$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa File: b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa (raw, json) Hash identifier: HW3NjUm7G/1ompeHO6go6HEFq9rwEfyzwqd4j3jnOX8= Subject key identifier: 38:5F:31:30:C0:92:4B:B7:29:67:46:F5:DF:35:12:A7:C4:CD:6A:85 Certificate issuer: /CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f Certificate serial: 010D0C9F4328584B477C71617F1DF7B7B5AD9640 Authority key identifier: 3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 26962 IP address blocks: 207.71.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:71:61:7f:1d:f7:b7:b5:ad:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=961a9b5e-6922-4a4f-8cbb-c81a67c9b0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:80:0c:f6:df:34:c9:3d:71:d7:f2:0d:c0: 66:73:30:02:2b:40:18:65:ed:43:44:5a:c8:41:01: f5:4e:84:b2:ff:c3:d8:27:23:31:2d:50:21:25:2f: 5b:2a:82:db:e9:6f:29:6c:0d:a3:31:60:7f:8d:41: 10:35:2f:f8:23:2f:eb:0a:e1:45:98:96:a4:b0:0f: 46:46:a9:85:e7:01:d7:ab:18:17:d9:e8:ab:fb:a6: c4:56:fd:89:1e:95:33:c8:c8:8a:43:74:5a:5c:36: e7:9a:00:d4:89:96:0d:f3:8b:79:b4:55:44:b8:29: 1a:32:b4:27:b4:5c:da:1f:4f:2b:2b:1e:f2:ed:01: 2c:c3:a2:cc:8e:4a:2a:3d:a9:c1:11:38:b1:01:9d: fd:3c:67:3d:31:dd:d5:46:06:d2:d4:c4:db:c7:fe: ae:1f:84:3e:9e:34:c3:f0:ca:d1:2d:cf:b2:00:c2: 6e:83:60:e7:8b:e9:85:15:2c:73:7b:6f:49:b9:bb: a4:40:2d:6d:a5:70:3f:9c:3d:62:bd:df:69:a3:ec: 0d:9d:0b:99:97:5c:86:ee:a4:05:de:93:69:f7:93: f2:66:f1:6d:c4:d3:ed:dc:83:c7:67:0e:02:b4:58: b8:8b:28:df:3e:a8:6b:4a:db:be:b3:2b:51:6d:b7: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5F:31:30:C0:92:4B:B7:29:67:46:F5:DF:35:12:A7:C4:CD:6A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.crl X509v3 Authority Key Identifier: keyid:3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer sbgp-ipAddrBlock: critical IPv4: 207.71.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:93:32:2a:f6:ba:c8:4a:a0:c9:11:98:0a:d0:bd:0d:56:7a: 74:b9:78:6c:61:0c:ee:65:01:3e:d8:56:9b:61:2f:ca:b7:fd: ae:6e:04:cf:0e:82:ff:be:c5:91:c7:e2:88:09:92:94:fc:ab: 34:61:7e:6a:6c:06:2e:d3:67:f8:cc:5e:cb:bc:bc:53:9b:a5: cd:e5:08:ec:a2:9f:17:36:a8:f6:4d:95:7e:a0:0a:9a:95:97: 59:dd:00:bb:29:57:11:e2:c3:fa:e5:d1:69:52:38:02:80:6b: 1c:81:ca:e3:d3:59:fb:cc:a4:ea:83:be:b1:c5:84:46:59:30: 0c:ad:fd:e1:04:a4:47:7e:9d:a0:57:45:2e:75:2f:83:1e:88: 37:b6:b1:37:92:c7:65:e2:17:7a:0a:44:c5:2f:61:1c:af:a8: 91:38:89:14:1e:b5:52:0d:9d:41:48:14:69:38:ad:1d:aa:9d: 91:d4:76:b3:a6:e5:26:08:c1:07:7b:0e:d3:03:0d:f7:b2:f3: f5:ce:eb:3b:83:09:36:84:16:a9:e0:92:f9:a3:7c:74:19:9a: e9:ed:eb:4e:e3:bf:94:e6:75:8a:0e:7b:50:24:ec:25:11:99: 79:a9:3a:f8:f9:9f:5f:62:22:ed:14:e8:33:12:ef:64:54:bd: b8:57:9a:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHFhfx33t7WtlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2MDdmMWUtMjBjOC00MjFkLWIyM2ItYTRjOWJiNmI3 OTFmMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk OTYxYTliNWUtNjkyMi00YTRmLThjYmItYzgxYTY3YzliMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDqADPbfNMk9cdfyDcBmczACK0AYZe1DRFrI QQH1ToSy/8PYJyMxLVAhJS9bKoLb6W8pbA2jMWB/jUEQNS/4Iy/rCuFFmJaksA9G RqmF5wHXqxgX2eir+6bEVv2JHpUzyMiKQ3RaXDbnmgDUiZYN84t5tFVEuCkaMrQn tFzaH08rKx7y7QEsw6LMjkoqPanBETixAZ39PGc9Md3VRgbS1MTbx/6uH4Q+njTD 8MrRLc+yAMJug2Dni+mFFSxze29JubukQC1tpXA/nD1ivd9po+wNnQuZl1yG7qQF 3pNp95PyZvFtxNPt3IPHZw4CtFi4iyjfPqhrStu+sytRbbeFfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhfMTDAkku3KWdG9d81EqfEzWqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTYw N2YxZS0yMGM4LTQyMWQtYjIzYi1hNGM5YmI2Yjc5MWYvYjEyYTNjYjUtOThjNy0z MWYzLWJiZjItNzU0MWRhNGIxZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk2MDdmMWUtMjBjOC00MjFkLWIy M2ItYTRjOWJiNmI3OTFmL2M5NjA3ZjFlLTIwYzgtNDIxZC1iMjNiLWE0YzliYjZi NzkxZi5jcmwwHwYDVR0jBBgwFoAUOp32fnii08TyctqGXigp/+7tBR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTYwN2YxZS0yMGM4LTQyMWQtYjIzYi1hNGM5 YmI2Yjc5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz0egMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6TMir2ushKoMkRmArQvQ1WenS5eGxhDO5lAT7YVpthL8q3/a5uBM8O gv++xZHH4ogJkpT8qzRhfmpsBi7TZ/jMXsu8vFObpc3lCOyinxc2qPZNlX6gCpqV l1ndALspVxHiw/rl0WlSOAKAaxyByuPTWfvMpOqDvrHFhEZZMAyt/eEEpEd+naBX RS51L4MeiDe2sTeSx2XiF3oKRMUvYRyvqJE4iRQetVINnUFIFGk4rR2qnZHUdrOm 5SYIwQd7DtMDDfey8/XO6zuDCTaEFqngkvmjfHQZmunt607jv5TmdYoOe1Ak7CUR mXmpOvj5n19iIu0U6DMS72RUvbhXmmo= -----END CERTIFICATE-----Generated at Wed Oct 22 00:51:39 2025 by rpki-client