$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa File: c432c5a4-ed04-3547-9d82-8353164b23d8.roa (raw, json) Hash identifier: 5VvoGTRoe0PPQ2NRbugdk4Rxm8V+tdobsv8wOmd0tRo= Subject key identifier: 07:00:DD:84:25:E5:49:00:66:77:84:54:09:D0:A9:0D:73:B7:42:75 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584B4D11D0E4A7D69CD274442680 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 16409 IP address blocks: 207.114.24.0/24 maxlen: 24 207.114.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d0:e4:a7:d6:9c:d2:74:44:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=ac9c3a84-2790-4223-8984-06afb9a5e328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5e:c3:52:17:ba:03:d3:3f:21:b7:3a:da:cd: 5d:68:de:99:f5:bd:19:df:69:d7:23:4a:19:9d:76: 2d:78:5a:7c:34:a2:10:70:19:20:2b:13:18:5c:08: 0e:4d:c2:b9:e4:5d:f3:d9:cd:3b:29:3b:b8:2f:57: eb:cf:92:a8:93:19:fa:1f:34:b3:c5:26:77:bc:29: cb:84:1f:7f:6e:cc:eb:7d:59:34:f0:c6:ca:20:8f: ec:d5:5e:eb:a8:4c:26:82:3c:2a:fe:e6:32:fe:88: 42:f5:90:a3:db:33:db:41:de:29:9a:8d:57:9a:11: fd:1b:b8:61:1b:77:95:c6:af:18:49:93:e2:20:96: cc:b2:c0:e8:1b:56:be:0f:50:28:a1:fd:dc:2a:c9: 46:67:c1:06:c5:e3:1c:5b:51:45:9a:fd:8c:78:e8: 87:ad:ca:78:1e:7d:fb:15:c8:72:5a:ee:8d:6e:e1: 0b:93:e1:7f:af:14:b0:99:ab:71:f1:b0:3f:0b:17: 1b:68:43:50:14:e3:fc:d0:f0:11:25:7c:10:a3:65: 69:a6:ee:2e:5c:4e:47:b1:0f:a7:6a:39:fc:ed:52: 74:5f:cb:79:69:94:c7:82:07:42:09:5f:57:b0:13: a8:7e:fb:54:eb:93:2b:72:44:4c:3e:c3:fc:8b:ea: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:00:DD:84:25:E5:49:00:66:77:84:54:09:D0:A9:0D:73:B7:42:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 207.114.24.0/24 207.114.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:27:79:56:fc:4c:51:22:d3:41:e0:d2:ec:c9:92:fe:2e:7c: 42:a2:24:47:26:d7:cf:e8:07:76:9b:14:c0:51:c2:29:d6:87: 74:f0:33:bc:23:71:8c:c8:70:a1:e8:ca:6b:e5:37:10:b7:7c: ff:aa:f1:6a:57:1f:43:7a:27:83:df:d1:6f:35:3d:1b:d8:81: fb:af:92:0f:3a:db:ad:e9:fa:2d:d7:84:e1:e2:22:b6:82:dc: c3:1d:f2:08:dc:e2:a6:2d:e1:35:af:98:96:fa:cd:03:4e:5d: 43:da:5c:ba:16:f6:d1:4f:5e:e4:a4:17:a3:7a:2a:dc:25:24: 6b:e8:67:1d:b0:62:a0:ba:52:7d:13:ff:68:56:69:b0:68:87: 73:d9:79:5c:8d:85:66:91:33:cc:ce:dd:f2:dc:3a:e5:ba:87: d2:7c:61:fd:0b:32:c8:0d:34:66:1b:6b:83:d6:17:7a:b8:f0: e5:93:8e:76:a6:11:f0:00:5a:0a:e2:35:9a:85:e1:ea:1b:75: 01:5e:5a:ef:22:ff:c9:a3:a9:b2:57:e4:14:69:17:74:9b:6b: 54:46:1b:bd:cf:30:fa:9b:6c:8f:7d:e3:5e:cb:5f:51:99:3a: 53:51:5b:51:87:a7:6c:04:7c:d2:cd:6a:34:d4:a0:8c:a1:01: b6:49:1b:4f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtNEdDkp9ac0nREJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YWM5YzNhODQtMjc5MC00MjIzLTg5ODQtMDZhZmI5YTVlMzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF7DUhe6A9M/Ibc62s1daN6Z9b0Z32nXI0oZ nXYteFp8NKIQcBkgKxMYXAgOTcK55F3z2c07KTu4L1frz5Kokxn6HzSzxSZ3vCnL hB9/bszrfVk08MbKII/s1V7rqEwmgjwq/uYy/ohC9ZCj2zPbQd4pmo1XmhH9G7hh G3eVxq8YSZPiIJbMssDoG1a+D1Aoof3cKslGZ8EGxeMcW1FFmv2MeOiHrcp4Hn37 FchyWu6NbuELk+F/rxSwmatx8bA/CxcbaENQFOP80PARJXwQo2Vppu4uXE5HsQ+n ajn87VJ0X8t5aZTHggdCCV9XsBOofvtU65MrckRMPsP8i+qVhwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAcA3YQl5UkAZneEVAnQqQ1zt0J1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYzQzMmM1YTQtZWQwNC0z NTQ3LTlkODItODM1MzE2NGIyM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz3IYAwQD z3IgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEkneVb8TFEi00Hg0uzJkv4ufEKiJEcm18/oB3abFMBRwinW h3TwM7wjcYzIcKHoymvlNxC3fP+q8WpXH0N6J4Pf0W81PRvYgfuvkg86263p+i3X hOHiIraC3MMd8gjc4qYt4TWvmJb6zQNOXUPaXLoW9tFPXuSkF6N6KtwlJGvoZx2w YqC6Un0T/2hWabBoh3PZeVyNhWaRM8zO3fLcOuW6h9J8Yf0LMsgNNGYba4PWF3q4 8OWTjnamEfAAWgriNZqF4eobdQFeWu8i/8mjqbJX5BRpF3Sba1RGG73PMPqbbI99 417LX1GZOlNRW1GHp2wEfNLNajTUoIyhAbZJG08= -----END CERTIFICATE-----Generated at Mon Oct 20 21:58:09 2025 by rpki-client