$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/ff842fd7-a7ac-34ac-b3ef-93d6c371c278.roa File: ff842fd7-a7ac-34ac-b3ef-93d6c371c278.roa (raw, json) Hash identifier: 315RM2VLcq+6kkj8Je2c+CM87NvaZ8a7mEZGjsGjCI0= Subject key identifier: FE:2C:B4:DE:C2:7E:9D:F4:84:E2:94:75:6E:5A:0B:B8:FD:1E:E5:6A Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584B8BE21C24D01C04B039835580 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/ff842fd7-a7ac-34ac-b3ef-93d6c371c278.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 3807 IP address blocks: 207.196.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1c:24:d0:1c:04:b0:39:83:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=44fc1dca-04da-49c6-9cc2-fb1d18a0f397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:50:4d:cb:a8:d0:22:ec:6a:3d:70:7a:5f: f4:fe:ff:ba:00:ed:07:92:b6:e1:65:40:99:82:ff: 5b:69:1c:9a:fe:27:58:a9:ea:55:52:f6:f8:d0:1a: e4:f3:e7:48:9f:8f:a9:42:ca:48:bd:3a:a6:a3:92: 08:8b:6f:c5:cb:2f:a1:7c:15:29:dc:54:c8:03:2c: 9a:a0:60:4f:68:8c:10:0a:18:dc:ef:ae:3e:13:4b: 16:f1:6e:67:53:5b:7d:bc:f8:61:8a:84:3c:e7:34: 31:bf:27:4d:a9:1d:e2:5c:44:78:5c:1c:8c:70:8d: 22:9d:4f:46:13:95:a1:8a:4b:21:cc:9e:eb:1d:a7: d7:10:c2:47:50:ec:da:61:30:fa:3d:f3:94:f8:c1: 17:30:49:5c:bd:ec:dc:f8:a8:4d:88:40:9b:ee:ed: 83:cb:4b:b6:4b:2d:8d:51:52:66:d7:fb:64:8e:68: a5:a1:ac:47:25:c6:91:e7:44:9b:f2:3a:b9:f6:f2: d2:74:f3:2c:a8:d6:b9:f3:8d:8b:f4:b7:9e:2f:a1: 75:dc:c7:13:7f:58:bc:e5:7d:c0:89:50:fe:71:75: 50:82:78:6b:7f:46:5e:22:ac:f5:90:6c:93:60:c8: 24:a1:7b:75:3d:a4:41:4f:87:25:76:53:49:ae:d4: 76:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2C:B4:DE:C2:7E:9D:F4:84:E2:94:75:6E:5A:0B:B8:FD:1E:E5:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/ff842fd7-a7ac-34ac-b3ef-93d6c371c278.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b4:2e:53:6f:c4:f6:ef:fe:87:3a:0b:e2:eb:36:99:63:3d: b0:8c:7b:d6:1c:8b:59:8d:87:31:44:f4:78:a0:7f:02:1e:23: 2a:1d:06:54:7d:73:af:2c:c1:af:99:2f:b6:3d:ea:7c:3e:fb: 11:35:21:eb:c5:3e:c6:7a:3f:d8:df:59:90:36:5c:08:40:82: ca:c1:ad:1c:58:8e:19:89:71:42:54:ca:8d:9a:d2:90:69:08: 88:55:09:9d:59:87:35:20:fb:86:45:31:6d:2e:17:94:6b:98: f1:c2:51:43:18:ee:9d:08:85:b6:5f:c2:0e:a2:5f:d4:d6:2e: 37:a5:a4:5f:d2:05:97:53:29:f9:9c:4c:07:b7:a1:6b:31:cc: 88:2e:72:ec:9d:6a:9e:c9:5b:1e:8a:70:12:d4:54:ae:51:2c: 27:7c:b8:fc:5e:f8:09:ee:01:cf:98:d6:96:c2:34:15:6c:21: 08:7f:5e:29:02:be:8d:88:b1:85:24:1e:74:23:3a:bf:97:c5: 13:e7:78:24:e0:7d:b6:e8:d6:1d:d5:c7:7e:03:a4:84:ed:b6: 6f:a4:a3:3d:cc:57:e2:dd:46:a0:80:fc:f3:90:59:31:ca:1c: 90:ca:82:09:e9:3d:cf:9d:a4:a5:ad:fa:de:76:b1:5a:27:dd: 94:0c:89:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hwk0BwEsDmDVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NDRmYzFkY2EtMDRkYS00OWM2LTljYzItZmIxZDE4YTBmMzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9pQTcuo0CLsaj1wel/0/v+6AO0HkrbhZUCZ gv9baRya/idYqepVUvb40Brk8+dIn4+pQspIvTqmo5IIi2/Fyy+hfBUp3FTIAyya oGBPaIwQChjc764+E0sW8W5nU1t9vPhhioQ85zQxvydNqR3iXER4XByMcI0inU9G E5WhikshzJ7rHafXEMJHUOzaYTD6PfOU+MEXMElcvezc+KhNiECb7u2Dy0u2Sy2N UVJm1/tkjmiloaxHJcaR50Sb8jq59vLSdPMsqNa5842L9LeeL6F13McTf1i85X3A iVD+cXVQgnhrf0ZeIqz1kGyTYMgkoXt1PaRBT4cldlNJrtR2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4stN7Cfp30hOKUdW5aC7j9HuVqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvZmY4NDJmZDctYTdhYy0z NGFjLWIzZWYtOTNkNmMzNzFjMjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8SUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy0LlNvxPbv/oc6C+LrNpljPbCMe9Yci1mNhzFE9HigfwIeIyodBlR9 c68swa+ZL7Y96nw++xE1IevFPsZ6P9jfWZA2XAhAgsrBrRxYjhmJcUJUyo2a0pBp CIhVCZ1ZhzUg+4ZFMW0uF5RrmPHCUUMY7p0IhbZfwg6iX9TWLjelpF/SBZdTKfmc TAe3oWsxzIgucuydap7JWx6KcBLUVK5RLCd8uPxe+AnuAc+Y1pbCNBVsIQh/XikC vo2IsYUkHnQjOr+XxRPneCTgfbbo1h3Vx34DpITttm+koz3MV+LdRqCA/POQWTHK HJDKggnpPc+dpKWt+t52sVon3ZQMiT8= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:28 2025 by rpki-client