$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/1afb5e09-db0a-3746-b6cd-6808ab659b92.roa File: 1afb5e09-db0a-3746-b6cd-6808ab659b92.roa (raw, json) Hash identifier: 3L6Pp7UXpz5ntzwfhdBlej15siRFC2LTqrHgRnpGJKM= Subject key identifier: 2D:35:FF:4B:80:87:62:25:C0:16:67:C6:F8:A3:7F:C4:60:E9:3E:1C Certificate issuer: /CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9 Certificate serial: 010D0C9F4328584B6631FB1563C7CC35CAD62000 Authority key identifier: 56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/1afb5e09-db0a-3746-b6cd-6808ab659b92.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 394911 IP address blocks: 207.166.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:fb:15:63:c7:cc:35:ca:d6:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=0ffedbc7-6ad0-4962-b799-b2f6dd3702da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5f:26:1f:bd:1d:b5:37:aa:3e:86:90:15:ac: f7:6d:44:e5:db:d4:85:09:f6:66:2b:85:e9:c2:d6: bb:51:8d:99:58:f2:17:6c:e5:6a:67:56:d7:fc:d9: db:ba:06:a5:10:63:18:e4:a8:2d:2c:59:53:b1:7d: b9:04:a1:2a:1b:2c:b9:bf:ca:0c:14:ac:43:ab:e4: b3:73:5d:cb:a2:ae:79:2e:45:0e:60:ea:4f:6d:45: 2c:20:0d:23:7c:94:0d:82:28:f9:24:0c:e8:1c:b5: fc:3e:6c:6f:81:54:d0:45:1f:30:fb:13:b5:30:7f: 16:87:c1:22:cf:16:d1:17:d7:b2:ef:97:62:d1:da: 88:ab:ad:8f:d0:fa:8b:56:70:41:84:00:47:40:2d: d0:1a:e4:c6:ea:b0:66:e3:8a:78:a7:d5:ef:97:aa: 63:46:1d:03:24:d5:74:ac:b9:65:1f:7a:40:72:63: 07:eb:6c:05:d0:b5:b8:d6:03:ca:3f:28:09:fe:9e: ff:b9:5a:e7:d5:f1:03:3c:00:ed:30:e2:39:2f:e7: 26:d8:6d:92:dc:30:67:84:29:1c:60:de:79:23:18: 96:95:2d:f3:9d:18:6e:bd:c5:7d:61:d8:c7:be:b3: 39:0a:7f:ec:eb:b0:b4:e4:9a:8b:e9:ba:d7:60:fa: e1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:35:FF:4B:80:87:62:25:C0:16:67:C6:F8:A3:7F:C4:60:E9:3E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/1afb5e09-db0a-3746-b6cd-6808ab659b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl X509v3 Authority Key Identifier: keyid:56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer sbgp-ipAddrBlock: critical IPv4: 207.166.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:87:bc:46:4a:ab:24:bc:20:00:2e:26:60:44:8f:be:2d:cd: 74:5b:56:2b:63:05:6f:c5:4b:72:45:71:a3:8e:d9:fb:89:44: ab:b4:8a:04:0b:d7:b6:9b:e7:06:67:b2:4b:48:13:5f:f0:3c: e0:d4:73:20:db:ca:10:7f:5f:3e:4f:c5:fa:5e:32:86:f2:3d: bb:58:1e:ea:00:81:0c:f0:2d:0a:0c:66:ff:97:cc:54:03:17: 70:5f:22:3c:bf:8b:3e:9f:3a:86:7e:30:2e:e0:5a:d5:6c:50: c3:cd:ec:ca:30:ec:d6:2a:98:a7:13:b3:23:88:4f:91:91:32: 31:e3:98:19:ef:bb:9a:47:1c:d4:3a:88:4f:48:14:e8:a5:7e: d4:ab:e9:a1:42:07:f8:77:9e:72:70:75:0c:d3:32:5e:d5:3e: 39:f4:f1:4d:c1:40:41:2b:8f:13:c2:66:9d:76:e5:b1:0d:1e: de:d4:e2:dd:d6:9a:ef:02:96:13:c2:56:2d:e9:87:5f:c5:88: 10:66:92:2e:1f:d6:88:86:0c:f7:3d:1c:39:ad:95:7a:2a:34: a8:3d:f0:e0:d6:a9:75:6b:4c:07:e0:7a:a7:fa:df:a9:70:3f: 2d:f0:93:b2:24:33:40:76:2f:eb:0a:7c:72:c3:00:0f:e9:9d: d0:1a:8b:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfsVY8fMNcrWIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ1NDY1YTItODJjOC00NDQ3LWI2ZGEtN2NhYmMwMTdl M2E5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MGZmZWRiYzctNmFkMC00OTYyLWI3OTktYjJmNmRkMzcwMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml8mH70dtTeqPoaQFaz3bUTl29SFCfZmK4Xp wta7UY2ZWPIXbOVqZ1bX/NnbugalEGMY5KgtLFlTsX25BKEqGyy5v8oMFKxDq+Sz c13Loq55LkUOYOpPbUUsIA0jfJQNgij5JAzoHLX8PmxvgVTQRR8w+xO1MH8Wh8Ei zxbRF9ey75di0dqIq62P0PqLVnBBhABHQC3QGuTG6rBm44p4p9Xvl6pjRh0DJNV0 rLllH3pAcmMH62wF0LW41gPKPygJ/p7/uVrn1fEDPADtMOI5L+cm2G2S3DBnhCkc YN55IxiWlS3znRhuvcV9YdjHvrM5Cn/s67C05JqL6brXYPrh2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC01/0uAh2IlwBZnxvijf8Rg6T4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDU0 NjVhMi04MmM4LTQ0NDctYjZkYS03Y2FiYzAxN2UzYTkvMWFmYjVlMDktZGIwYS0z NzQ2LWI2Y2QtNjgwOGFiNjU5YjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQ1NDY1YTItODJjOC00NDQ3LWI2 ZGEtN2NhYmMwMTdlM2E5L2FkNTQ2NWEyLTgyYzgtNDQ0Ny1iNmRhLTdjYWJjMDE3 ZTNhOS5jcmwwHwYDVR0jBBgwFoAUVvpPUtPktlImmQv7z834oVxj5KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDU0NjVhMi04MmM4LTQ0NDctYjZkYS03Y2Fi YzAxN2UzYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6aMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGHvEZKqyS8IAAuJmBEj74tzXRbVitjBW/FS3JFcaOO2fuJRKu0igQL 17ab5wZnsktIE1/wPODUcyDbyhB/Xz5PxfpeMobyPbtYHuoAgQzwLQoMZv+XzFQD F3BfIjy/iz6fOoZ+MC7gWtVsUMPN7Mow7NYqmKcTsyOIT5GRMjHjmBnvu5pHHNQ6 iE9IFOilftSr6aFCB/h3nnJwdQzTMl7VPjn08U3BQEErjxPCZp125bENHt7U4t3W mu8ClhPCVi3ph1/FiBBmki4f1oiGDPc9HDmtlXoqNKg98ODWqXVrTAfgeqf636lw Py3wk7IkM0B2L+sKfHLDAA/pndAaiyQ= -----END CERTIFICATE-----Generated at Fri Oct 10 23:06:17 2025 by rpki-client