$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a7854320-1559-39e3-b94f-2b789267d281.roa File: a7854320-1559-39e3-b94f-2b789267d281.roa (raw, json) Hash identifier: 9IIo+EZ1EF2yVv3X8Cs3C9q/7JcQSQpa1UZNvsT7KLI= Subject key identifier: 0B:67:5F:34:B0:CD:3F:4C:94:0C:AB:74:CE:89:7E:57:09:06:CF:83 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F4328584B583CA79A4C9C537E6B707B40 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a7854320-1559-39e3-b94f-2b789267d281.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 11032 IP address blocks: 207.162.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a7:9a:4c:9c:53:7e:6b:70:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=5654c27a-75e2-4243-b329-8d4e4c197194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f3:96:0b:8f:f2:5a:e2:5b:51:9b:f9:d1:ff: 42:27:ee:d7:cd:05:43:58:36:0a:65:ee:ba:fb:e9: 30:4f:72:8c:25:4a:15:ce:23:0e:c5:ae:f2:f7:8d: ae:b6:c1:63:7c:99:1a:1a:4c:05:b6:ca:12:c5:48: d2:46:db:f7:d0:36:f5:b8:45:03:40:b7:27:f7:2d: b4:84:61:4a:da:e5:b4:58:d8:bd:67:92:d2:1d:3b: da:24:3d:cc:6c:63:c7:f2:42:8b:6e:27:d1:96:30: c7:5c:57:53:e7:0a:08:23:b5:82:8c:e9:c5:41:c7: 4d:a8:af:18:0e:c9:15:ef:60:76:0f:70:17:6d:3d: 46:b5:d7:f7:c1:a9:ab:d5:c7:8a:a1:7f:b7:c9:17: 21:aa:ad:f9:16:fc:0b:ef:6d:07:11:2d:98:52:8a: e9:71:e8:cb:dc:de:5a:f9:b0:53:3d:48:15:84:95: 6f:be:7b:c5:e9:a5:23:fd:4c:40:19:34:f6:0f:03: 25:db:31:b7:34:e2:6a:13:bd:4d:cf:f2:0e:bd:64: 8c:40:3c:69:37:f9:d2:b4:70:03:c4:6f:1c:06:e2: 5c:9f:f7:1d:77:9a:46:63:7c:68:5f:9f:19:58:df: ea:17:09:1c:b1:12:5f:6b:88:85:65:a9:9c:cb:63: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:67:5F:34:B0:CD:3F:4C:94:0C:AB:74:CE:89:7E:57:09:06:CF:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a7854320-1559-39e3-b94f-2b789267d281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 207.162.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:42:34:1d:e9:cf:ea:80:58:4f:79:f2:21:dd:33:ff:ff:d9: 87:37:2e:40:f0:7f:51:71:3a:ec:dc:98:18:0a:79:5f:29:aa: 46:a8:5f:0b:5b:d3:44:75:ec:35:bb:f4:e1:1a:76:02:06:f9: 1e:1f:a9:98:b8:92:e2:9d:12:58:6b:17:14:f6:b5:45:6c:56: 62:97:a0:55:99:65:1b:29:e4:c3:20:27:6b:73:b0:27:5f:77: c9:4a:cf:ab:bf:33:e8:65:7f:6f:bd:bc:05:05:88:75:7c:39: 03:6e:61:d0:64:ca:21:9f:b8:ab:62:1f:4a:99:61:b6:9e:b4: 96:a5:e9:f4:2d:58:35:91:0d:be:25:54:ed:79:1d:58:99:bc: 89:f7:12:fc:7b:52:bb:9f:e6:5c:47:ff:dc:bc:a4:bc:3b:b1: 2a:10:30:e0:56:87:94:6b:0f:1c:2c:c7:9e:02:e9:aa:ef:09: ba:44:49:00:f6:e2:56:09:de:1d:f4:3e:45:6e:5b:06:f8:ba: 11:8b:65:b1:bc:85:f4:a9:67:2c:49:e9:28:7f:6d:6e:de:ae: 72:db:48:9a:f1:3d:de:22:01:4b:fa:da:ea:67:73:9f:88:1c: e9:77:ed:56:da:6b:62:9c:8f:a9:cd:91:b5:19:95:5a:97:c6: 39:38:44:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKeaTJxTfmtwe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NTY1NGMyN2EtNzVlMi00MjQzLWIzMjktOGQ0ZTRjMTk3MTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/OWC4/yWuJbUZv50f9CJ+7XzQVDWDYKZe66 ++kwT3KMJUoVziMOxa7y942utsFjfJkaGkwFtsoSxUjSRtv30Db1uEUDQLcn9y20 hGFK2uW0WNi9Z5LSHTvaJD3MbGPH8kKLbifRljDHXFdT5woII7WCjOnFQcdNqK8Y DskV72B2D3AXbT1Gtdf3wamr1ceKoX+3yRchqq35FvwL720HES2YUorpcejL3N5a +bBTPUgVhJVvvnvF6aUj/UxAGTT2DwMl2zG3NOJqE71Nz/IOvWSMQDxpN/nStHAD xG8cBuJcn/cdd5pGY3xoX58ZWN/qFwkcsRJfa4iFZamcy2PriQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtnXzSwzT9MlAyrdM6JflcJBs+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYTc4NTQzMjAtMTU1OS0z OWUzLWI5NGYtMmI3ODkyNjdkMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6IZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNCNB3pz+qAWE958iHdM///2Yc3LkDwf1FxOuzcmBgKeV8pqkaoXwtb 00R17DW79OEadgIG+R4fqZi4kuKdElhrFxT2tUVsVmKXoFWZZRsp5MMgJ2tzsCdf d8lKz6u/M+hlf2+9vAUFiHV8OQNuYdBkyiGfuKtiH0qZYbaetJal6fQtWDWRDb4l VO15HViZvIn3Evx7Uruf5lxH/9y8pLw7sSoQMOBWh5RrDxwsx54C6arvCbpESQD2 4lYJ3h30PkVuWwb4uhGLZbG8hfSpZyxJ6Sh/bW7ernLbSJrxPd4iAUv62upnc5+I HOl37Vbaa2Kcj6nNkbUZlVqXxjk4RKQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:17 2025 by rpki-client