$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa File: bca291d0-d607-33d2-a2ce-47c04785d564.roa (raw, json) Hash identifier: T5Y+OsAkI63wcT501tJZvuMl4QzhncRquREwZYkflKU= Subject key identifier: 7F:59:FE:FD:9A:B6:4B:08:04:B3:B7:87:84:BB:55:9E:C2:9F:8C:81 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B072E2F49BB265060762080 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.107.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:2e:2f:49:bb:26:50:60:76:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=fb7760ae-1201-4bdc-a2f1-0959df184ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:6a:f7:47:0d:b2:7a:79:a2:8f:c5:da:02: 33:20:aa:84:73:98:ee:74:36:28:52:51:62:fc:ad: c5:68:72:28:18:1d:44:26:e0:6d:8a:f1:11:4e:e3: 00:1e:74:24:bc:13:d9:a7:5b:14:87:25:29:b6:bf: ba:92:aa:a3:0d:04:42:60:45:96:ad:87:42:82:57: c9:21:69:6a:27:bb:f8:43:2f:d3:88:a7:16:09:91: 2e:82:5b:01:23:b7:34:d1:d2:05:6c:0e:8d:da:d2: fc:38:6c:89:83:90:78:8b:41:1a:e8:16:3f:90:2a: 20:92:b5:fc:9c:84:ae:63:a2:ad:b5:2e:b7:40:c5: 16:03:3c:87:2d:49:74:c7:e7:99:ca:93:b8:34:d3: ec:ca:c7:df:03:85:ed:5f:cc:fb:6e:07:48:5d:4d: 04:8c:13:7f:37:67:9f:d3:2f:6f:4d:b6:0f:87:20: 76:7b:11:87:97:e5:7e:22:59:36:c1:2e:de:e3:4e: 06:42:87:cc:d7:0a:a5:9c:78:07:36:26:80:8e:93: c7:ea:6a:4e:12:47:ab:15:46:9b:cf:0a:6b:31:b6: 27:39:a5:2e:9a:e1:c6:bf:22:82:84:1e:52:eb:cf: f7:0f:e3:2e:84:c3:c3:46:c1:cd:91:d6:57:ff:4b: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:59:FE:FD:9A:B6:4B:08:04:B3:B7:87:84:BB:55:9E:C2:9F:8C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.107.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:65:54:96:6c:a8:ce:d2:49:ad:57:52:3c:70:17:72:ed:a6: 42:02:d2:3d:37:c2:69:e6:e6:84:8c:39:b6:b1:6a:c3:2a:5b: b4:8c:e6:fb:d4:0d:a7:90:7f:1c:1d:d4:2f:c3:f3:46:20:a3: fd:f0:86:a6:6c:4d:8a:a7:74:3b:d6:67:19:75:76:f1:2b:d6: 05:a1:b1:45:f8:b9:ee:01:bc:eb:0c:4a:8a:fd:f9:00:bc:e4: a8:83:70:b5:cb:78:48:0d:5b:89:eb:ca:b9:2a:be:a9:53:55: 09:1e:1d:1e:45:99:3d:03:a5:5c:a5:74:57:4b:e1:29:69:cb: 1a:7c:9c:50:3b:63:97:1a:dd:98:c0:74:af:a0:ca:2e:e4:94: 10:24:29:2c:9d:2b:88:c8:77:08:1a:c9:c5:7e:25:e4:69:22: e0:af:4d:b9:73:21:45:eb:56:a4:ee:ab:0b:50:fc:a1:41:b3: 05:6d:b3:64:af:cd:d5:d9:10:67:4e:3b:e1:fd:2a:db:e8:9a: e5:30:9e:67:4a:5d:75:35:af:62:40:0e:1f:86:8e:68:c3:c7: 50:ba:4f:88:da:eb:b2:b6:92:14:6b:50:7e:b6:c0:68:91:2e: 50:de:ef:27:6f:ed:12:96:02:f8:b5:f9:eb:cb:68:95:f6:e0: a8:e0:03:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBy4vSbsmUGB2IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZmI3NzYwYWUtMTIwMS00YmRjLWEyZjEtMDk1OWRmMTg0ZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RZq90cNsnp5oo/F2gIzIKqEc5judDYoUlFi /K3FaHIoGB1EJuBtivERTuMAHnQkvBPZp1sUhyUptr+6kqqjDQRCYEWWrYdCglfJ IWlqJ7v4Qy/TiKcWCZEuglsBI7c00dIFbA6N2tL8OGyJg5B4i0Ea6BY/kCogkrX8 nISuY6KttS63QMUWAzyHLUl0x+eZypO4NNPsysffA4XtX8z7bgdIXU0EjBN/N2ef 0y9vTbYPhyB2exGHl+V+Ilk2wS7e404GQofM1wqlnHgHNiaAjpPH6mpOEkerFUab zwprMbYnOaUumuHGvyKChB5S68/3D+MuhMPDRsHNkdZX/0uKbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9Z/v2atksIBLO3h4S7VZ7Cn4yBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmNhMjkxZDAtZDYwNy0z M2QyLWEyY2UtNDdjMDQ3ODVkNTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0WtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEplVJZsqM7SSa1XUjxwF3LtpkIC0j03wmnm5oSMObaxasMqW7SM5vvU DaeQfxwd1C/D80Ygo/3whqZsTYqndDvWZxl1dvEr1gWhsUX4ue4BvOsMSor9+QC8 5KiDcLXLeEgNW4nryrkqvqlTVQkeHR5FmT0DpVyldFdL4Slpyxp8nFA7Y5ca3ZjA dK+gyi7klBAkKSydK4jIdwgaycV+JeRpIuCvTblzIUXrVqTuqwtQ/KFBswVts2Sv zdXZEGdOO+H9KtvomuUwnmdKXXU1r2JADh+GjmjDx1C6T4ja67K2khRrUH62wGiR LlDe7ydv7RKWAvi1+evLaJX24KjgA/E= -----END CERTIFICATE-----Generated at Sun Oct 19 20:10:53 2025 by rpki-client