$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/cd9be427-039f-3881-bd0f-2810548b0c3b.roa File: cd9be427-039f-3881-bd0f-2810548b0c3b.roa (raw, json) Hash identifier: +9eV0/u4QAkgQmtt397DeZIWNnpjdpRGfSekLnNBUXY= Subject key identifier: 05:6F:86:1B:8C:D6:3C:77:35:C2:70:04:8C:E7:BA:7E:17:73:55:DD Certificate issuer: /CN=8e262294-f3c0-4a56-8c97-786e6ae2f14c Certificate serial: 010D0C9F4328584B84E787F20EDB715729463E80 Authority key identifier: 27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/cd9be427-039f-3881-bd0f-2810548b0c3b.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 7018 IP address blocks: 207.228.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:87:f2:0e:db:71:57:29:46:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e262294-f3c0-4a56-8c97-786e6ae2f14c Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=58921be4-f8c0-4f3e-beb6-3ddfb21f859e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:27:dd:fe:f0:17:fd:89:8f:eb:db:48:58: a2:ac:97:bf:d4:ed:3a:ef:cb:05:ff:fc:1b:aa:4e: 7d:51:7e:2f:52:a9:b8:55:97:51:a0:50:a2:05:31: 45:05:66:b1:84:70:ec:e1:48:16:a6:33:48:a1:94: 06:dd:1c:1a:8d:84:07:0c:c2:a8:6c:1b:fd:77:cf: 9f:65:58:24:a5:94:fa:d9:46:68:37:27:be:cf:54: 3a:a4:73:40:4c:9b:65:85:c0:41:d4:69:a8:5f:11: e3:81:0f:36:43:c9:d6:4f:bc:d3:30:77:e6:77:5c: ec:c0:ae:b6:84:b5:98:ac:de:c4:d7:7c:d8:fd:ca: 0b:a0:97:fd:01:73:eb:ee:0c:b7:2f:13:5b:97:eb: d2:cb:a7:77:6d:60:d7:d3:0b:77:7f:6f:d3:c7:55: 91:9b:14:15:68:58:be:62:90:6b:cd:49:7d:c3:99: 8b:23:1d:fe:9b:25:84:41:f2:cc:b3:b2:f1:f5:21: 0f:42:c3:46:ea:45:8f:12:7b:3f:5a:a0:27:f8:5f: 2d:91:11:cf:78:2b:54:86:dd:12:36:f2:ee:a2:bd: 51:01:1b:bf:c3:45:5f:a8:e4:8a:09:3d:1c:f4:fb: c3:d3:68:04:6c:b8:bc:d8:6f:72:ca:2e:e0:12:f2: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6F:86:1B:8C:D6:3C:77:35:C2:70:04:8C:E7:BA:7E:17:73:55:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/cd9be427-039f-3881-bd0f-2810548b0c3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.crl X509v3 Authority Key Identifier: keyid:27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer sbgp-ipAddrBlock: critical IPv4: 207.228.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c5:5f:73:0c:4f:77:6e:91:f7:fc:65:ba:b1:25:df:5d:36: b3:c0:44:d7:77:dc:26:87:86:21:22:e9:70:8d:ea:f6:11:25: 6c:c3:a8:81:ce:2d:18:30:c3:b7:8f:4d:45:eb:8f:83:5f:0c: 74:85:0f:45:ad:58:6b:f3:48:7c:3c:6b:73:92:5f:0b:66:3b: 05:91:6a:c8:45:09:d9:9f:d9:06:c5:93:44:46:63:17:ff:e3: af:ae:45:c4:07:1b:74:43:06:91:cb:06:19:9a:c5:ba:0d:18: 80:3d:27:2a:71:b1:21:33:a4:3d:fc:7b:b2:f2:04:69:3b:9e: f8:44:8a:fb:ee:14:10:2b:a3:b3:7e:ab:34:15:80:25:1e:88: 77:e1:8d:0e:f4:fa:1d:42:55:32:c3:14:9c:c6:6f:2e:04:aa: 66:71:d7:fe:e3:7c:66:bd:6a:74:83:0b:14:27:9f:ec:e6:26: 40:37:36:18:7d:cc:fe:2c:2d:07:7c:dc:11:08:36:af:1f:68: 2c:ee:20:da:06:23:01:be:5c:db:32:04:1a:e0:de:dc:98:3d: 38:d3:91:e6:44:d3:5b:36:f7:3e:13:3d:9d:33:3a:12:6d:bb: 76:7c:e6:71:dd:9b:9c:07:89:ce:62:ee:60:b8:a7:c9:95:90: f0:22:73:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54fyDttxVylGPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyNjIyOTQtZjNjMC00YTU2LThjOTctNzg2ZTZhZTJm MTRjMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NTg5MjFiZTQtZjhjMC00ZjNlLWJlYjYtM2RkZmIyMWY4NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBIn3f7wF/2Jj+vbSFiirJe/1O0678sF//wb qk59UX4vUqm4VZdRoFCiBTFFBWaxhHDs4UgWpjNIoZQG3RwajYQHDMKobBv9d8+f ZVgkpZT62UZoNye+z1Q6pHNATJtlhcBB1GmoXxHjgQ82Q8nWT7zTMHfmd1zswK62 hLWYrN7E13zY/coLoJf9AXPr7gy3LxNbl+vSy6d3bWDX0wt3f2/Tx1WRmxQVaFi+ YpBrzUl9w5mLIx3+myWEQfLMs7Lx9SEPQsNG6kWPEns/WqAn+F8tkRHPeCtUht0S NvLuor1RARu/w0VfqOSKCT0c9PvD02gEbLi82G9yyi7gEvIi6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVvhhuM1jx3NcJwBIznun4Xc1XdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTI2 MjI5NC1mM2MwLTRhNTYtOGM5Ny03ODZlNmFlMmYxNGMvY2Q5YmU0MjctMDM5Zi0z ODgxLWJkMGYtMjgxMDU0OGIwYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGUyNjIyOTQtZjNjMC00YTU2LThj OTctNzg2ZTZhZTJmMTRjLzhlMjYyMjk0LWYzYzAtNGE1Ni04Yzk3LTc4NmU2YWUy ZjE0Yy5jcmwwHwYDVR0jBBgwFoAUJ6dGbBmpmismBxPQpxmNrlwpUmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTI2MjI5NC1mM2MwLTRhNTYtOGM5Ny03ODZl NmFlMmYxNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3FX3MMT3dukff8ZbqxJd9dNrPARNd33CaHhiEi6XCN6vYRJWzDqIHO LRgww7ePTUXrj4NfDHSFD0WtWGvzSHw8a3OSXwtmOwWRashFCdmf2QbFk0RGYxf/ 46+uRcQHG3RDBpHLBhmaxboNGIA9JypxsSEzpD38e7LyBGk7nvhEivvuFBAro7N+ qzQVgCUeiHfhjQ70+h1CVTLDFJzGby4EqmZx1/7jfGa9anSDCxQnn+zmJkA3Nhh9 zP4sLQd83BEINq8faCzuINoGIwG+XNsyBBrg3tyYPTjTkeZE01s29z4TPZ0zOhJt u3Z85nHdm5wHic5i7mC4p8mVkPAic/A= -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:41 2025 by rpki-client