$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d67fdd97-1889-3aed-be21-4c33f4030ea7.roa File: d67fdd97-1889-3aed-be21-4c33f4030ea7.roa (raw, json) Hash identifier: dUPpcG88T15/2xLkykSMiZF4EHp8EbAY7TRl2nEVvgg= Subject key identifier: 19:40:E7:71:E8:08:04:84:2C:16:66:A3:81:D7:9C:7B:47:67:B6:F7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B7C87595C345E4EC4F7C3E820 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d67fdd97-1889-3aed-be21-4c33f4030ea7.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 107.167.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:59:5c:34:5e:4e:c4:f7:c3:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=ff430cf1-e455-4845-89cd-9c4a25f4b522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:49:11:5d:a4:a1:eb:71:d1:6d:dc:43:f3: 4f:bc:5a:e3:87:e0:22:7d:76:01:99:7d:15:4a:b8: 7c:39:39:b1:15:0a:01:12:40:3c:1f:91:a8:02:8b: 14:44:f0:fd:ad:f2:40:62:4b:f5:93:8c:6a:9e:44: 8b:ba:ee:0d:82:1d:f7:d8:fe:96:29:b0:94:0f:1c: 37:43:81:c7:1b:b6:9f:16:3a:39:00:2e:b5:e6:68: 5b:f4:fd:96:2a:b7:19:71:8e:2a:95:1f:0d:9e:57: a3:c3:93:27:92:23:89:97:04:38:c2:46:b4:5b:09: 16:21:f7:1e:f9:8a:e5:e3:bf:b1:0e:3c:79:44:b3: 20:ef:a2:71:37:ed:10:df:f2:67:d9:fc:7b:26:b7: 42:89:18:91:f1:25:c1:ee:c9:a0:a4:12:b9:b0:5e: 5a:e7:07:a2:de:0c:2e:56:ca:20:b3:70:5f:75:6b: 25:e2:ef:7c:24:4b:cc:29:4b:f8:ee:91:7b:cd:00: 3b:50:c0:6e:a6:b4:e7:52:96:74:16:21:e4:1a:fe: d9:27:14:30:9f:ea:1b:ac:13:f9:ab:d9:99:52:1e: 92:cd:f9:9e:91:5f:ed:f9:38:f7:fd:ca:ef:cd:41: 5e:09:34:e2:37:07:a8:40:0a:39:23:a2:e7:8d:48: 02:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:40:E7:71:E8:08:04:84:2C:16:66:A3:81:D7:9C:7B:47:67:B6:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d67fdd97-1889-3aed-be21-4c33f4030ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:16:1e:f3:9b:12:9d:2d:50:a1:22:1b:0b:7f:65:48:d1:55: 1e:12:1d:41:36:58:75:90:f3:38:8b:2b:d4:77:1d:03:39:96: bc:82:aa:7c:f3:74:8d:f5:a4:8d:82:c3:a3:fe:96:21:c2:12: 76:12:4c:35:f0:5b:58:77:f8:fc:3d:a3:ea:cc:60:a9:35:b2: 9d:c7:f7:98:53:9e:ce:c5:8f:90:e5:ea:a4:56:f0:6c:3f:54: b5:cd:f3:8e:b6:99:2f:9e:a1:f9:c7:2d:5e:56:66:30:cf:fc: 8f:1e:f5:4d:d4:ec:0f:4e:82:a7:a2:69:97:3a:2d:1a:01:d3: 7d:b1:8a:ec:e0:d8:d1:63:57:94:13:c6:8f:10:3a:dd:21:57: f9:c8:1f:12:c3:2f:c0:ec:3e:09:7f:1a:c7:04:42:2b:b2:1a: 91:21:73:a4:b6:67:89:86:4f:d6:b5:a7:2a:88:f8:79:d7:ca: e9:43:d1:d7:28:36:a9:1b:2e:96:29:b9:86:20:b1:19:04:63: 55:f5:ac:7f:77:17:5e:29:fe:0e:fe:85:b9:02:7c:65:13:5a: 4c:70:65:c9:eb:62:1f:08:f0:30:dd:fc:b6:5e:d5:55:b9:d5: d0:fb:14:20:49:eb:bf:19:32:27:0b:e9:ce:9e:41:1d:be:90: 5a:59:14:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h1lcNF5OxPfD6CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZmY0MzBjZjEtZTQ1NS00ODQ1LTg5Y2QtOWM0YTI1ZjRiNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogFJEV2koetx0W3cQ/NPvFrjh+AifXYBmX0V Srh8OTmxFQoBEkA8H5GoAosURPD9rfJAYkv1k4xqnkSLuu4Ngh332P6WKbCUDxw3 Q4HHG7afFjo5AC615mhb9P2WKrcZcY4qlR8Nnlejw5MnkiOJlwQ4wka0WwkWIfce +Yrl47+xDjx5RLMg76JxN+0Q3/Jn2fx7JrdCiRiR8SXB7smgpBK5sF5a5wei3gwu Vsogs3BfdWsl4u98JEvMKUv47pF7zQA7UMBuprTnUpZ0FiHkGv7ZJxQwn+obrBP5 q9mZUh6SzfmekV/t+Tj3/crvzUFeCTTiNweoQAo5I6LnjUgCrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlA53HoCASELBZmo4HXnHtHZ7b3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDY3ZmRkOTctMTg4OS0z YWVkLWJlMjEtNGMzM2Y0MDMwZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMWHvObEp0tUKEiGwt/ZUjRVR4SHUE2WHWQ8ziLK9R3HQM5lryCqnzz dI31pI2Cw6P+liHCEnYSTDXwW1h3+Pw9o+rMYKk1sp3H95hTns7Fj5Dl6qRW8Gw/ VLXN8462mS+eofnHLV5WZjDP/I8e9U3U7A9OgqeiaZc6LRoB032xiuzg2NFjV5QT xo8QOt0hV/nIHxLDL8DsPgl/GscEQiuyGpEhc6S2Z4mGT9a1pyqI+HnXyulD0dco NqkbLpYpuYYgsRkEY1X1rH93F14p/g7+hbkCfGUTWkxwZcnrYh8I8DDd/LZe1VW5 1dD7FCBJ678ZMicL6c6eQR2+kFpZFLU= -----END CERTIFICATE-----Generated at Mon Oct 20 04:10:38 2025 by rpki-client