$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa File: 3baf912b-384b-3427-b752-a35aa9af6107.roa (raw, json) Hash identifier: R522NGG9wfyKqU74ARtdvDyT16Wfz6/OF8dNpYBidxY= Subject key identifier: 0B:6A:67:77:6D:01:54:25:3C:B1:CE:A7:B9:69:AA:D3:BF:42:70:BF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B07315FAA2381BA1AF9EC00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 172.219.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:31:5f:aa:23:81:ba:1a:f9:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=6972c68e-de40-4cf3-8d32-08972ef1a64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:09:be:99:d6:ed:ac:f7:25:ba:89:d5:0a:01: 14:13:39:78:0d:ab:0e:d1:e3:71:cd:e7:5c:db:41: 75:2d:f9:77:86:a1:17:7b:51:18:b0:8c:80:70:25: 51:41:a3:9c:8e:6c:cd:5f:42:9c:a2:04:71:48:88: 7a:13:34:3b:dc:2d:05:b4:6b:24:56:5c:15:42:15: 39:4c:0a:2f:d2:2d:00:b3:cd:f1:0e:3a:b3:17:9b: c5:c9:1f:b8:2b:46:9b:d3:e2:3d:ec:85:9a:a4:11: ea:3d:2c:c2:05:08:d7:e0:cf:df:c2:28:42:a5:da: 2a:8b:31:22:d0:f7:d5:79:3e:1e:66:37:21:7d:de: fa:36:7e:81:8b:fd:e6:a1:52:29:66:b2:a8:97:4b: a6:93:7d:6a:63:5b:c9:f7:d1:cb:4c:32:9f:ae:26: a4:37:4c:7e:c6:0b:cb:86:22:63:84:74:f1:ea:23: 73:f5:ba:49:b5:af:2a:13:f2:c1:1c:d9:7c:4b:e0: b2:e7:14:c6:68:ac:df:cb:11:d3:51:37:29:9b:b4: 1c:26:5d:28:12:dd:23:3d:c7:d4:4b:44:e0:2a:70: 2c:9d:ec:ce:79:4b:75:f7:33:25:9f:a7:6f:ea:36: d8:86:c3:55:d6:0f:de:38:0b:3d:50:00:31:3e:71: 9d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6A:67:77:6D:01:54:25:3C:B1:CE:A7:B9:69:AA:D3:BF:42:70:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 172.219.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0c:4b:db:9d:ab:01:1a:e8:ac:1f:34:66:b0:bf:c4:25:35: af:7c:98:f7:85:8a:88:48:35:f4:86:55:29:cd:0f:36:80:48: f2:ae:20:2b:ac:9a:1d:2b:6a:69:bb:c9:b4:19:99:2d:0b:e0: 8a:b1:4f:a8:75:2a:b1:40:50:76:bc:52:e0:ec:61:f1:ef:10: 74:a7:80:5e:09:10:29:b0:0e:10:d5:70:7a:44:d0:64:b9:03: 16:eb:59:f3:fc:47:41:a1:6a:c4:e7:27:98:23:19:1c:6b:5d: 0d:68:ec:48:13:9f:87:32:d4:34:24:a9:ed:99:6b:4e:5b:9c: de:7a:c5:fd:2b:66:cb:4d:f9:81:9c:96:da:bf:40:da:d6:00: 09:05:b8:e1:30:11:1d:86:0e:44:36:57:39:30:9c:6d:0c:7b: 77:e8:60:cf:dd:78:c7:b8:32:5a:92:5e:5c:70:c7:d5:6c:be: 23:fc:b2:0d:fb:58:c9:55:2a:fe:ee:e3:7a:fa:b7:f0:80:58: cf:12:42:1d:f2:aa:90:85:1b:6b:5c:89:9a:80:10:08:a1:1d: 7f:7d:5f:71:cc:a6:64:05:3a:e1:e8:0e:83:d8:69:f8:f5:b6: 52:5b:5a:a9:40:93:c9:f9:ce:62:10:8b:fc:07:96:ac:fe:1f: a1:75:61:ce -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtbBzFfqiOBuhr57AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk Njk3MmM2OGUtZGU0MC00Y2YzLThkMzItMDg5NzJlZjFhNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgm+mdbtrPcluonVCgEUEzl4DasO0eNxzedc 20F1Lfl3hqEXe1EYsIyAcCVRQaOcjmzNX0KcogRxSIh6EzQ73C0FtGskVlwVQhU5 TAov0i0As83xDjqzF5vFyR+4K0ab0+I97IWapBHqPSzCBQjX4M/fwihCpdoqizEi 0PfVeT4eZjchfd76Nn6Bi/3moVIpZrKol0umk31qY1vJ99HLTDKfriakN0x+xgvL hiJjhHTx6iNz9bpJta8qE/LBHNl8S+Cy5xTGaKzfyxHTUTcpm7QcJl0oEt0jPcfU S0TgKnAsnezOeUt19zMln6dv6jbYhsNV1g/eOAs9UAAxPnGdywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAtqZ3dtAVQlPLHOp7lpqtO/QnC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2JhZjkxMmItMzg0Yi0z NDI3LWI3NTItYTM1YWE5YWY2MTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArNswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABwxL252rARrorB80ZrC/xCU1r3yY94WKiEg19IZVKc0PNoBI8q4gK6ya HStqabvJtBmZLQvgirFPqHUqsUBQdrxS4Oxh8e8QdKeAXgkQKbAOENVwekTQZLkD FutZ8/xHQaFqxOcnmCMZHGtdDWjsSBOfhzLUNCSp7ZlrTluc3nrF/Stmy035gZyW 2r9A2tYACQW44TARHYYORDZXOTCcbQx7d+hgz914x7gyWpJeXHDH1Wy+I/yyDftY yVUq/u7jevq38IBYzxJCHfKqkIUba1yJmoAQCKEdf31fccymZAU64egOg9hp+PW2 UltaqUCTyfnOYhCL/AeWrP4foXVhzg== -----END CERTIFICATE-----Generated at Mon Oct 20 01:14:00 2025 by rpki-client