$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/c7177ce2-86bc-3906-bf40-1e0fedcda713.roa File: c7177ce2-86bc-3906-bf40-1e0fedcda713.roa (raw, json) Hash identifier: r+VRcG9soI/x37SNzXj+O64tmPz9mE6kBJdRWEPx4L0= Subject key identifier: 32:C2:A1:40:EA:7C:E8:B1:3D:EB:A4:B0:3A:C8:C4:76:01:00:4A:43 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584B3821A35724DD21E4C1BAE900 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/c7177ce2-86bc-3906-bf40-1e0fedcda713.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 23528 IP address blocks: 168.203.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a3:57:24:dd:21:e4:c1:ba:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=af213c91-f3a8-46bc-a6d7-5188a5f8e2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:5c:8f:bb:52:36:8f:57:a4:7d:62:c4:e7: c7:29:6a:7e:b4:46:71:a6:1f:15:cf:10:9c:80:66: 9a:83:99:dd:9f:b4:03:be:c8:c7:63:c9:29:32:6c: 38:c8:95:19:98:11:f2:3e:f6:f9:38:a1:1e:64:0b: 33:c9:e9:c4:c2:56:eb:51:9d:27:0c:f3:4a:55:e0: 63:a9:cb:21:23:dd:2c:64:bf:11:00:f6:38:76:d7: ee:05:b1:ca:fb:28:8a:ea:65:73:7f:35:9c:ca:1e: 6f:4d:0e:77:6f:9b:08:11:ec:fc:38:20:4d:47:45: b0:e3:94:b2:37:1b:53:26:95:b3:7d:c1:6d:8e:f1: ae:98:53:be:1d:d3:a3:a3:b5:b4:32:46:b7:ff:f3: ca:62:93:e8:80:8c:a9:ec:ae:d5:72:d4:35:35:a8: 50:41:c3:e8:e4:74:dd:9b:15:f4:b3:8c:0a:20:ed: ff:6f:32:4a:1a:75:fa:c6:14:75:49:ae:b0:dc:7c: 57:22:5f:79:2f:a3:d3:88:d9:f3:58:8b:6a:b1:77: 75:3b:43:a1:cb:a1:ff:1f:3d:1a:7d:af:d7:f1:cc: eb:d1:c7:9c:79:c1:ab:10:71:ea:08:69:7c:d3:78: 52:43:f8:36:e3:17:c4:84:34:8c:9a:d5:72:1d:75: b4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C2:A1:40:EA:7C:E8:B1:3D:EB:A4:B0:3A:C8:C4:76:01:00:4A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/c7177ce2-86bc-3906-bf40-1e0fedcda713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ea:5a:aa:f0:74:ec:49:09:10:66:88:70:d7:f5:8c:46:85: 43:ba:85:dd:4a:5b:a3:7e:fb:2c:60:a8:eb:dd:39:16:7a:1e: 0b:4c:1a:ea:70:0c:91:f6:45:c2:8b:91:7e:3f:aa:99:ba:ec: 34:4c:29:4b:a3:6a:ff:8a:93:85:bb:08:64:34:a7:83:66:32: 1a:21:96:37:2f:ce:0c:e9:f2:64:fb:c5:bf:10:39:73:7f:ed: 93:67:5c:20:6f:28:9c:94:19:79:08:05:46:df:94:0c:c8:1a: 40:53:31:cb:63:bf:a3:6f:47:11:de:f5:4c:23:4e:b0:3e:2f: b0:1e:78:f3:21:35:e6:38:79:08:a4:69:bc:46:d2:12:4c:f1: be:82:18:fb:f6:65:2a:9b:94:9c:f1:2f:39:4f:28:7a:03:5f: f8:3e:0e:45:38:b6:66:89:c6:52:cc:d0:5e:ca:7c:32:9a:d9: c4:e3:a0:8a:f2:b9:93:e8:d9:05:84:f0:c5:c0:86:fd:24:4f: 3c:6a:a7:20:99:36:9d:26:33:b0:cb:8f:12:c6:ad:98:b7:71: 07:76:43:f0:1f:99:1e:e6:56:7c:ef:be:f8:bf:4c:01:04:3e: 59:11:45:69:2e:f9:2d:5e:e6:01:94:db:ea:fe:ca:1b:8c:83: 7d:f9:4e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IaNXJN0h5MG66QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YWYyMTNjOTEtZjNhOC00NmJjLWE2ZDctNTE4OGE1ZjhlMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpJcj7tSNo9XpH1ixOfHKWp+tEZxph8VzxCc gGaag5ndn7QDvsjHY8kpMmw4yJUZmBHyPvb5OKEeZAszyenEwlbrUZ0nDPNKVeBj qcshI90sZL8RAPY4dtfuBbHK+yiK6mVzfzWcyh5vTQ53b5sIEez8OCBNR0Ww45Sy NxtTJpWzfcFtjvGumFO+HdOjo7W0Mka3//PKYpPogIyp7K7VctQ1NahQQcPo5HTd mxX0s4wKIO3/bzJKGnX6xhR1Sa6w3HxXIl95L6PTiNnzWItqsXd1O0Ohy6H/Hz0a fa/X8czr0cececGrEHHqCGl803hSQ/g24xfEhDSMmtVyHXW01wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLCoUDqfOixPeuksDrIxHYBAEpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvYzcxNzdjZTItODZiYy0z OTA2LWJmNDAtMWUwZmVkY2RhNzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErqWqrwdOxJCRBmiHDX9YxGhUO6hd1KW6N++yxgqOvdORZ6HgtMGupw DJH2RcKLkX4/qpm67DRMKUujav+Kk4W7CGQ0p4NmMhohljcvzgzp8mT7xb8QOXN/ 7ZNnXCBvKJyUGXkIBUbflAzIGkBTMctjv6NvRxHe9UwjTrA+L7AeePMhNeY4eQik abxG0hJM8b6CGPv2ZSqblJzxLzlPKHoDX/g+DkU4tmaJxlLM0F7KfDKa2cTjoIry uZPo2QWE8MXAhv0kTzxqpyCZNp0mM7DLjxLGrZi3cQd2Q/AfmR7mVnzvvvi/TAEE PlkRRWku+S1e5gGU2+r+yhuMg335TgE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:09 2025 by rpki-client