$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25afede6-5664-3043-85c1-30aedf5dbabe.roa File: 25afede6-5664-3043-85c1-30aedf5dbabe.roa (raw, json) Hash identifier: LVSRqdsFfrptTb4Konibu64/Dtcwa3qZAZBYEeAX50Q= Subject key identifier: 73:70:16:4E:7A:7D:6D:97:F5:02:B7:4B:F3:53:8F:43:57:2B:B1:4A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7FFA50434A5483ADAB6B6500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25afede6-5664-3043-85c1-30aedf5dbabe.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 108.59.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:50:43:4a:54:83:ad:ab:6b:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=3a7fe7cf-f0f7-41fa-a296-89d7d5413d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:b8:b8:0e:01:67:23:4e:f1:71:cd:65:84: ce:c4:c6:3c:ff:b0:0c:03:67:40:4a:f7:f9:fa:54: cd:d4:c0:9e:e4:8a:d0:7a:88:02:b0:46:26:31:a9: 3c:1d:61:df:94:96:4f:f5:e9:fa:7f:3c:47:62:c3: f3:5f:ce:c0:37:6a:99:6f:a2:1c:a2:c4:c9:3f:42: f9:50:4a:88:63:32:9d:09:89:06:4a:ae:85:03:ef: 3b:67:65:c4:0f:c2:2e:0f:e6:24:13:c2:2e:8a:62: be:d3:d2:e2:09:3c:f0:47:28:29:fd:37:74:42:e5: d2:a2:64:d7:1c:e5:29:11:10:62:0d:7c:9d:55:8e: 41:b7:43:b4:b2:c3:c7:f1:4b:51:ae:fb:c3:5e:0f: e5:fd:7e:d7:65:e0:14:ff:69:29:6b:99:57:65:41: d7:3a:0a:b2:9f:93:24:73:e4:da:47:fe:cd:4e:ca: 34:49:af:1f:54:48:59:00:84:89:b2:3b:17:70:2d: b1:0b:dd:9a:e8:1f:64:cd:22:59:63:63:cb:21:5b: f3:61:ba:cb:9c:7b:1a:77:b7:5a:b8:fb:b9:46:6a: e7:15:5e:d4:34:f0:4e:f5:8c:9d:6c:09:8a:a4:7a: 21:9c:0f:5c:45:c2:f5:1a:ee:2a:d8:9a:17:a8:c8: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:70:16:4E:7A:7D:6D:97:F5:02:B7:4B:F3:53:8F:43:57:2B:B1:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25afede6-5664-3043-85c1-30aedf5dbabe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:21:e4:f1:b6:16:f7:b0:4c:7e:57:5b:33:a5:dc:35:d1:86: e3:cf:86:16:79:b0:bc:d8:63:25:00:96:44:33:0a:b7:6e:f7: 03:68:6c:10:9b:1d:48:e8:dc:c1:83:71:76:5e:bd:96:a7:9a: 62:34:d5:d1:f3:75:d9:4a:d5:2b:74:28:00:53:8a:ed:2c:cf: 5c:6d:c5:f3:3a:95:8e:42:8f:eb:b0:d3:35:95:bc:95:6e:e1: 06:72:b2:32:96:14:68:53:13:54:cf:ff:44:3c:ce:e6:e4:ad: ce:de:de:87:b4:5b:be:79:db:bf:6c:9f:8c:e6:e1:3d:5c:e0: e4:02:99:77:d9:04:17:a8:20:2e:e5:b9:53:1f:fc:b5:96:b8: 35:ab:29:16:f2:59:79:5a:fe:ee:9a:c3:c2:9f:0a:c1:b8:86: 9b:83:9b:84:2b:04:a5:bd:46:8f:9f:79:51:14:ae:42:e7:14: 6f:28:45:4f:34:f5:85:96:24:b6:1c:fe:03:e3:1e:89:f4:92: 19:48:96:eb:c8:70:55:15:03:72:a7:42:cb:90:cf:19:83:dc: 0c:c4:c5:a2:69:38:11:31:cf:e0:1c:5f:7d:5d:00:69:a5:ad: 6b:8a:f4:05:39:e8:b2:ed:14:32:05:21:95:4e:fc:c0:8a:db: ef:08:1d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+lBDSlSDratrZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk M2E3ZmU3Y2YtZjBmNy00MWZhLWEyOTYtODlkN2Q1NDEzZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEO4uA4BZyNO8XHNZYTOxMY8/7AMA2dASvf5 +lTN1MCe5IrQeogCsEYmMak8HWHflJZP9en6fzxHYsPzX87AN2qZb6IcosTJP0L5 UEqIYzKdCYkGSq6FA+87Z2XED8IuD+YkE8IuimK+09LiCTzwRygp/Td0QuXSomTX HOUpERBiDXydVY5Bt0O0ssPH8UtRrvvDXg/l/X7XZeAU/2kpa5lXZUHXOgqyn5Mk c+TaR/7NTso0Sa8fVEhZAISJsjsXcC2xC92a6B9kzSJZY2PLIVvzYbrLnHsad7da uPu5RmrnFV7UNPBO9YydbAmKpHohnA9cRcL1Gu4q2JoXqMjf3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNwFk56fW2X9QK3S/NTj0NXK7FKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjVhZmVkZTYtNTY2NC0z MDQzLTg1YzEtMzBhZWRmNWRiYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMh5PG2FvewTH5XWzOl3DXRhuPPhhZ5sLzYYyUAlkQzCrdu9wNobBCb HUjo3MGDcXZevZanmmI01dHzddlK1St0KABTiu0sz1xtxfM6lY5Cj+uw0zWVvJVu 4QZysjKWFGhTE1TP/0Q8zubkrc7e3oe0W755279sn4zm4T1c4OQCmXfZBBeoIC7l uVMf/LWWuDWrKRbyWXla/u6aw8KfCsG4hpuDm4QrBKW9Ro+feVEUrkLnFG8oRU80 9YWWJLYc/gPjHon0khlIluvIcFUVA3KnQsuQzxmD3AzExaJpOBExz+AcX31dAGml rWuK9AU56LLtFDIFIZVO/MCK2+8IHdo= -----END CERTIFICATE-----Generated at Fri Jul 24 02:14:58 2026 by rpki-client