$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b49c4f9a-efdd-3c46-9470-756dbc320952.roa File: b49c4f9a-efdd-3c46-9470-756dbc320952.roa (raw, json) Hash identifier: QUsk73nWgrDVBPZvcNFprVQ3cUdRQsabXVL3uoZzc88= Subject key identifier: 7E:1A:11:48:0F:3F:BD:CD:B3:91:8E:32:73:A5:69:15:36:3D:D0:37 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B0731D3B2E28B44AB271900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b49c4f9a-efdd-3c46-9470-756dbc320952.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 207.81.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:31:d3:b2:e2:8b:44:ab:27:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=cb8a0b48-5c88-4fb7-a95a-ad13bae7fb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d5:f0:dd:b0:4d:2d:41:85:72:74:17:55:9a: c1:35:bd:fd:18:67:05:99:06:2c:b8:cf:3b:42:d9: d1:76:ae:43:77:fe:83:54:8a:33:74:56:7a:cc:e0: a0:95:23:f2:c5:9d:f0:f1:92:e7:46:97:be:62:3f: b6:61:99:cc:23:44:fd:c4:7e:9c:02:27:3a:c8:63: ea:8a:c0:f2:77:a9:79:c1:50:d0:03:00:b3:81:3f: 72:73:04:6d:b7:b9:8b:d5:01:d0:9c:fa:91:f0:04: 04:ce:20:03:92:d3:bc:a1:ab:82:eb:11:38:92:7f: 3a:e1:33:1b:fc:31:21:e7:34:2b:ae:9f:f7:e9:7b: 3c:a9:a7:42:46:77:50:d4:f4:b6:c4:59:80:c0:11: d2:14:02:c6:49:23:de:a9:92:a3:eb:0d:fb:6c:81: fd:57:49:8f:64:d3:3a:3d:ba:db:b7:d8:d7:a8:34: df:c1:93:2d:46:c8:74:8e:30:cb:e2:7e:06:d0:8c: e1:d8:19:82:50:f3:13:28:2d:0a:b3:25:a7:65:73: 20:f9:6e:01:a1:7e:47:5a:10:ac:a0:16:13:e6:0a: ab:49:32:79:63:8c:57:79:4e:4e:57:ba:02:af:76: ca:77:1b:99:64:de:31:9c:e5:83:14:43:28:60:6f: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1A:11:48:0F:3F:BD:CD:B3:91:8E:32:73:A5:69:15:36:3D:D0:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b49c4f9a-efdd-3c46-9470-756dbc320952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.81.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f4:e1:4e:b3:61:99:c5:ef:35:0c:48:57:4f:7b:f1:48:df: f1:3b:c0:29:31:18:fd:ea:e7:43:14:26:f0:64:63:ed:d8:02: 16:8a:6a:45:10:93:2a:f5:ba:ea:f0:f7:b1:8d:53:4c:e7:31: a3:42:66:60:80:79:69:52:cd:ae:6d:5e:f4:45:8b:77:05:b7: 0b:29:98:57:e4:10:b9:ca:66:9c:fc:b9:a5:28:61:30:e7:33: 8f:64:4e:c1:28:ba:42:85:ef:a3:6f:63:2d:ff:b7:92:c5:a3: b4:77:58:59:36:55:d4:a0:f3:2e:f2:28:84:c2:d1:60:4d:cc: 82:b0:44:38:71:76:53:52:a3:ea:55:bb:c7:63:47:ae:b0:20: 7d:5f:5a:32:89:52:c9:14:e8:87:81:a9:6b:a3:f9:cd:21:5e: 51:fe:5c:48:32:5c:94:55:61:55:16:3b:f2:8a:9d:cc:15:8b: 20:da:35:12:e0:4e:e9:5e:e3:04:ba:48:bf:25:d5:bc:c9:5f: 0f:1d:24:c6:4e:76:ca:44:13:91:26:96:52:7e:a3:cb:7a:de: 74:28:33:58:35:cc:72:93:c0:b4:3f:0c:24:8a:29:27:8c:0a: 24:8e:46:3a:ab:d3:60:10:38:69:b3:65:22:a1:7f:d5:50:6b: 7c:4b:58:55 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtbBzHTsuKLRKsnGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk Y2I4YTBiNDgtNWM4OC00ZmI3LWE5NWEtYWQxM2JhZTdmYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9Xw3bBNLUGFcnQXVZrBNb39GGcFmQYsuM87 QtnRdq5Dd/6DVIozdFZ6zOCglSPyxZ3w8ZLnRpe+Yj+2YZnMI0T9xH6cAic6yGPq isDyd6l5wVDQAwCzgT9ycwRtt7mL1QHQnPqR8AQEziADktO8oauC6xE4kn864TMb /DEh5zQrrp/36Xs8qadCRndQ1PS2xFmAwBHSFALGSSPeqZKj6w37bIH9V0mPZNM6 Pbrbt9jXqDTfwZMtRsh0jjDL4n4G0Izh2BmCUPMTKC0KsyWnZXMg+W4BoX5HWhCs oBYT5gqrSTJ5Y4xXeU5OV7oCr3bKdxuZZN4xnOWDFEMoYG/CBQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH4aEUgPP73Ns5GOMnOlaRU2PdA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjQ5YzRmOWEtZWZkZC0z YzQ2LTk0NzAtNzU2ZGJjMzIwOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz1EwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAh/ThTrNhmcXvNQxIV0978Ujf8TvAKTEY/ernQxQm8GRj7dgCFopqRRCT KvW66vD3sY1TTOcxo0JmYIB5aVLNrm1e9EWLdwW3CymYV+QQucpmnPy5pShhMOcz j2ROwSi6QoXvo29jLf+3ksWjtHdYWTZV1KDzLvIohMLRYE3MgrBEOHF2U1Kj6lW7 x2NHrrAgfV9aMolSyRToh4Gpa6P5zSFeUf5cSDJclFVhVRY78oqdzBWLINo1EuBO 6V7jBLpIvyXVvMlfDx0kxk52ykQTkSaWUn6jy3redCgzWDXMcpPAtD8MJIopJ4wK JI5GOqvTYBA4abNlIqF/1VBrfEtYVQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:17:49 2025 by rpki-client