$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29e5793a-80d6-32cb-a775-c5561893f738.roa File: 29e5793a-80d6-32cb-a775-c5561893f738.roa (raw, json) Hash identifier: dy4eVsTs9Yfb7yBqJAdwmci5jY9PPtVjJfbqu+9VtIA= Subject key identifier: 69:0A:AF:4E:22:8C:65:52:A1:27:47:C9:C5:97:8E:C7:B0:C1:FB:62 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C4F92973AB26BA8628C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29e5793a-80d6-32cb-a775-c5561893f738.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 15247 IP address blocks: 207.194.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c4:f9:29:73:ab:26:ba:86:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=c3980a63-e371-43fc-95d4-1fcb740a89a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ca:a4:4e:1b:26:a0:f7:cd:6f:45:fc:37:aa: 31:84:86:2c:41:53:16:bc:59:5e:2e:6c:3a:c3:80: 47:22:b4:a4:f4:2e:0c:b8:ba:14:75:c9:e5:b5:20: 07:01:99:d8:d8:52:29:e0:f9:69:70:e7:0c:fa:f5: b3:ac:e2:d6:28:e3:83:24:83:7a:2e:91:63:c8:22: 09:64:bd:92:9e:c1:6e:bf:d6:82:5f:48:f2:56:a7: 0f:f0:4b:97:36:32:16:67:94:16:8c:4d:e1:66:58: 99:a1:74:5a:a6:67:88:aa:cf:45:71:e0:59:87:88: 10:85:f3:7a:34:a6:a8:ba:d3:95:66:ad:f7:b0:9b: bc:3e:ac:22:41:13:bc:73:74:c1:2a:90:9b:44:42: a2:5e:7b:2d:87:a8:e1:47:73:6b:60:ec:58:1d:73: 8a:6c:69:06:63:e2:b7:20:10:97:65:fd:d3:46:4f: 77:7c:ea:19:16:17:d6:43:4d:76:c4:0a:90:9d:eb: 96:77:f2:87:ab:90:05:f5:65:d7:6c:54:f5:43:da: 49:fa:d4:77:cc:b7:02:7e:e9:d8:05:14:64:1c:e7: ad:3b:cd:e3:8e:3d:b4:8d:ab:69:52:1c:34:1d:3b: 65:1e:53:cf:65:9e:dd:13:ae:3e:e7:60:3e:8a:46: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0A:AF:4E:22:8C:65:52:A1:27:47:C9:C5:97:8E:C7:B0:C1:FB:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29e5793a-80d6-32cb-a775-c5561893f738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:11:92:45:d1:34:c8:c7:85:0d:2f:af:9c:e9:8f:f9:f5:bf: 41:9e:2f:69:9f:96:6a:45:93:4f:60:aa:56:21:87:70:35:d2: 30:b9:1d:25:a3:56:ff:66:80:ff:9e:61:23:fa:b2:7e:d5:73: d2:f3:f9:20:1c:e3:89:0e:73:97:4d:de:11:03:7a:cd:06:56: cf:36:57:02:1a:6c:3b:e8:19:18:76:21:18:41:5f:14:db:99: 59:36:b2:94:8a:ff:8d:70:e5:11:af:fd:b5:92:6e:aa:1b:9d: 64:55:59:a7:e0:be:46:c3:1e:8f:f3:40:63:5f:c2:dc:8d:85: ed:ef:a4:dd:55:46:88:bb:6e:49:16:74:2b:3c:c8:09:51:90: c9:1f:46:ab:f0:8d:89:85:4b:ae:83:ef:ea:3c:5d:e4:d8:36: f5:f6:f8:19:74:05:c7:6e:09:b8:4e:0a:fb:e6:e5:53:91:31: b1:54:88:0a:14:f1:55:a1:a8:38:81:10:cf:db:a1:cc:d8:c9: bb:64:33:f5:c2:9c:e3:d7:be:18:37:6d:2d:b6:f1:aa:20:40: 77:75:26:d7:5b:59:ff:f9:a5:93:09:47:c9:23:6c:bf:2a:c3: e8:15:a3:c3:fd:5c:3f:57:ff:b2:f7:3b:65:b9:99:f8:88:04: 02:af:c9:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcT5KXOrJrqGKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YzM5ODBhNjMtZTM3MS00M2ZjLTk1ZDQtMWZjYjc0MGE4OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMqkThsmoPfNb0X8N6oxhIYsQVMWvFleLmw6 w4BHIrSk9C4MuLoUdcnltSAHAZnY2FIp4PlpcOcM+vWzrOLWKOODJIN6LpFjyCIJ ZL2SnsFuv9aCX0jyVqcP8EuXNjIWZ5QWjE3hZliZoXRapmeIqs9FceBZh4gQhfN6 NKaoutOVZq33sJu8PqwiQRO8c3TBKpCbREKiXnsth6jhR3NrYOxYHXOKbGkGY+K3 IBCXZf3TRk93fOoZFhfWQ012xAqQneuWd/KHq5AF9WXXbFT1Q9pJ+tR3zLcCfunY BRRkHOetO83jjj20jatpUhw0HTtlHlPPZZ7dE64+52A+ikbi1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkKr04ijGVSoSdHycWXjsewwftiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjllNTc5M2EtODBkNi0z MmNiLWE3NzUtYzU1NjE4OTNmNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8LSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQRkkXRNMjHhQ0vr5zpj/n1v0GeL2mflmpFk09gqlYhh3A10jC5HSWj Vv9mgP+eYSP6sn7Vc9Lz+SAc44kOc5dN3hEDes0GVs82VwIabDvoGRh2IRhBXxTb mVk2spSK/41w5RGv/bWSbqobnWRVWafgvkbDHo/zQGNfwtyNhe3vpN1VRoi7bkkW dCs8yAlRkMkfRqvwjYmFS66D7+o8XeTYNvX2+Bl0BcduCbhOCvvm5VORMbFUiAoU 8VWhqDiBEM/boczYybtkM/XCnOPXvhg3bS228aogQHd1JtdbWf/5pZMJR8kjbL8q w+gVo8P9XD9X/7L3O2W5mfiIBAKvyVQ= -----END CERTIFICATE-----Generated at Fri Oct 24 08:24:37 2025 by rpki-client