$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/a2a25d73-06be-3980-935e-6e4333003a9e.roa File: a2a25d73-06be-3980-935e-6e4333003a9e.roa (raw, json) Hash identifier: lyR+8gmpgbWsDpe/65575GKUjo/rMEXiIj5ogdnrXQI= Subject key identifier: CC:71:D5:E7:17:A0:85:A9:8E:31:3D:5E:28:0B:46:29:6A:81:CD:DF Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584B4A372CAB828A3580BF596821 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/a2a25d73-06be-3980-935e-6e4333003a9e.roa Signing time: Tue 23 Sep 2025 12:28:41 +0000 ROA not before: Tue 23 Sep 2025 12:28:41 +0000 ROA not after: Mon 22 Dec 2025 13:28:41 +0000 asID: 9304 IP address blocks: 207.180.4.0/24 maxlen: 24 207.180.5.0/24 maxlen: 24 207.180.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:37:2c:ab:82:8a:35:80:bf:59:68:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Sep 23 12:28:41 2025 GMT Not After : Dec 22 13:28:41 2025 GMT Subject: CN=828cd3d2-d4bf-42c3-a022-78286a3c888d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b3:a6:4f:ec:ce:09:04:a1:27:05:0a:49:ee: 9d:c8:3c:e0:e8:b5:77:f5:a2:da:37:06:4e:78:2d: 7f:84:e5:2a:ce:05:db:7f:15:32:56:4b:02:fb:05: 28:4c:f9:29:44:b3:e4:8e:cf:40:1a:4f:a0:b5:5f: 71:3c:ef:7a:0d:1c:dd:19:95:ec:b9:c5:b1:77:6b: 46:33:c5:83:53:b4:26:9f:6d:48:3c:33:3b:2b:ce: 80:40:be:51:dc:df:9f:a3:27:f3:3b:bb:04:43:81: 33:09:31:32:fa:9e:b2:bf:dc:8c:5a:7b:d4:27:a2: ac:7d:3c:2b:f9:d1:f0:57:9f:0c:b1:6a:4b:27:36: 54:86:6b:34:e3:1e:e6:11:04:c0:e3:2c:61:82:ee: c6:15:36:d2:75:c3:ae:98:e2:17:52:e6:0c:11:ba: 05:25:54:66:00:73:34:f9:43:cd:50:97:ad:b8:f1: 51:f4:44:8f:c3:2c:46:7a:96:ac:cf:f4:eb:aa:e7: 5f:cf:e3:29:c8:96:e1:fa:5d:19:42:7b:88:b2:56: be:92:31:d1:21:a2:39:85:71:bf:64:e6:c1:2c:18: e2:83:a9:11:67:52:18:e5:f8:a0:7d:f5:de:3c:c3: 7f:16:21:e6:4f:b1:31:41:09:55:99:94:a2:13:0f: 73:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:71:D5:E7:17:A0:85:A9:8E:31:3D:5E:28:0B:46:29:6A:81:CD:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/a2a25d73-06be-3980-935e-6e4333003a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 207.180.4.0/23 207.180.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:81:2a:b8:ae:cb:fd:dd:58:7d:be:cf:08:7d:41:4b:6e:a3: 97:50:9f:b9:e7:8a:37:74:20:60:9c:88:11:1b:17:bc:e1:da: a1:80:8f:18:72:93:3c:b8:91:2b:fe:d5:e3:45:e9:65:62:f8: a4:38:9d:4d:62:85:63:1d:73:20:f4:3a:6c:32:c8:77:02:98: 16:d9:ba:7c:ac:7d:eb:57:46:d5:3a:d6:40:d3:f3:e5:0c:da: e0:db:34:07:36:10:0e:15:5c:ac:ea:65:ff:98:0c:85:66:b9: 9c:04:b9:57:f8:2c:55:ef:c6:27:cf:d7:f2:ce:3b:78:45:2d: 46:27:1f:fb:b6:50:97:e3:92:6f:33:38:c7:23:fa:6b:c9:48: a1:8a:34:24:cf:b3:b3:f7:e9:51:53:db:38:b6:fb:8a:c2:6f: 69:16:36:78:38:4d:81:8b:76:6b:58:cc:69:de:d7:48:02:14: ee:6b:23:3c:a9:50:68:bc:15:1d:16:35:b1:4a:35:b3:4a:12: ee:10:07:03:17:36:f7:f8:6b:25:e3:7b:7d:6a:f5:ca:65:25: ac:83:72:df:f2:32:f5:f0:2a:77:42:6a:47:62:04:c0:12:bc: da:99:fc:7f:6e:3d:3d:1f:df:b6:e5:53:87:e0:10:d2:7b:8d: 6d:1f:00:6f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtKNyyrgoo1gL9ZaCEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MDkyMzEyMjg0MVoXDTI1MTIyMjEzMjg0MVowLzEtMCsGA1UEAxMk ODI4Y2QzZDItZDRiZi00MmMzLWEwMjItNzgyODZhM2M4ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLOmT+zOCQShJwUKSe6dyDzg6LV39aLaNwZO eC1/hOUqzgXbfxUyVksC+wUoTPkpRLPkjs9AGk+gtV9xPO96DRzdGZXsucWxd2tG M8WDU7Qmn21IPDM7K86AQL5R3N+foyfzO7sEQ4EzCTEy+p6yv9yMWnvUJ6KsfTwr +dHwV58MsWpLJzZUhms04x7mEQTA4yxhgu7GFTbSdcOumOIXUuYMEboFJVRmAHM0 +UPNUJetuPFR9ESPwyxGepasz/Trqudfz+MpyJbh+l0ZQnuIsla+kjHRIaI5hXG/ ZObBLBjig6kRZ1IY5figffXePMN/FiHmT7ExQQlVmZSiEw9zpQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMxx1ecXoIWpjjE9XigLRilqgc3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvYTJhMjVkNzMtMDZiZS0z OTgwLTkzNWUtNmU0MzMzMDAzYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBz7QEAwQA z7QHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADSBKriuy/3dWH2+zwh9QUtuo5dQn7nnijd0IGCciBEbF7zh 2qGAjxhykzy4kSv+1eNF6WVi+KQ4nU1ihWMdcyD0OmwyyHcCmBbZunysfetXRtU6 1kDT8+UM2uDbNAc2EA4VXKzqZf+YDIVmuZwEuVf4LFXvxifP1/LOO3hFLUYnH/u2 UJfjkm8zOMcj+mvJSKGKNCTPs7P36VFT2zi2+4rCb2kWNng4TYGLdmtYzGne10gC FO5rIzypUGi8FR0WNbFKNbNKEu4QBwMXNvf4ayXje31q9cplJayDct/yMvXwKndC akdiBMASvNqZ/H9uPT0f37blU4fgENJ7jW0fAG8= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:32 2025 by rpki-client