$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa File: 1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa (raw, json) Hash identifier: zaSXUdWG16mvXD5da4BEaK1dbenJ1FH6CZn+D7Eqvjg= Subject key identifier: 63:84:01:EA:30:F0:D2:BC:BF:9D:93:53:8B:D7:9F:10:34:05:1D:E6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F37375C48DEAD101AE35E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 107.167.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:37:5c:48:de:ad:10:1a:e3:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=daa0fa79-4224-4e56-a889-75c23d7b0d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:a9:70:e0:1f:ee:e8:17:2a:bb:7f:86:2f: 75:3e:45:39:f6:46:d7:f4:a0:18:00:55:95:17:d2: 00:c7:77:42:3f:9b:00:ce:64:02:b1:46:ad:87:31: aa:ef:34:d1:c9:26:b3:21:1a:d7:62:8f:ae:98:ae: ad:fe:e5:67:7d:21:00:7a:2f:e3:1e:74:1b:9a:0b: a9:5a:aa:32:b2:19:fe:5f:9f:bc:8c:a6:da:87:72: f7:12:29:22:91:df:ac:a1:a7:f9:93:65:07:4d:73: 96:33:c3:c7:e1:91:d6:5d:e7:eb:28:b3:16:d1:62: 00:41:2f:23:ad:6e:9b:5b:51:2b:6a:55:0a:f0:bb: ce:45:f1:ac:1b:a9:d1:fd:3e:88:ba:bd:f3:5d:80: c1:de:32:aa:b5:2e:e1:cf:05:f9:6f:3d:8d:18:99: 78:9e:44:55:c8:2c:ee:b3:e6:30:de:60:43:26:8d: f9:9d:21:bd:c3:31:e4:17:4a:97:1b:16:2c:d8:8c: af:02:05:30:bf:c5:d6:73:f9:47:5d:c5:ad:bf:c9: f5:24:1b:dd:4a:5d:ae:36:1b:98:05:66:8d:5a:2b: 3c:35:b7:72:94:62:82:12:8d:6f:7c:03:b0:4e:30: 37:6b:d2:47:84:79:33:64:15:db:71:06:63:c5:3b: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:84:01:EA:30:F0:D2:BC:BF:9D:93:53:8B:D7:9F:10:34:05:1D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 107.167.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:33:9e:62:1e:fd:e7:f0:cd:ae:f1:a3:37:92:47:3c:2c:06: 24:99:f9:a3:1b:ba:b6:5d:af:fc:c5:54:2e:0a:38:f2:e3:cf: a9:c3:85:dc:38:02:dc:b0:b9:f2:66:b6:38:53:da:86:2f:e0: 4a:1f:34:f9:25:5f:7c:c2:5e:e3:59:7c:6c:8c:91:2f:6d:ba: c0:57:1b:be:32:b4:66:4c:38:0b:6b:f1:92:54:86:2f:c2:27: f5:3d:bf:11:a9:05:ae:fe:d3:82:8e:6d:52:ac:74:00:05:4a: 65:25:3c:f3:c8:d5:fa:4d:5d:e1:05:47:bd:b8:1e:21:ad:9b: c3:b6:f5:72:da:7a:e7:19:b1:c1:c7:73:b7:ce:6b:41:b7:69: a7:7a:91:08:38:3e:7c:ab:fa:74:74:bd:50:8a:2c:ba:7a:ca: 46:e7:e3:94:31:ef:26:0c:a8:d2:86:34:54:ab:bf:cf:76:d8: fa:9b:a3:4b:26:3d:c1:32:59:b6:4f:93:ee:8f:7c:e6:9d:7f: d1:ba:74:9b:38:fa:09:fc:04:f8:7e:65:11:c1:88:39:d5:a3: 18:c2:01:23:79:29:c5:9d:6f:54:e9:4e:7b:12:5b:dc:91:01: f6:41:f1:25:10:e7:5a:7c:42:6d:fa:12:d7:61:40:0e:24:24: 4e:46:c8:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzdcSN6tEBrjXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGFhMGZhNzktNDIyNC00ZTU2LWE4ODktNzVjMjNkN2IwZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMepcOAf7ugXKrt/hi91PkU59kbX9KAYAFWV F9IAx3dCP5sAzmQCsUathzGq7zTRySazIRrXYo+umK6t/uVnfSEAei/jHnQbmgup Wqoyshn+X5+8jKbah3L3Eikikd+soaf5k2UHTXOWM8PH4ZHWXefrKLMW0WIAQS8j rW6bW1EralUK8LvORfGsG6nR/T6Iur3zXYDB3jKqtS7hzwX5bz2NGJl4nkRVyCzu s+Yw3mBDJo35nSG9wzHkF0qXGxYs2IyvAgUwv8XWc/lHXcWtv8n1JBvdSl2uNhuY BWaNWis8NbdylGKCEo1vfAOwTjA3a9JHhHkzZBXbcQZjxTsZcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOEAeow8NK8v52TU4vXnxA0BR3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQ4N2FjMDItYzNjYy0z ZmQwLWE1ZGQtN2VhNGJlMjBmNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6e/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAznmIe/efwza7xozeSRzwsBiSZ+aMburZdr/zFVC4KOPLjz6nDhdw4 AtywufJmtjhT2oYv4EofNPklX3zCXuNZfGyMkS9tusBXG74ytGZMOAtr8ZJUhi/C J/U9vxGpBa7+04KObVKsdAAFSmUlPPPI1fpNXeEFR724HiGtm8O29XLaeucZscHH c7fOa0G3aad6kQg4Pnyr+nR0vVCKLLp6ykbn45Qx7yYMqNKGNFSrv8922Pqbo0sm PcEyWbZPk+6PfOadf9G6dJs4+gn8BPh+ZRHBiDnVoxjCASN5KcWdb1TpTnsSW9yR AfZB8SUQ51p8Qm36EtdhQA4kJE5GyLk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:18 2025 by rpki-client