$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/aecad75e-519d-3546-9e8f-7dd4c2939b1e.roa File: aecad75e-519d-3546-9e8f-7dd4c2939b1e.roa (raw, json) Hash identifier: Sk8P4ekBSXpA94+rWfIxvO+YBfTBbCRyLYX0JuxPt2Q= Subject key identifier: 94:96:37:5C:9D:D1:3E:16:9F:B4:43:85:C5:93:CE:88:35:38:E7:88 Certificate issuer: /CN=c873b1de-87e4-4876-98b6-52dff5baa65a Certificate serial: 010D0C9F4328584B87F112C025029EC0A2764580 Authority key identifier: CB:1B:D0:91:1F:26:8D:A8:35:17:B1:AB:12:AB:FF:B9:1E:7F:B2:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/aecad75e-519d-3546-9e8f-7dd4c2939b1e.roa Signing time: Wed 15 Oct 2025 15:07:34 +0000 ROA not before: Wed 15 Oct 2025 15:07:34 +0000 ROA not after: Tue 13 Jan 2026 16:07:34 +0000 asID: 402005 IP address blocks: 207.228.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/c873b1de-87e4-4876-98b6-52dff5baa65a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/c873b1de-87e4-4876-98b6-52dff5baa65a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:f1:12:c0:25:02:9e:c0:a2:76:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c873b1de-87e4-4876-98b6-52dff5baa65a Validity Not Before: Oct 15 15:07:34 2025 GMT Not After : Jan 13 16:07:34 2026 GMT Subject: CN=564b9e4a-f574-46e9-aa84-91a4d8b47b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:1a:5e:c2:2e:c1:72:c7:83:18:3c:20:ce: cd:ca:f1:74:bc:ea:3e:e2:69:8b:56:8b:ec:77:08: 7d:1d:ab:bc:21:1b:af:68:d8:a2:0a:7f:e3:b8:4b: d0:4a:40:9c:34:9e:bd:b5:f0:7c:ca:7c:a1:a3:44: 95:d5:12:f3:20:71:95:77:71:48:66:40:9d:4c:ea: 81:6f:92:d8:09:58:c4:ae:95:b9:0e:26:72:90:20: 5a:71:7c:3d:1e:c8:4d:26:b6:fa:e0:c8:84:dd:81: 14:e9:a2:bb:93:d2:b8:b7:69:3b:12:67:84:67:43: d6:8a:7a:79:28:97:f1:8e:12:e0:58:5b:32:d6:c3: 69:8d:9f:f0:8f:3c:cb:d1:db:de:75:c6:e5:45:2c: c9:0f:29:59:5d:9f:08:72:6d:69:a3:1d:c2:a9:24: 5d:3d:89:a3:fd:eb:51:1b:d0:74:ed:e0:42:77:2f: a0:4f:b1:f9:21:d2:1b:b9:65:0c:b0:22:ca:02:1d: 0b:73:b7:b5:77:6e:d9:d8:d1:d1:b7:28:dd:99:52: 3a:15:cc:48:76:39:9b:63:f9:bc:91:f8:17:53:83: 8d:ba:05:88:c1:6b:87:2e:ca:35:ce:05:72:4b:f4: 93:83:25:f6:41:70:d2:37:dd:85:29:31:d0:32:2e: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:96:37:5C:9D:D1:3E:16:9F:B4:43:85:C5:93:CE:88:35:38:E7:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/aecad75e-519d-3546-9e8f-7dd4c2939b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/c873b1de-87e4-4876-98b6-52dff5baa65a.crl X509v3 Authority Key Identifier: keyid:CB:1B:D0:91:1F:26:8D:A8:35:17:B1:AB:12:AB:FF:B9:1E:7F:B2:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a.cer sbgp-ipAddrBlock: critical IPv4: 207.228.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:3a:54:25:6c:01:53:04:50:f9:d7:37:38:eb:b1:fe:19:64: 2d:d2:0d:5e:b9:c2:26:47:77:d1:44:07:ee:a4:3c:30:1c:47: db:fe:fc:78:31:28:68:0e:af:57:d4:16:d2:21:dc:3b:df:2b: 84:26:2b:69:9a:4e:02:b5:b1:63:24:7e:8b:78:d6:eb:36:01: 66:8a:45:f3:29:03:7c:64:9f:48:bc:13:36:75:15:2b:07:20: 92:a3:17:23:61:d3:23:2a:03:93:7f:9c:54:06:7a:ad:ac:c9: 0c:8f:50:6e:43:22:7c:2c:43:5c:df:f3:d0:25:92:9a:b0:a5: 49:49:bb:93:44:01:21:3e:eb:7c:62:ba:09:74:ee:8b:8a:38: f6:f5:73:6d:a4:75:47:9e:1d:ac:1d:a8:3e:dd:dd:1b:db:fb: 00:45:bf:9c:b1:c9:7e:52:f9:07:49:f8:a7:78:b3:37:4b:d1: 02:67:d7:f0:39:d1:d4:d7:4c:c0:84:ae:ee:aa:73:2a:b6:41: 12:44:a7:32:f3:43:1d:d7:35:77:1e:d3:7b:6e:e1:61:64:0f: 8d:9a:62:37:6f:70:81:5b:d8:7d:26:ad:ef:0f:58:6a:c7:51: 9f:3f:ea:d5:f1:d9:6f:3c:15:7d:16:11:e6:16:43:22:00:87: 76:42:54:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuH8RLAJQKewKJ2RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg3M2IxZGUtODdlNC00ODc2LTk4YjYtNTJkZmY1YmFh NjVhMB4XDTI1MTAxNTE1MDczNFoXDTI2MDExMzE2MDczNFowLzEtMCsGA1UEAxMk NTY0YjllNGEtZjU3NC00NmU5LWFhODQtOTFhNGQ4YjQ3YjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZEaXsIuwXLHgxg8IM7NyvF0vOo+4mmLVovs dwh9Hau8IRuvaNiiCn/juEvQSkCcNJ69tfB8ynyho0SV1RLzIHGVd3FIZkCdTOqB b5LYCVjErpW5DiZykCBacXw9HshNJrb64MiE3YEU6aK7k9K4t2k7EmeEZ0PWinp5 KJfxjhLgWFsy1sNpjZ/wjzzL0dvedcblRSzJDylZXZ8Icm1pox3CqSRdPYmj/etR G9B07eBCdy+gT7H5IdIbuWUMsCLKAh0Lc7e1d27Z2NHRtyjdmVI6FcxIdjmbY/m8 kfgXU4ONugWIwWuHLso1zgVyS/STgyX2QXDSN92FKTHQMi5kTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSWN1yd0T4Wn7RDhcWTzog1OOeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jODcz YjFkZS04N2U0LTQ4NzYtOThiNi01MmRmZjViYWE2NWEvYWVjYWQ3NWUtNTE5ZC0z NTQ2LTllOGYtN2RkNGMyOTM5YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzg3M2IxZGUtODdlNC00ODc2LTk4 YjYtNTJkZmY1YmFhNjVhL2M4NzNiMWRlLTg3ZTQtNDg3Ni05OGI2LTUyZGZmNWJh YTY1YS5jcmwwHwYDVR0jBBgwFoAUyxvQkR8mjag1F7GrEqv/uR5/sr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jODczYjFkZS04N2U0LTQ4NzYtOThiNi01MmRm ZjViYWE2NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+TPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk6VCVsAVMEUPnXNzjrsf4ZZC3SDV65wiZHd9FEB+6kPDAcR9v+/Hgx KGgOr1fUFtIh3DvfK4QmK2maTgK1sWMkfot41us2AWaKRfMpA3xkn0i8EzZ1FSsH IJKjFyNh0yMqA5N/nFQGeq2syQyPUG5DInwsQ1zf89AlkpqwpUlJu5NEASE+63xi ugl07ouKOPb1c22kdUeeHawdqD7d3Rvb+wBFv5yxyX5S+QdJ+Kd4szdL0QJn1/A5 0dTXTMCEru6qcyq2QRJEpzLzQx3XNXce03tu4WFkD42aYjdvcIFb2H0mre8PWGrH UZ8/6tXx2W88FX0WEeYWQyIAh3ZCVLk= -----END CERTIFICATE-----Generated at Tue Oct 21 09:51:04 2025 by rpki-client