$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/491a1fc7-b148-30b7-8b5a-3886880a2961.roa File: 491a1fc7-b148-30b7-8b5a-3886880a2961.roa (raw, json) Hash identifier: hzoLMccvZ9ImYzpTblqSuzEmL52AYiI0SfCDdQn4K+k= Subject key identifier: 02:F8:00:24:26:29:83:62:61:D1:7A:35:47:26:CC:CF:AB:6B:45:D8 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584AF967D02E3A65B4632B7BCF00 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/491a1fc7-b148-30b7-8b5a-3886880a2961.roa Signing time: Mon 25 Aug 2025 13:46:13 +0000 ROA not before: Mon 25 Aug 2025 13:46:13 +0000 ROA not after: Sun 23 Nov 2025 14:46:13 +0000 asID: 36742 IP address blocks: 207.180.55.0/24 maxlen: 24 216.75.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:67:d0:2e:3a:65:b4:63:2b:7b:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Aug 25 13:46:13 2025 GMT Not After : Nov 23 14:46:13 2025 GMT Subject: CN=283b131d-af37-4f4d-8ed8-6659d79c569f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ef:a4:dc:3d:11:cd:34:9d:3a:f0:2e:7d:bf: b9:ba:76:d6:0f:5b:9e:c0:d8:01:ba:9a:a3:88:40: d9:b3:fb:01:3a:86:b0:a3:72:e0:64:7e:cb:0a:f6: f7:a9:cc:d6:ec:9a:2d:5f:fc:1a:7e:da:3a:12:76: 0d:ee:b1:0b:1b:b2:c3:d7:b9:22:8d:fe:5e:07:f3: 19:ef:51:80:06:e7:f9:e5:b1:b0:59:3e:8c:53:f9: ec:d7:4e:94:b1:07:37:1e:ca:5d:c8:dd:27:99:ae: ad:d7:1d:e7:53:69:58:cf:c0:04:00:f6:9a:7a:d7: 00:74:e1:e6:97:86:54:cf:96:0d:da:99:93:4a:3a: 50:a2:e1:14:bf:38:b6:17:8e:21:a1:0a:e2:e4:3b: 36:60:ea:38:0d:4c:24:6d:c9:01:37:d8:16:4c:e7: 55:4f:65:f7:1c:db:b9:7c:59:a4:c2:bc:aa:80:4f: dd:2c:d5:95:d5:5d:c3:0f:10:82:69:8e:43:2d:06: 75:12:1a:ef:90:92:07:fd:29:c7:6d:9a:b2:07:8e: ef:2d:ab:fa:ba:06:ed:b8:87:4a:b5:3e:f9:9d:80: f6:03:d8:07:ce:20:47:c3:37:60:a3:cc:62:db:01: 5e:cb:10:90:9c:52:b1:d0:7e:40:0c:87:3e:7a:ab: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F8:00:24:26:29:83:62:61:D1:7A:35:47:26:CC:CF:AB:6B:45:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/491a1fc7-b148-30b7-8b5a-3886880a2961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 207.180.55.0/24 216.75.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cc:85:2d:97:61:56:97:00:4e:04:04:3d:4d:d8:59:d5:aa: 8d:ad:12:5d:d6:61:a6:f1:25:5e:43:97:fa:e2:2b:22:4f:d3: 8b:17:11:cb:d8:31:cf:a5:a5:e0:84:33:7b:d9:a9:5a:0a:ae: 48:67:9b:b1:49:73:a6:f3:2a:27:57:e6:b6:01:d4:37:ed:c3: 85:e8:bc:01:25:36:4e:c5:81:29:ad:fd:36:27:33:c8:3a:7d: 9f:e5:f6:ca:5a:32:b4:a8:dc:e4:43:05:16:06:ec:72:24:12: e2:92:7b:31:db:ae:33:fd:55:25:85:cc:df:0b:e1:d7:f3:fb: f1:8e:3f:4e:3b:4c:7d:e4:cd:37:de:a6:63:96:a4:16:f3:fd: fc:26:b6:4d:a7:9c:8e:ce:1a:dd:af:4c:77:55:e5:88:5d:94: 89:0d:e0:84:68:fc:ae:0c:31:5b:99:bc:5a:15:86:7e:c8:6b: 6c:73:33:70:f9:eb:e0:99:71:94:1f:c4:4d:3c:3c:04:8f:0a: 6f:8b:a8:30:25:a3:1f:8a:1f:05:a6:b0:c1:cc:22:b5:e3:e2: ba:da:38:28:7a:ae:d0:e8:59:6d:56:a6:0c:db:a0:c3:c9:93: 05:1a:4f:4f:78:17:3e:ec:94:06:73:c9:26:1d:d7:01:15:ff: 95:ab:a0:61 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr5Z9AuOmW0Yyt7zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MDgyNTEzNDYxM1oXDTI1MTEyMzE0NDYxM1owLzEtMCsGA1UEAxMk MjgzYjEzMWQtYWYzNy00ZjRkLThlZDgtNjY1OWQ3OWM1NjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku+k3D0RzTSdOvAufb+5unbWD1uewNgBupqj iEDZs/sBOoawo3LgZH7LCvb3qczW7JotX/wafto6EnYN7rELG7LD17kijf5eB/MZ 71GABuf55bGwWT6MU/ns106UsQc3HspdyN0nma6t1x3nU2lYz8AEAPaaetcAdOHm l4ZUz5YN2pmTSjpQouEUvzi2F44hoQri5Ds2YOo4DUwkbckBN9gWTOdVT2X3HNu5 fFmkwryqgE/dLNWV1V3DDxCCaY5DLQZ1EhrvkJIH/SnHbZqyB47vLav6ugbtuIdK tT75nYD2A9gHziBHwzdgo8xi2wFeyxCQnFKx0H5ADIc+eqvcIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAL4ACQmKYNiYdF6NUcmzM+ra0XYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvNDkxYTFmYzctYjE0OC0z MGI3LThiNWEtMzg4Njg4MGEyOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz7Q3AwQA 2EuVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAArMhS2XYVaXAE4EBD1N2FnVqo2tEl3WYabxJV5Dl/riKyJP 04sXEcvYMc+lpeCEM3vZqVoKrkhnm7FJc6bzKidX5rYB1Dftw4XovAElNk7FgSmt /TYnM8g6fZ/l9spaMrSo3ORDBRYG7HIkEuKSezHbrjP9VSWFzN8L4dfz+/GOP047 TH3kzTfepmOWpBbz/fwmtk2nnI7OGt2vTHdV5YhdlIkN4IRo/K4MMVuZvFoVhn7I a2xzM3D56+CZcZQfxE08PASPCm+LqDAlox+KHwWmsMHMIrXj4rraOCh6rtDoWW1W pgzboMPJkwUaT094Fz7slAZzySYd1wEV/5WroGE= -----END CERTIFICATE-----Generated at Sat Sep 6 18:59:42 2025 by rpki-client