$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa File: d18ff211-0ee2-3022-8c45-6711b4123785.roa (raw, json) Hash identifier: L47FKJJh9tFJXDJP/qFg6zw9kAY6BVCCYUDZjTXFaIU= Subject key identifier: E4:8F:50:20:A8:D4:3C:B0:74:77:EB:EE:FA:78:68:8E:F4:09:61:0F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5DD1DEEE8FEF4237F8FC1B80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 852 IP address blocks: 209.29.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:de:ee:8f:ef:42:37:f8:fc:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=32c37a2a-3628-4070-8fca-c5213f6e75d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:de:eb:ab:75:ae:75:5e:f4:a7:80:85:ad: 73:f3:c9:da:96:34:c1:cb:96:14:01:22:b7:b2:fa: 81:2b:6f:36:44:b2:f8:ec:18:ff:24:30:e8:48:0b: 61:42:02:fe:3e:68:0e:27:7f:1e:9e:dd:a1:18:60: 92:d2:53:67:28:31:22:7d:50:68:c3:96:a5:95:8a: 45:02:47:27:16:9a:f1:c2:81:da:7e:fa:36:37:0e: f3:e4:29:d0:9e:df:9f:67:2f:ff:68:d1:1d:ce:9f: 0d:b5:bb:0a:4d:a1:75:f2:10:2e:8c:b8:87:ae:52: 68:37:35:b6:2a:0e:79:d7:97:67:80:b4:b9:13:55: bb:bb:42:d5:3a:f2:97:79:31:31:f3:fb:c0:3d:63: af:7d:c6:5c:1a:92:1e:7f:f7:9b:19:16:c4:6e:ef: 12:a8:73:98:eb:ae:80:9a:c5:4b:83:a7:41:4c:f5: 1e:33:b0:84:b2:04:b8:67:58:c5:7f:6b:8e:d9:68: 41:1b:69:fe:70:cf:ad:c5:0c:6d:a6:7a:3b:7b:9a: 43:04:2d:28:5f:20:9e:57:a9:c0:a2:f9:f7:99:65: 71:d8:55:7d:b6:da:b9:37:6b:1d:d8:8a:96:c2:ee: 82:9b:72:76:e3:81:69:a4:9c:7e:f3:a2:09:de:52: 7e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8F:50:20:A8:D4:3C:B0:74:77:EB:EE:FA:78:68:8E:F4:09:61:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:29:a8:d5:14:ec:d5:b2:28:0a:e8:e9:92:c9:08:7c:1d:91: 99:b3:f9:34:0f:6a:7a:ba:d4:64:9c:3b:7b:4f:7d:d6:95:c6: f5:15:da:21:16:7e:6a:55:57:a8:44:c6:4f:07:bb:09:02:56: 5b:54:7b:3c:c5:90:82:b6:3f:16:63:70:4d:f0:b1:aa:40:c0: 23:75:b2:e5:29:1c:b1:66:ca:2f:67:70:a7:09:1f:88:c5:76: 73:85:8a:92:12:9b:39:3c:01:be:66:1a:1c:19:fc:80:40:7b: 8e:72:f3:b6:8e:83:29:23:c5:4c:ce:90:d1:7b:e7:26:7b:4e: b9:43:c5:f4:1a:7c:80:ed:6e:6e:ca:f4:25:d1:99:ff:aa:d5: f9:58:d8:11:fe:3c:db:5f:c3:4b:4b:d4:18:0b:54:e6:9d:8a: 89:60:ca:66:9e:20:47:b3:75:ff:a2:f0:32:ec:8e:c9:85:26: 1f:eb:db:91:ea:2b:94:75:51:14:f5:4f:b0:7e:68:74:39:4a: 5a:78:48:fb:75:c6:fd:c0:10:de:0f:a1:fc:10:78:d3:9f:3b: ca:05:36:7b:64:f5:9a:6b:ed:60:87:e0:09:b9:80:b6:3e:d5: 66:a0:b3:ef:ab:d1:56:e9:41:78:a9:48:13:6c:34:67:5c:ae: 2f:cd:35:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0d7uj+9CN/j8G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MzJjMzdhMmEtMzYyOC00MDcwLThmY2EtYzUyMTNmNmU3NWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfPe66t1rnVe9KeAha1z88naljTBy5YUASK3 svqBK282RLL47Bj/JDDoSAthQgL+PmgOJ38ent2hGGCS0lNnKDEifVBow5allYpF AkcnFprxwoHafvo2Nw7z5CnQnt+fZy//aNEdzp8NtbsKTaF18hAujLiHrlJoNzW2 Kg5515dngLS5E1W7u0LVOvKXeTEx8/vAPWOvfcZcGpIef/ebGRbEbu8SqHOY666A msVLg6dBTPUeM7CEsgS4Z1jFf2uO2WhBG2n+cM+txQxtpno7e5pDBC0oXyCeV6nA ovn3mWVx2FV9ttq5N2sd2IqWwu6Cm3J244FppJx+86IJ3lJ+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSPUCCo1DywdHfr7vp4aI70CWEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDE4ZmYyMTEtMGVlMi0z MDIyLThjNDUtNjcxMWI0MTIzNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R1rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACApqNUU7NWyKAro6ZLJCHwdkZmz+TQPanq61GScO3tPfdaVxvUV2iEW fmpVV6hExk8HuwkCVltUezzFkIK2PxZjcE3wsapAwCN1suUpHLFmyi9ncKcJH4jF dnOFipISmzk8Ab5mGhwZ/IBAe45y87aOgykjxUzOkNF75yZ7TrlDxfQafIDtbm7K 9CXRmf+q1flY2BH+PNtfw0tL1BgLVOadiolgymaeIEezdf+i8DLsjsmFJh/r25Hq K5R1URT1T7B+aHQ5Slp4SPt1xv3AEN4PofwQeNOfO8oFNntk9Zpr7WCH4Am5gLY+ 1Wags++r0VbpQXipSBNsNGdcri/NNQM= -----END CERTIFICATE-----Generated at Sun Oct 19 22:45:45 2025 by rpki-client