$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fbd960e7-ca5d-3c68-93e5-b870f77686b1.roa File: fbd960e7-ca5d-3c68-93e5-b870f77686b1.roa (raw, json) Hash identifier: iEbeoR0+kToamWJ4YXQ0pCvuUpzq9yuJIYWlEmxVoRM= Subject key identifier: 9F:6B:EB:B0:7D:72:AB:E7:F1:D4:38:E2:C3:07:7D:33:F9:9B:AB:A8 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584B7857463AC863811FD6900290 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fbd960e7-ca5d-3c68-93e5-b870f77686b1.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 36007 IP address blocks: 207.126.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:46:3a:c8:63:81:1f:d6:90:02:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=fece7eae-de91-433a-9e74-d225357db867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b4:d0:02:c4:f6:1b:14:b3:a5:cd:8f:95:dc: 57:ea:ba:1f:5b:7e:47:97:22:a1:0b:97:af:3e:7c: f8:2b:75:72:9c:b8:c4:e3:45:5a:2e:35:23:99:a6: bc:fd:5f:0c:81:d5:2e:39:9a:f8:e8:86:7f:c4:b2: 85:1b:32:6e:6a:66:08:7f:16:21:e4:09:e6:15:f8: b1:1e:ad:80:4a:67:7e:54:ec:91:20:74:1c:30:29: 6f:c1:65:14:07:f3:fa:ad:d1:6f:10:5d:59:b0:8d: 61:6c:31:1e:f1:2b:c8:61:ee:7a:2c:59:ff:cb:d3: 59:87:12:eb:a4:6a:c0:9a:32:a3:e9:2d:92:b5:08: 83:4e:02:26:ff:24:6b:14:a2:d1:c1:a1:ee:3d:c9: e9:e3:70:dd:da:e2:49:25:a5:5a:5a:21:d6:23:f9: de:ac:fa:7f:11:67:0a:5e:89:91:46:bb:6e:4f:e0: 89:4c:fa:b3:39:0d:e9:ed:6e:b7:67:88:6c:83:50: e6:1e:8a:be:6a:80:30:49:29:b9:fd:75:c3:1e:8b: 0f:ac:fc:ee:f4:e9:71:1f:34:19:4a:82:d8:06:e3: f8:e0:5c:ec:0a:29:33:73:05:27:45:39:78:1b:54: ff:c8:62:f0:09:2f:24:c4:f4:f4:d9:3b:2a:82:63: e0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6B:EB:B0:7D:72:AB:E7:F1:D4:38:E2:C3:07:7D:33:F9:9B:AB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fbd960e7-ca5d-3c68-93e5-b870f77686b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 207.126.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:88:34:b5:ed:32:44:c5:a7:6e:2d:5a:d2:6b:d6:68:8c:f4: c8:d3:8a:3a:29:73:dd:d2:63:c6:79:77:6b:31:e9:1e:79:47: 4c:20:47:70:a8:c8:80:2d:6e:10:bf:95:2c:ce:e5:ae:a2:c2: 4a:01:ba:38:23:49:bd:7f:30:70:94:53:59:d6:f1:f3:3d:20: d0:a3:fe:2d:c8:b1:36:af:01:70:81:73:98:d7:27:1a:46:b1: 25:c2:a7:41:b5:8b:87:b0:c4:33:34:16:1d:d7:a2:3d:4f:0f: 8b:9b:10:24:b2:9b:04:6a:90:c1:00:c6:3e:fb:08:c7:5d:bb: d4:1b:5c:33:ef:9f:f7:0b:a8:15:ea:76:f6:46:33:93:a9:56: 21:04:4d:67:6d:9e:5b:da:88:b2:b6:13:c8:86:67:b0:9e:c0: d6:ca:5d:ee:ba:a5:a1:ff:6e:eb:d5:4f:3e:53:98:17:41:d3: 4f:ee:89:da:9e:3f:c2:ca:e7:80:c7:8c:e9:78:ff:1f:86:9b: 08:bc:6a:37:c0:c9:9b:0c:4b:dc:8b:f9:6e:62:6f:c4:af:b6: aa:65:c5:f4:13:df:66:0d:53:9a:65:4f:07:7c:6b:dc:3d:20: ee:c1:b8:ad:0e:8b:fb:5d:53:c6:57:97:d9:e6:06:7d:e4:39: fd:bd:2d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0Y6yGOBH9aQApAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk ZmVjZTdlYWUtZGU5MS00MzNhLTllNzQtZDIyNTM1N2RiODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLTQAsT2GxSzpc2PldxX6rofW35HlyKhC5ev Pnz4K3VynLjE40VaLjUjmaa8/V8MgdUuOZr46IZ/xLKFGzJuamYIfxYh5AnmFfix Hq2ASmd+VOyRIHQcMClvwWUUB/P6rdFvEF1ZsI1hbDEe8SvIYe56LFn/y9NZhxLr pGrAmjKj6S2StQiDTgIm/yRrFKLRwaHuPcnp43Dd2uJJJaVaWiHWI/nerPp/EWcK XomRRrtuT+CJTPqzOQ3p7W63Z4hsg1DmHoq+aoAwSSm5/XXDHosPrPzu9OlxHzQZ SoLYBuP44FzsCikzcwUnRTl4G1T/yGLwCS8kxPT02TsqgmPgxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9r67B9cqvn8dQ44sMHfTP5m6uoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvZmJkOTYwZTctY2E1ZC0z YzY4LTkzZTUtYjg3MGY3NzY4NmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCINLXtMkTFp24tWtJr1miM9MjTijopc93SY8Z5d2sx6R55R0wgR3Co yIAtbhC/lSzO5a6iwkoBujgjSb1/MHCUU1nW8fM9INCj/i3IsTavAXCBc5jXJxpG sSXCp0G1i4ewxDM0Fh3Xoj1PD4ubECSymwRqkMEAxj77CMddu9QbXDPvn/cLqBXq dvZGM5OpViEETWdtnlvaiLK2E8iGZ7CewNbKXe66paH/buvVTz5TmBdB00/uidqe P8LK54DHjOl4/x+Gmwi8ajfAyZsMS9yL+W5ib8SvtqplxfQT32YNU5plTwd8a9w9 IO7BuK0Oi/tdU8ZXl9nmBn3kOf29LRE= -----END CERTIFICATE-----Generated at Mon Oct 20 04:40:46 2025 by rpki-client