$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25f85582-efd3-389e-8365-bed09b5bbffd.roa File: 25f85582-efd3-389e-8365-bed09b5bbffd.roa (raw, json) Hash identifier: saF+v++kgjIZD92OGmleOxceK2fNXp28bRYYZdaCBBE= Subject key identifier: 35:CD:DD:7B:87:80:AE:E5:A7:07:44:8F:3B:1A:03:82:FE:3C:9C:AC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7FFA2C815D7A1D364A25D400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25f85582-efd3-389e-8365-bed09b5bbffd.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 108.59.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:2c:81:5d:7a:1d:36:4a:25:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=1a1d9cfb-7eff-4e48-a3fe-d2cc407b682c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:10:d5:8d:f8:ec:e5:f7:1a:8b:9c:ed:58:f0: a9:03:83:b6:b0:09:b3:71:6a:53:66:56:d8:75:7c: 04:9e:30:8a:5c:d0:d5:e8:53:da:cb:47:3e:59:69: 4c:18:14:78:02:14:ae:7c:cb:a5:90:21:84:24:ee: 60:76:44:31:36:9e:f2:0d:94:3f:46:50:27:a8:f6: f5:61:7a:65:42:30:c4:76:57:10:c3:8d:98:1b:bd: 4c:a5:80:dc:d1:37:b0:f2:b5:c5:14:3c:a5:80:97: e5:ca:01:0f:6c:a1:27:d4:9b:34:b5:fe:65:1b:4c: 1c:8f:ff:63:38:27:f4:6e:07:ef:de:75:d4:e3:89: 03:e0:e8:b7:37:8f:45:d9:82:78:19:2b:70:8a:66: 53:7e:83:85:e5:67:26:06:20:64:5c:11:b2:b6:29: 8a:38:3e:87:be:66:86:2f:c5:c0:97:52:5d:f2:7d: 8d:58:1f:73:92:40:52:af:16:69:54:3b:58:fb:fb: 93:9e:ad:17:18:f5:e1:9b:ec:e5:65:d0:32:66:12: 2d:3b:12:68:11:73:96:91:c9:13:8a:e8:f2:d6:fc: e6:f0:4c:f2:31:92:4d:26:e3:3d:21:42:e8:16:e4: c5:53:8c:0e:e3:ae:27:81:b6:95:d4:b2:c8:92:91: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CD:DD:7B:87:80:AE:E5:A7:07:44:8F:3B:1A:03:82:FE:3C:9C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25f85582-efd3-389e-8365-bed09b5bbffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e9:71:dc:cb:3a:40:22:7d:2c:8f:f7:52:2a:95:3c:db:d6: b8:14:e5:30:11:9f:87:9d:36:0b:24:a1:38:bf:89:23:fd:2f: 11:0f:e2:5c:0b:26:af:65:93:cf:1b:5b:da:b3:bb:a5:b7:2e: 50:2e:60:6e:09:f7:6a:cd:1b:f3:d9:15:9b:04:7a:02:44:4f: 14:4a:c4:dd:90:72:2e:ca:9a:27:bb:35:22:a8:72:2f:56:64: 9a:13:a1:ed:e9:af:a5:19:69:14:aa:9a:7e:89:2b:75:a7:d1: ef:43:ee:d5:ce:4f:ef:09:a2:b3:ff:8a:80:b5:80:f9:79:f0: d1:93:3c:ab:00:15:82:93:73:7e:b0:cd:8c:6c:d1:70:f6:c4: 60:9e:10:a1:0e:ba:2a:3e:b4:9f:29:b1:3d:1f:b7:d7:fa:5b: e6:3a:69:8c:f0:90:e0:54:74:7c:e3:d1:64:63:56:6b:c5:ab: 51:78:fa:e8:ba:33:e2:8d:0f:1f:17:43:0f:6b:49:ef:74:53: a4:13:4d:79:cf:32:62:19:7d:a4:11:e9:f3:69:d5:c1:f6:72: 35:5a:a6:81:65:d2:d5:38:39:ae:f9:99:70:ee:9f:5c:df:2b: 14:b3:32:f9:87:1a:fc:7e:81:63:40:8c:5b:72:3d:44:51:94: 36:d0:d4:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+iyBXXodNkol1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk MWExZDljZmItN2VmZi00ZTQ4LWEzZmUtZDJjYzQwN2I2ODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRDVjfjs5fcai5ztWPCpA4O2sAmzcWpTZlbY dXwEnjCKXNDV6FPay0c+WWlMGBR4AhSufMulkCGEJO5gdkQxNp7yDZQ/RlAnqPb1 YXplQjDEdlcQw42YG71MpYDc0Tew8rXFFDylgJflygEPbKEn1Js0tf5lG0wcj/9j OCf0bgfv3nXU44kD4Oi3N49F2YJ4GStwimZTfoOF5WcmBiBkXBGytimKOD6HvmaG L8XAl1Jd8n2NWB9zkkBSrxZpVDtY+/uTnq0XGPXhm+zlZdAyZhItOxJoEXOWkckT iujy1vzm8EzyMZJNJuM9IULoFuTFU4wO464ngbaV1LLIkpE2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXN3XuHgK7lpwdEjzsaA4L+PJysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjVmODU1ODItZWZkMy0z ODllLTgzNjUtYmVkMDliNWJiZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbDusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnpcdzLOkAifSyP91IqlTzb1rgU5TARn4edNgskoTi/iSP9LxEP4lwL Jq9lk88bW9qzu6W3LlAuYG4J92rNG/PZFZsEegJETxRKxN2Qci7Kmie7NSKoci9W ZJoToe3pr6UZaRSqmn6JK3Wn0e9D7tXOT+8JorP/ioC1gPl58NGTPKsAFYKTc36w zYxs0XD2xGCeEKEOuio+tJ8psT0ft9f6W+Y6aYzwkOBUdHzj0WRjVmvFq1F4+ui6 M+KNDx8XQw9rSe90U6QTTXnPMmIZfaQR6fNp1cH2cjVapoFl0tU4Oa75mXDun1zf KxSzMvmHGvx+gWNAjFtyPURRlDbQ1KE= -----END CERTIFICATE-----Generated at Fri Jul 24 01:50:17 2026 by rpki-client