$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d1a568e1-9138-3b39-8fc8-bdad47d543bf.roa File: d1a568e1-9138-3b39-8fc8-bdad47d543bf.roa (raw, json) Hash identifier: ps+NOHvxEIcoDv92RfLojXvblTSl1nXVQMOjNazUxxs= Subject key identifier: 67:1B:D9:5C:2B:F7:7F:4B:6C:F4:B2:B1:ED:9A:65:65:D3:22:C2:75 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584BA0F057F51F8EF1E34850F080 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d1a568e1-9138-3b39-8fc8-bdad47d543bf.roa Signing time: Fri 24 Oct 2025 14:01:18 +0000 ROA not before: Fri 24 Oct 2025 14:01:18 +0000 ROA not after: Thu 22 Jan 2026 15:01:18 +0000 asID: 25198 IP address blocks: 207.180.28.0/24 maxlen: 24 216.75.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:f0:57:f5:1f:8e:f1:e3:48:50:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Oct 24 14:01:18 2025 GMT Not After : Jan 22 15:01:18 2026 GMT Subject: CN=6e0d0dec-2ff7-44a4-b4f2-e8f487167899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7a:7b:14:56:d7:d7:cc:16:34:fa:da:d7:f6: f9:b8:07:a3:aa:c7:cc:61:da:42:c5:61:9f:2e:9d: 30:70:66:40:95:bd:da:bc:c8:b7:05:b8:e7:1d:c4: ba:3c:9d:b9:44:00:3c:0a:61:82:7b:66:25:1f:02: a1:03:02:3a:bd:0b:98:b7:f6:90:e9:91:f4:c1:2b: 9b:a5:01:ce:2a:a0:ed:39:e5:f6:b5:d5:27:9e:48: cd:3f:88:97:8b:7b:d6:50:4f:f7:0b:e1:ce:91:a9: 08:59:70:de:dd:22:e9:e5:1c:f0:20:92:3c:37:07: 7b:10:e4:dc:83:e8:40:20:65:0c:12:cf:b5:4e:14: 0f:08:32:25:3a:93:07:6c:61:15:a0:9f:6d:92:f6: 8b:42:fa:97:33:3d:fa:b8:27:1c:df:70:c7:21:50: 10:c4:8a:83:de:a2:26:27:e6:69:ef:ac:8e:8f:c1: 67:bf:61:4e:02:86:34:49:4e:d4:6c:7c:2f:98:eb: 42:50:57:c1:73:1c:80:26:f9:70:86:b7:88:f7:29: e9:c6:a7:fb:d9:aa:1f:dd:1b:fd:e7:5d:e3:7b:92: 6a:12:6f:45:f5:35:00:f3:b4:0c:d6:8c:05:3e:7f: 8c:aa:f6:ac:11:c1:da:38:0d:46:c5:8d:4d:69:27: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1B:D9:5C:2B:F7:7F:4B:6C:F4:B2:B1:ED:9A:65:65:D3:22:C2:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d1a568e1-9138-3b39-8fc8-bdad47d543bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 207.180.28.0/24 216.75.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:89:7f:a2:6e:31:f3:f7:cf:ba:19:27:61:4f:17:d6:27:53: 54:3c:f7:d8:87:b7:fd:85:bb:01:bb:76:03:89:67:54:0a:f8: 5d:7c:a7:98:65:22:46:ce:92:76:16:88:bf:32:f5:f2:6c:67: 99:1f:77:3a:46:d9:81:d3:e6:4f:14:79:3f:cf:c3:b9:cd:5c: 7f:25:36:bc:64:98:62:21:9b:78:c6:1c:b2:1a:0c:f3:74:10: cd:90:33:d7:97:12:be:fc:e1:18:09:5f:52:2c:43:92:3e:74: 69:f2:6b:65:96:00:ab:87:e8:c3:3c:f2:13:fd:49:f1:62:18: 39:0b:f3:d6:00:16:92:fc:5f:99:36:4f:b3:c6:6e:87:4b:56: fe:7b:38:20:f2:15:02:1d:45:af:7f:24:1a:63:74:57:9e:c2: bb:ae:f7:f6:9b:f3:c5:cc:fe:23:fd:e5:99:7f:08:ff:43:39: 70:af:a0:f9:d3:ad:51:56:c9:0f:d6:5d:bb:df:f7:d0:dd:0b: 8d:68:92:82:1b:20:f7:d7:fb:f2:73:a6:26:26:d9:e0:53:32: cb:6b:c9:51:8a:8b:27:ac:bb:66:49:4d:61:97:2f:1e:a4:14: c4:49:43:41:93:8a:e8:e0:50:fa:f0:c0:23:7b:7b:cb:18:5c: 70:44:e0:86 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEug8Ff1H47x40hQ8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MTAyNDE0MDExOFoXDTI2MDEyMjE1MDExOFowLzEtMCsGA1UEAxMk NmUwZDBkZWMtMmZmNy00NGE0LWI0ZjItZThmNDg3MTY3ODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnp7FFbX18wWNPra1/b5uAejqsfMYdpCxWGf Lp0wcGZAlb3avMi3BbjnHcS6PJ25RAA8CmGCe2YlHwKhAwI6vQuYt/aQ6ZH0wSub pQHOKqDtOeX2tdUnnkjNP4iXi3vWUE/3C+HOkakIWXDe3SLp5RzwIJI8Nwd7EOTc g+hAIGUMEs+1ThQPCDIlOpMHbGEVoJ9tkvaLQvqXMz36uCcc33DHIVAQxIqD3qIm J+Zp76yOj8Fnv2FOAoY0SU7UbHwvmOtCUFfBcxyAJvlwhreI9ynpxqf72aof3Rv9 513je5JqEm9F9TUA87QM1owFPn+MqvasEcHaOA1GxY1NaSe66wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGcb2Vwr939LbPSyse2aZWXTIsJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvZDFhNTY4ZTEtOTEzOC0z YjM5LThmYzgtYmRhZDQ3ZDU0M2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz7QcAwQA 2EuZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIGJf6JuMfP3z7oZJ2FPF9YnU1Q899iHt/2FuwG7dgOJZ1QK +F18p5hlIkbOknYWiL8y9fJsZ5kfdzpG2YHT5k8UeT/Pw7nNXH8lNrxkmGIhm3jG HLIaDPN0EM2QM9eXEr784RgJX1IsQ5I+dGnya2WWAKuH6MM88hP9SfFiGDkL89YA FpL8X5k2T7PGbodLVv57OCDyFQIdRa9/JBpjdFeewruu9/ab88XM/iP95Zl/CP9D OXCvoPnTrVFWyQ/WXbvf99DdC41okoIbIPfX+/JzpiYm2eBTMstryVGKiyesu2ZJ TWGXLx6kFMRJQ0GTiujgUPrwwCN7e8sYXHBE4IY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:16 2025 by rpki-client