$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ff94693-17ca-35bc-a3a7-7407daedb027.roa File: 9ff94693-17ca-35bc-a3a7-7407daedb027.roa (raw, json) Hash identifier: B33bcI9fY1NvfBYbS8dZjChuRkPPPL0cs11Nzhcb7b0= Subject key identifier: 22:BB:32:50:4C:F7:FF:4A:32:76:3F:67:FC:8A:45:B2:57:7B:2B:15 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F3747966977FB27AD0E7E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ff94693-17ca-35bc-a3a7-7407daedb027.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 107.167.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:47:96:69:77:fb:27:ad:0e:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=6d6bc0d0-7aac-40ac-8e22-7b21adb1e49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:85:d2:60:28:e3:4b:b0:30:a7:d3:f4:e2: 7a:3a:fe:0b:92:f5:09:a6:ea:9e:02:2f:b4:68:a6: 15:c6:1c:5f:12:2a:d1:a6:f3:bc:58:c1:5f:81:0d: b7:45:10:13:57:dc:54:e8:c6:a9:cf:c4:0a:19:cc: 16:d8:e2:c0:5e:06:79:64:95:75:18:f1:4d:ee:5a: 4a:80:19:1c:8b:5b:29:4d:f5:9e:ae:dd:fd:58:ff: f3:37:a7:1d:fd:59:46:7f:b1:fc:f3:69:0f:e8:12: 9c:97:e9:7b:53:94:e3:4a:86:b9:57:b3:74:16:23: a6:0f:2a:2f:64:d4:7e:67:57:ef:82:a8:6c:10:c5: 48:ba:18:83:92:fc:56:ed:13:17:79:65:12:3d:7b: 9a:5f:31:4b:97:f3:6e:5a:7d:3b:78:69:fe:66:25: 7f:85:d4:c1:0b:e1:68:d0:1f:d0:74:59:9a:45:c6: 85:72:9b:d8:66:2e:a3:81:01:af:66:70:86:45:ed: 2e:40:0e:e0:68:bc:9f:c1:36:bb:eb:23:e3:3b:e7: 0b:b4:bc:cc:b7:9f:08:6c:e2:37:a5:0a:0b:38:91: ce:10:06:75:1e:f3:c5:ca:e4:f9:5a:3a:21:48:a4: a9:f8:64:f3:27:69:4f:cf:df:60:c8:00:f3:7a:99: 25:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BB:32:50:4C:F7:FF:4A:32:76:3F:67:FC:8A:45:B2:57:7B:2B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ff94693-17ca-35bc-a3a7-7407daedb027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 107.167.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d1:a5:db:42:6e:9e:c0:60:64:f6:ac:dd:64:32:b0:4d:c7: b6:0e:52:bf:c7:e7:93:3b:b0:e5:dd:6b:a2:0a:83:02:3f:23: ab:f9:21:84:0d:2c:2d:82:b0:ab:76:5c:10:40:18:37:83:88: ab:2a:56:62:97:54:6e:68:73:53:fa:2f:2d:eb:84:c8:11:a6: 51:5e:e9:c4:0c:e3:98:d1:38:9c:91:16:1e:ed:cb:57:9d:d4: 2e:ff:3f:7c:39:c4:c3:88:a0:2c:28:33:36:97:0b:3e:e5:1b: 7c:0d:10:de:67:dd:e6:ef:3f:82:1f:f0:59:50:d1:4d:9f:0d: fc:9d:66:8b:db:33:47:97:9c:10:37:83:99:96:41:07:b7:0d: 83:8d:21:92:b4:e7:c9:67:82:dd:9b:aa:47:15:cc:47:08:10: 55:d0:0f:f3:fb:13:ba:34:88:3f:ea:c8:8e:ef:79:3c:98:bc: dc:ab:06:d7:84:a0:c7:1e:78:22:2e:52:e0:80:ab:31:bd:14: 5c:dc:f5:6d:e4:f4:f1:b2:b9:5e:44:f4:0c:f2:84:02:42:e6: 4e:01:b0:e7:19:a0:c3:21:6c:36:38:21:5d:d5:76:d9:43:cf: 3e:75:97:9a:5f:dc:83:38:1d:ae:c8:d5:dd:da:2c:23:ab:47: f7:2a:33:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0eWaXf7J60OfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NmQ2YmMwZDAtN2FhYy00MGFjLThlMjItN2IyMWFkYjFlNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DaF0mAo40uwMKfT9OJ6Ov4LkvUJpuqeAi+0 aKYVxhxfEirRpvO8WMFfgQ23RRATV9xU6Mapz8QKGcwW2OLAXgZ5ZJV1GPFN7lpK gBkci1spTfWert39WP/zN6cd/VlGf7H882kP6BKcl+l7U5TjSoa5V7N0FiOmDyov ZNR+Z1fvgqhsEMVIuhiDkvxW7RMXeWUSPXuaXzFLl/NuWn07eGn+ZiV/hdTBC+Fo 0B/QdFmaRcaFcpvYZi6jgQGvZnCGRe0uQA7gaLyfwTa76yPjO+cLtLzMt58IbOI3 pQoLOJHOEAZ1HvPFyuT5WjohSKSp+GTzJ2lPz99gyADzepklEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK7MlBM9/9KMnY/Z/yKRbJXeysVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWZmOTQ2OTMtMTdjYS0z NWJjLWEzYTctNzQwN2RhZWRiMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6etMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrRpdtCbp7AYGT2rN1kMrBNx7YOUr/H55M7sOXda6IKgwI/I6v5IYQN LC2CsKt2XBBAGDeDiKsqVmKXVG5oc1P6Ly3rhMgRplFe6cQM45jROJyRFh7ty1ed 1C7/P3w5xMOIoCwoMzaXCz7lG3wNEN5n3ebvP4If8FlQ0U2fDfydZovbM0eXnBA3 g5mWQQe3DYONIZK058lngt2bqkcVzEcIEFXQD/P7E7o0iD/qyI7veTyYvNyrBteE oMceeCIuUuCAqzG9FFzc9W3k9PGyuV5E9AzyhAJC5k4BsOcZoMMhbDY4IV3VdtlD zz51l5pf3IM4Ha7I1d3aLCOrR/cqMwA= -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:16 2025 by rpki-client