$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/a427beee-f2d1-3cab-8246-b7590b2724a7.roa File: a427beee-f2d1-3cab-8246-b7590b2724a7.roa (raw, json) Hash identifier: s51a2LofSwA8LW7gNTp8tImL6fiHv+zma9dZC7PnVZY= Subject key identifier: 9B:35:CF:F3:6A:0C:10:93:05:DD:0A:D9:53:6E:39:62:DB:2E:1A:12 Certificate issuer: /CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9 Certificate serial: 010D0C9F4328584B84E77CA5F76A1774F0BB8E00 Authority key identifier: 93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/a427beee-f2d1-3cab-8246-b7590b2724a7.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 55140 IP address blocks: 207.70.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7c:a5:f7:6a:17:74:f0:bb:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=2609c313-c6a5-490d-84c1-5b4b4d93a0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:da:c9:65:a6:55:11:70:0e:91:d7:dd:46: 71:ae:6c:77:71:dc:98:ee:5e:a8:b3:41:8a:09:50: 3c:a1:de:38:ac:e2:01:24:dd:58:e6:a9:2d:d1:f2: 86:ba:00:61:ec:ea:4b:b7:2e:df:13:2e:4b:37:d1: 74:eb:2d:d4:13:f3:85:2b:7f:53:78:23:1d:b5:dd: fa:3a:39:a4:73:70:79:bf:0a:da:58:c2:39:91:81: 14:f8:05:ce:ba:dc:ff:bd:cb:8f:22:cf:1c:80:92: e8:94:5f:90:13:33:38:99:01:a6:51:9d:8b:a0:9f: b5:18:23:59:51:77:9c:f0:01:81:c7:62:59:5d:49: 01:e8:18:3e:cd:e7:fe:ea:82:88:0c:84:1b:e4:1c: 83:0f:da:4f:ab:54:0a:f6:fb:e7:a6:45:74:10:a1: ff:96:89:51:c1:35:61:f5:66:6e:23:2e:f7:9e:f4: 54:fb:5c:e4:f5:71:24:ac:88:88:c1:0a:92:da:94: d3:c0:ed:ec:16:7d:67:10:6d:8a:43:2d:4a:3f:73: bd:11:d1:e6:60:d6:0e:dd:43:79:9c:d3:8e:49:d0: c0:18:63:de:be:af:7f:84:4d:a1:14:89:12:c1:41: 30:80:3e:8c:bf:ff:ad:bd:f9:14:89:1e:a9:85:e1: 5c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:35:CF:F3:6A:0C:10:93:05:DD:0A:D9:53:6E:39:62:DB:2E:1A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/a427beee-f2d1-3cab-8246-b7590b2724a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl X509v3 Authority Key Identifier: keyid:93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer sbgp-ipAddrBlock: critical IPv4: 207.70.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b1:79:49:fc:33:3e:60:dc:a7:f8:54:94:2a:b7:6c:5e:6d: 78:96:98:4f:0d:13:12:7d:87:af:13:e2:03:8c:3e:dd:ab:30: dc:be:56:0d:62:29:ae:21:ee:37:d7:9a:d7:85:14:a9:28:19: d0:3b:07:80:f9:58:da:32:d1:19:40:af:a0:bb:2f:f5:ed:9e: 50:d0:d2:8d:8f:95:9d:af:2d:94:d2:f1:bf:aa:90:d2:fc:d5: 25:8e:70:e1:5e:57:23:1d:67:68:d8:94:4f:18:10:40:11:3a: c9:d5:64:0f:a0:b6:01:6c:fa:aa:41:db:35:c9:b8:34:92:6e: 2f:70:56:e2:a6:d4:03:03:37:f5:08:02:9b:c5:54:12:f4:e6: 6f:1b:27:d5:b1:48:1c:ac:ec:b8:82:66:8a:ad:59:cf:00:cb: cb:89:f7:4a:40:27:9a:47:89:79:85:7b:02:be:47:8d:a4:b7: 39:66:5c:32:20:8f:62:5a:76:c0:81:d2:6d:ad:17:80:5d:89: 63:d0:7b:86:d1:93:95:bb:10:6e:57:ef:80:11:f2:dd:27:45: db:23:77:f7:69:b4:5c:92:f6:69:9c:f6:6a:2d:53:58:dc:cd: 8f:13:af:c1:a3:91:ab:ed:cd:ec:7f:76:10:04:97:28:ce:60: 79:6d:6b:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53yl92oXdPC7jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcwN2MyZGQtMjY0Ny00MTY0LWI0YjMtOWU3ZGExNDFk NWU5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MjYwOWMzMTMtYzZhNS00OTBkLTg0YzEtNWI0YjRkOTNhMGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgHayWWmVRFwDpHX3UZxrmx3cdyY7l6os0GK CVA8od44rOIBJN1Y5qkt0fKGugBh7OpLty7fEy5LN9F06y3UE/OFK39TeCMdtd36 Ojmkc3B5vwraWMI5kYEU+AXOutz/vcuPIs8cgJLolF+QEzM4mQGmUZ2LoJ+1GCNZ UXec8AGBx2JZXUkB6Bg+zef+6oKIDIQb5ByDD9pPq1QK9vvnpkV0EKH/lolRwTVh 9WZuIy73nvRU+1zk9XEkrIiIwQqS2pTTwO3sFn1nEG2KQy1KP3O9EdHmYNYO3UN5 nNOOSdDAGGPevq9/hE2hFIkSwUEwgD6Mv/+tvfkUiR6pheFcOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJs1z/NqDBCTBd0K2VNuOWLbLhoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85NzA3 YzJkZC0yNjQ3LTQxNjQtYjRiMy05ZTdkYTE0MWQ1ZTkvYTQyN2JlZWUtZjJkMS0z Y2FiLTgyNDYtYjc1OTBiMjcyNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTcwN2MyZGQtMjY0Ny00MTY0LWI0 YjMtOWU3ZGExNDFkNWU5Lzk3MDdjMmRkLTI2NDctNDE2NC1iNGIzLTllN2RhMTQx ZDVlOS5jcmwwHwYDVR0jBBgwFoAUk1umtQlGETLURYU61Z0YQwTsBRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85NzA3YzJkZC0yNjQ3LTQxNjQtYjRiMy05ZTdk YTE0MWQ1ZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz0bwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOxeUn8Mz5g3Kf4VJQqt2xebXiWmE8NExJ9h68T4gOMPt2rMNy+Vg1i Ka4h7jfXmteFFKkoGdA7B4D5WNoy0RlAr6C7L/XtnlDQ0o2PlZ2vLZTS8b+qkNL8 1SWOcOFeVyMdZ2jYlE8YEEAROsnVZA+gtgFs+qpB2zXJuDSSbi9wVuKm1AMDN/UI ApvFVBL05m8bJ9WxSBys7LiCZoqtWc8Ay8uJ90pAJ5pHiXmFewK+R42ktzlmXDIg j2JadsCB0m2tF4BdiWPQe4bRk5W7EG5X74AR8t0nRdsjd/dptFyS9mmc9motU1jc zY8Tr8Gjkavtzex/dhAElyjOYHlta3U= -----END CERTIFICATE-----Generated at Tue Oct 21 07:20:56 2025 by rpki-client