$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa File: dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa (raw, json) Hash identifier: g5vanahoENF2cdCba1+Sf4uLln/QPRQdyc8IBG+kipg= Subject key identifier: A9:C0:5D:28:A6:00:9E:F0:A2:BD:92:DB:7E:1F:B3:19:71:D9:15:CA Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Certificate serial: 010D0C9F4328584B2496D1CAF3BD2A855AA19B40 Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 395915 IP address blocks: 207.2.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d1:ca:f3:bd:2a:85:5a:a1:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=46e141a5-caee-4d0e-9f0f-342b831bbda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:8d:64:c4:89:c5:2e:77:ae:02:ac:74:55: 45:29:08:80:aa:79:fb:00:ae:c4:f0:54:dc:b0:a9: 1d:d8:a5:5c:d4:50:a2:17:f8:9b:93:7c:67:f2:bd: 89:b1:08:f8:8f:08:81:36:96:74:2e:e8:da:d2:20: e1:fd:57:36:58:b7:eb:ce:dc:38:09:0a:78:c1:53: 6a:c9:43:c1:28:23:7d:65:ce:1f:f0:e6:48:e4:c4: 75:74:55:f5:00:1e:f1:cf:56:dd:5d:e6:a2:90:99: cd:ee:24:14:b8:ad:d7:db:8f:7c:b4:ac:7e:5d:59: 9f:6c:8c:ed:8a:06:53:18:c2:81:e8:24:ab:00:39: d0:27:15:88:24:65:30:ae:52:aa:0b:4b:83:72:3e: 86:5b:72:1e:78:7d:7d:b3:c2:35:6c:47:a1:06:6e: 60:ff:62:ab:0b:3b:de:57:61:2c:ec:0d:56:b3:90: e5:c5:ff:01:82:a2:1b:34:13:70:8c:88:6d:a5:62: 74:b6:60:18:d9:71:b5:57:60:e7:0c:bc:7e:1e:85: b2:c7:b1:41:29:d7:c8:30:78:48:a3:15:53:03:67: dd:e8:80:59:5b:ac:ad:40:13:5c:cc:08:8a:a1:be: a2:46:61:33:30:52:83:da:c4:58:c2:37:b8:0f:c8: 79:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:5D:28:A6:00:9E:F0:A2:BD:92:DB:7E:1F:B3:19:71:D9:15:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl X509v3 Authority Key Identifier: keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer sbgp-ipAddrBlock: critical IPv4: 207.2.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:41:6a:01:82:32:11:10:4c:0e:c5:41:e9:7f:43:de:fa:eb: 34:1f:a2:cf:3c:60:a1:4b:fa:bc:94:07:8d:32:c1:14:61:93: 32:23:74:cd:ce:d2:1d:ae:1d:c3:fa:45:0e:43:dc:f9:48:05: 0f:92:0f:bd:1b:b2:7a:7c:e6:da:1d:1d:0a:a2:3d:fb:89:da: c7:9f:96:2f:eb:8f:de:98:3e:8f:1e:e3:5a:62:79:4d:c8:c4: 85:80:04:f1:bb:4b:79:4b:33:22:3a:09:a5:96:91:db:05:db: 6c:23:52:37:6f:39:87:fe:23:0d:2c:b1:5d:03:1b:01:7e:cb: 0a:fe:c1:7c:59:63:2e:07:9d:c6:8a:64:5e:c1:c4:d7:0d:32: 7c:28:39:e7:d0:be:cf:19:63:5e:02:e4:e0:e2:5d:1f:6f:5c: 6d:dd:68:cf:3e:b8:6d:86:8e:5a:15:98:26:3a:52:a0:88:59: 2b:cf:fd:5e:f1:ea:86:85:02:1c:e7:26:9a:8e:a6:f4:b5:cc: 50:02:e0:71:4a:5b:24:75:65:46:04:14:fc:5f:95:d1:77:0f: da:af:ad:c7:6b:0c:0a:56:94:7c:8a:49:ca:3e:e7:b0:f8:93: a8:ba:b2:df:81:e0:0c:e0:97:e2:fe:17:ca:b0:c4:37:87:a1: a7:c6:76:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltHK870qhVqhm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx MWRkMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NDZlMTQxYTUtY2FlZS00ZDBlLTlmMGYtMzQyYjgzMWJiZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/GNZMSJxS53rgKsdFVFKQiAqnn7AK7E8FTc sKkd2KVc1FCiF/ibk3xn8r2JsQj4jwiBNpZ0Luja0iDh/Vc2WLfrztw4CQp4wVNq yUPBKCN9Zc4f8OZI5MR1dFX1AB7xz1bdXeaikJnN7iQUuK3X2498tKx+XVmfbIzt igZTGMKB6CSrADnQJxWIJGUwrlKqC0uDcj6GW3IeeH19s8I1bEehBm5g/2KrCzve V2Es7A1Ws5Dlxf8BgqIbNBNwjIhtpWJ0tmAY2XG1V2DnDLx+HoWyx7FBKdfIMHhI oxVTA2fd6IBZW6ytQBNczAiKob6iRmEzMFKD2sRYwje4D8h5cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnAXSimAJ7wor2S234fsxlx2RXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvZGMyMzAwYTgtMDMzNC0z YWRiLWI3ZjEtM2MyZDE4MGQ0ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh YjYzYzExZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzwJ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBBagGCMhEQTA7FQel/Q9766zQfos88YKFL+ryUB40ywRRhkzIjdM3O 0h2uHcP6RQ5D3PlIBQ+SD70bsnp85todHQqiPfuJ2sefli/rj96YPo8e41pieU3I xIWABPG7S3lLMyI6CaWWkdsF22wjUjdvOYf+Iw0ssV0DGwF+ywr+wXxZYy4HncaK ZF7BxNcNMnwoOefQvs8ZY14C5ODiXR9vXG3daM8+uG2GjloVmCY6UqCIWSvP/V7x 6oaFAhznJpqOpvS1zFAC4HFKWyR1ZUYEFPxfldF3D9qvrcdrDApWlHyKSco+57D4 k6i6st+B4Azgl+L+F8qwxDeHoafGdhc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:21:18 2025 by rpki-client