$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f2988f2-72c8-3b55-9e11-f302abdabcd8.roa File: 3f2988f2-72c8-3b55-9e11-f302abdabcd8.roa (raw, json) Hash identifier: tOOUbU86Sc+eLErD3CHhPhQi0sP0plXyfMs842WkEys= Subject key identifier: 04:4A:CB:82:FF:09:CA:E8:A1:E6:0C:F5:9F:31:3E:7B:E6:02:DE:75 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C66BF1F8C1BBB0538160 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f2988f2-72c8-3b55-9e11-f302abdabcd8.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 6171 IP address blocks: 207.216.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c6:6b:f1:f8:c1:bb:b0:53:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=babc922d-723a-45a5-b6c9-ecded1904c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:88:11:d5:aa:18:f6:ca:62:22:c6:88:33:0c: fa:84:e2:d8:69:d8:c9:27:b3:ea:ab:4f:cb:0f:8c: 61:b9:27:12:ef:3b:fa:f8:8e:26:1a:f7:d8:c4:15: 07:1d:1d:4b:23:b8:06:85:ef:a1:79:0e:4d:64:67: d0:47:ba:83:98:89:ed:b1:bb:1b:7f:86:3f:fc:32: 1a:57:3c:e8:86:81:7b:e6:84:f4:60:71:ee:b4:60: be:f5:99:e0:03:64:38:b6:86:33:53:08:da:21:b4: d2:6f:9f:d1:a7:9a:97:fa:35:56:aa:d1:b5:28:20: 2f:19:45:cf:8f:d7:78:cf:a6:45:5f:9a:f4:df:25: 10:b5:66:a1:c3:69:d8:91:23:32:9a:a0:72:05:40: 9a:c6:26:fc:78:ea:5e:a4:0c:eb:e6:50:b8:8d:d8: 8e:15:ba:e8:23:74:59:c2:64:b5:51:63:b3:96:97: f8:db:ed:04:4a:98:73:48:10:da:91:0a:2d:c1:ee: 18:90:07:59:b9:08:37:99:1e:62:6a:66:8b:71:6e: 63:94:b3:d3:e3:f7:5b:8c:1b:fd:1e:55:1c:41:15: 59:e6:25:31:7d:b5:3a:e8:55:ae:8d:92:4c:ba:f2: e2:05:db:fd:b3:14:ec:8b:a3:0e:f0:dd:a2:e4:40: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4A:CB:82:FF:09:CA:E8:A1:E6:0C:F5:9F:31:3E:7B:E6:02:DE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f2988f2-72c8-3b55-9e11-f302abdabcd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.216.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:40:21:f9:1c:13:c2:7f:76:1d:c4:14:d3:03:f5:51:fa:64: 8b:72:95:43:82:24:42:01:84:78:e4:da:b7:97:21:8d:79:a0: 2a:b2:a8:9f:34:3b:08:da:a5:ad:9d:56:e4:d9:fb:96:f6:e4: 67:87:c6:5e:44:9a:50:c5:62:9c:32:93:d8:44:66:2a:06:8b: 30:2b:f1:fe:b0:c7:27:96:3c:9a:af:c1:7d:02:1d:80:b4:b3: 6a:29:e1:44:d7:06:fe:43:f6:3d:f5:51:a4:a7:dc:f8:ab:08: c5:f0:f2:b4:60:44:05:00:56:0a:d3:6b:dc:ff:1b:26:1d:00: 5a:81:15:29:13:77:d4:f9:ef:73:33:b0:dc:d0:9a:7a:ae:86: 16:5f:57:05:d2:94:ac:9f:22:bd:1a:cd:54:28:8e:f6:d4:ca: 91:67:87:91:39:37:51:0d:a8:3e:99:6c:15:f1:eb:5f:83:c4: e9:fb:a4:98:e3:89:5a:39:bc:61:1c:81:44:49:5b:7d:7d:70: 08:40:86:55:60:e6:ab:a2:05:4f:04:99:93:b3:4a:0f:79:95: f8:9f:b2:dc:b3:f0:da:6a:b1:3a:fc:0f:00:17:b5:cc:5f:b7: b3:2c:7e:82:ce:e5:db:38:eb:ed:1d:df:29:15:08:94:c6:a5: 2f:91:71:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcZr8fjBu7BTgWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YmFiYzkyMmQtNzIzYS00NWE1LWI2YzktZWNkZWQxOTA0YzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4gR1aoY9spiIsaIMwz6hOLYadjJJ7Pqq0/L D4xhuScS7zv6+I4mGvfYxBUHHR1LI7gGhe+heQ5NZGfQR7qDmIntsbsbf4Y//DIa VzzohoF75oT0YHHutGC+9ZngA2Q4toYzUwjaIbTSb5/Rp5qX+jVWqtG1KCAvGUXP j9d4z6ZFX5r03yUQtWahw2nYkSMymqByBUCaxib8eOpepAzr5lC4jdiOFbroI3RZ wmS1UWOzlpf42+0ESphzSBDakQotwe4YkAdZuQg3mR5iamaLcW5jlLPT4/dbjBv9 HlUcQRVZ5iUxfbU66FWujZJMuvLiBdv9sxTsi6MO8N2i5EDBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARKy4L/CcrooeYM9Z8xPnvmAt51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2YyOTg4ZjItNzJjOC0z YjU1LTllMTEtZjMwMmFiZGFiY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz9j0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFAIfkcE8J/dh3EFNMD9VH6ZItylUOCJEIBhHjk2reXIY15oCqyqJ80 Owjapa2dVuTZ+5b25GeHxl5EmlDFYpwyk9hEZioGizAr8f6wxyeWPJqvwX0CHYC0 s2op4UTXBv5D9j31UaSn3PirCMXw8rRgRAUAVgrTa9z/GyYdAFqBFSkTd9T573Mz sNzQmnquhhZfVwXSlKyfIr0azVQojvbUypFnh5E5N1ENqD6ZbBXx61+DxOn7pJjj iVo5vGEcgURJW319cAhAhlVg5quiBU8EmZOzSg95lfifstyz8NpqsTr8DwAXtcxf t7MsfoLO5ds46+0d3ykVCJTGpS+RcRw= -----END CERTIFICATE-----Generated at Sun Oct 19 20:10:40 2025 by rpki-client