb7Sz1282IO6mK fBjyuuVOy8f4pNKO+8tec0k13TbPh3kt12bpAPtrB8kwgXVAAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2Z837otsis/AVbTPyp7nGj/LSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWFmMWM4NzgtMGY1YS0z NWYzLTgzNGMtNzBkNjU0Nzg2MDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2vjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANRzmJ8aZ0XwVE3ESqrrhumfJ2B9nNDnKo6LHCTXDJ4DHfqSDrFJ7RkK XtzXGxvr5TmMnbb1STcHgIjHTx8sK4S+WJvhbpgsjUBMlM93fz4FICsTxzDjHakH XDl1w2MSqV9OEetVpX30bqbm2m0cde91V640e4sw+yz9wXwaOK/atnqlGoznbyqK uVHlFcxKnBnG/pX0f/MkzOdLkN1qxMX5Btd5j9FMwoTi878Ic4JZVa33EVqUfeYf GxlmRNFd59TkLlFlXIaF4xVNO1hlVReuXvu4rGxymDD1FWa1BCUcJI/DRhk9iFhf 40oUsBW2ePgTS/sTfVuaiCNElbxSR4Y= -----END CERTIFICATE-----Generated at Thu Sep 10 11:05:47 2026 by rpki-client