$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93bb890-e5e5-4c12-8ead-d906887daf90/8cf2b968-97f8-3d40-9457-8e48524ff719.roa File: 8cf2b968-97f8-3d40-9457-8e48524ff719.roa (raw, json) Hash identifier: Qf5XIh98mJSLHswtUALp4XEAHDpoUwkBes/Ote9wba0= Subject key identifier: 31:DC:05:37:78:00:85:F7:EA:CC:0E:BC:54:BB:10:7C:30:44:E1:92 Certificate issuer: /CN=e93bb890-e5e5-4c12-8ead-d906887daf90 Certificate serial: 010D0C9F4328584AFC1BF3EAD73924CDB5F01000 Authority key identifier: 37:8F:90:63:10:E6:28:E6:35:8D:C6:49:14:12:6A:BE:2E:F7:68:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93bb890-e5e5-4c12-8ead-d906887daf90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93bb890-e5e5-4c12-8ead-d906887daf90/8cf2b968-97f8-3d40-9457-8e48524ff719.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 17064 IP address blocks: 207.174.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93bb890-e5e5-4c12-8ead-d906887daf90/e93bb890-e5e5-4c12-8ead-d906887daf90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93bb890-e5e5-4c12-8ead-d906887daf90/e93bb890-e5e5-4c12-8ead-d906887daf90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93bb890-e5e5-4c12-8ead-d906887daf90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f3:ea:d7:39:24:cd:b5:f0:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e93bb890-e5e5-4c12-8ead-d906887daf90 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=eadf58e4-5720-47fe-85b4-5493bede2770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:38:9b:e1:db:a0:f4:89:24:1c:38:2d:ff:a9: 54:23:e1:83:f2:c8:ef:6f:05:50:f4:88:72:e6:38: 9f:23:ed:5c:0f:c5:01:5f:60:9f:a8:ca:26:30:05: 9a:83:9e:ff:2b:86:ee:15:9f:8b:af:46:9e:9c:42: 66:74:ec:5e:57:8e:eb:4a:00:99:a7:79:a6:29:6e: b2:e0:51:a7:00:cc:cb:49:ee:74:28:8e:aa:b0:a8: f0:2b:93:ed:5c:d5:64:8f:f6:51:92:e8:e4:51:09: e3:9d:e1:c2:53:16:ba:6c:94:bc:33:bb:af:f8:67: 06:fb:0c:1f:19:60:d9:7e:ae:8c:c6:fd:7a:1c:66: 9a:a8:18:7b:06:cc:42:00:3c:2a:a2:2c:45:de:f4: 56:64:e5:1d:77:14:84:da:39:6b:c7:a7:53:5f:50: d9:9c:99:e3:dd:65:f3:dc:1b:56:b2:4c:74:6c:6e: 8e:89:d4:bc:47:08:3c:24:5b:12:d4:29:4c:50:8c: da:bc:24:1b:90:50:58:d6:4d:91:ed:d8:23:f4:cf: c7:9a:b9:fb:1a:71:18:76:06:54:2e:57:f0:34:88: 91:e2:d4:9f:54:b5:05:4e:63:3b:f1:15:d5:82:5a: ac:cf:e8:d6:7e:12:0b:80:49:70:16:48:e6:a3:76: 52:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DC:05:37:78:00:85:F7:EA:CC:0E:BC:54:BB:10:7C:30:44:E1:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93bb890-e5e5-4c12-8ead-d906887daf90/8cf2b968-97f8-3d40-9457-8e48524ff719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93bb890-e5e5-4c12-8ead-d906887daf90/e93bb890-e5e5-4c12-8ead-d906887daf90.crl X509v3 Authority Key Identifier: keyid:37:8F:90:63:10:E6:28:E6:35:8D:C6:49:14:12:6A:BE:2E:F7:68:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93bb890-e5e5-4c12-8ead-d906887daf90.cer sbgp-ipAddrBlock: critical IPv4: 207.174.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ec:ce:32:cf:f1:be:04:55:4f:4b:f9:f7:c1:3f:cc:eb:96: a5:bc:a2:5e:e6:ab:58:2a:85:33:3d:e4:60:17:06:8b:5d:e8: 6c:7c:4d:5f:a4:8f:5a:06:04:d3:5d:e1:4c:8a:7f:3f:00:68: e5:41:17:3f:39:36:49:2d:ad:e0:e8:a6:e8:c2:87:85:cc:d9: 1a:31:6d:06:58:d4:b2:6f:23:0a:cc:f9:e1:75:51:cc:e8:40: 90:98:99:f1:70:37:f9:fb:99:8e:f7:68:e1:e3:f4:71:02:95: 7a:cc:a8:63:aa:a6:ad:03:e5:d1:1a:d1:4d:fc:60:52:08:0f: fe:ad:ca:b6:01:1f:5e:b4:71:1a:ea:69:1e:cb:19:14:c7:83: 12:32:55:d1:c4:03:fa:1f:ed:98:bb:8e:61:bc:1e:ec:ad:92: 82:01:30:8c:8d:0a:09:f7:be:1f:66:dc:4c:fa:30:ef:84:da: 7b:45:f3:ee:b7:cd:a7:b7:2e:34:24:85:bd:08:b2:03:2e:c9: d9:95:01:e5:3a:cf:b0:c2:c0:70:e2:fc:76:93:2f:ba:7a:11: 12:5a:ab:46:3f:42:d6:fa:67:eb:c6:31:ee:52:73:08:89:66: 84:84:81:c1:d7:e5:f8:d6:2b:71:9c:9d:91:ac:a2:d0:e2:02: 8a:77:9d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/Pq1zkkzbXwEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTkzYmI4OTAtZTVlNS00YzEyLThlYWQtZDkwNjg4N2Rh ZjkwMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZWFkZjU4ZTQtNTcyMC00N2ZlLTg1YjQtNTQ5M2JlZGUyNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTib4dug9IkkHDgt/6lUI+GD8sjvbwVQ9Ihy 5jifI+1cD8UBX2CfqMomMAWag57/K4buFZ+Lr0aenEJmdOxeV47rSgCZp3mmKW6y 4FGnAMzLSe50KI6qsKjwK5PtXNVkj/ZRkujkUQnjneHCUxa6bJS8M7uv+GcG+wwf GWDZfq6Mxv16HGaaqBh7BsxCADwqoixF3vRWZOUddxSE2jlrx6dTX1DZnJnj3WXz 3BtWskx0bG6OidS8Rwg8JFsS1ClMUIzavCQbkFBY1k2R7dgj9M/Hmrn7GnEYdgZU LlfwNIiR4tSfVLUFTmM78RXVglqsz+jWfhILgElwFkjmo3ZS+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHcBTd4AIX36swOvFS7EHwwROGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lOTNi Yjg5MC1lNWU1LTRjMTItOGVhZC1kOTA2ODg3ZGFmOTAvOGNmMmI5NjgtOTdmOC0z ZDQwLTk0NTctOGU0ODUyNGZmNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTkzYmI4OTAtZTVlNS00YzEyLThl YWQtZDkwNjg4N2RhZjkwL2U5M2JiODkwLWU1ZTUtNGMxMi04ZWFkLWQ5MDY4ODdk YWY5MC5jcmwwHwYDVR0jBBgwFoAUN4+QYxDmKOY1jcZJFBJqvi73aNUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lOTNiYjg5MC1lNWU1LTRjMTItOGVhZC1kOTA2 ODg3ZGFmOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz67cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbszjLP8b4EVU9L+ffBP8zrlqW8ol7mq1gqhTM95GAXBotd6Gx8TV+k j1oGBNNd4UyKfz8AaOVBFz85NkktreDopujCh4XM2RoxbQZY1LJvIwrM+eF1Uczo QJCYmfFwN/n7mY73aOHj9HEClXrMqGOqpq0D5dEa0U38YFIID/6tyrYBH160cRrq aR7LGRTHgxIyVdHEA/of7Zi7jmG8HuytkoIBMIyNCgn3vh9m3Ez6MO+E2ntF8+63 zae3LjQkhb0IsgMuydmVAeU6z7DCwHDi/HaTL7p6ERJaq0Y/Qtb6Z+vGMe5ScwiJ ZoSEgcHX5fjWK3GcnZGsotDiAop3nZE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:24:08 2025 by rpki-client