$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/e64bc932-1a6c-3f4b-abed-3a7583f7d4bd.roa File: e64bc932-1a6c-3f4b-abed-3a7583f7d4bd.roa (raw, json) Hash identifier: Bc7VaLbpqLGceIfKy3MVdWiGtzBVzpilDFM1xhgqZ0A= Subject key identifier: 6A:1F:3E:E0:7B:24:03:9C:CE:15:8B:A9:3E:D7:2C:C9:22:5F:44:01 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584B7A50B6D487DA5BF76D5DD840 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/e64bc932-1a6c-3f4b-abed-3a7583f7d4bd.roa Signing time: Fri 10 Oct 2025 17:58:57 +0000 ROA not before: Fri 10 Oct 2025 17:58:57 +0000 ROA not after: Thu 08 Jan 2026 18:58:57 +0000 asID: 64267 IP address blocks: 207.180.23.0/24 maxlen: 24 216.75.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:50:b6:d4:87:da:5b:f7:6d:5d:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Oct 10 17:58:57 2025 GMT Not After : Jan 8 18:58:57 2026 GMT Subject: CN=aeaa80a3-a9e3-40bd-a41f-0c1d4aa72cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d8:70:4c:41:70:3b:25:4b:19:41:04:d4:ad: 79:08:3b:2e:89:e3:1b:20:04:ed:1e:27:0a:74:d7: 19:e9:ad:81:ef:10:b1:66:27:1a:33:68:84:85:78: 8a:e1:95:de:4f:33:f1:3b:1e:90:8a:46:c3:c8:e5: d2:4d:9d:5b:c4:46:c5:84:5d:cd:22:0f:2f:fc:dd: 84:58:e0:3d:85:83:84:b2:61:71:35:21:fc:6e:56: c7:dc:e2:8a:6c:82:52:f6:8a:31:b4:ed:e4:90:84: d7:e9:7f:99:ec:1a:1b:45:8a:a4:1a:c1:31:4c:37: 67:38:b3:45:91:e6:63:bf:76:90:97:0b:13:e9:94: ae:e2:1d:03:cc:60:b0:d4:a7:05:bf:b6:b5:da:15: ce:23:31:0b:c8:fd:b1:53:a9:85:d7:f2:98:b0:cb: 9a:b7:5f:be:6a:a5:98:6a:62:b1:46:11:9d:8f:36: f0:ca:73:81:ca:24:05:d8:23:29:3d:f8:5f:17:6c: f4:dd:b1:97:f4:16:52:d2:41:b0:8a:66:fb:bb:98: 1c:df:1d:ed:dd:0e:17:ee:f1:20:f8:b5:87:c0:64: 82:75:0d:95:8d:50:04:22:85:73:fe:cd:b2:71:0b: 73:c3:1b:96:6a:23:49:43:db:bc:eb:9d:a3:84:c5: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1F:3E:E0:7B:24:03:9C:CE:15:8B:A9:3E:D7:2C:C9:22:5F:44:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/e64bc932-1a6c-3f4b-abed-3a7583f7d4bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 207.180.23.0/24 216.75.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:17:7a:13:29:db:52:6d:ee:ff:33:d5:58:58:b0:53:a8:5b: a4:3f:fd:4e:76:e2:b9:ef:7d:d2:42:18:c7:50:fd:df:81:e7: e0:3f:c7:19:17:8f:d2:9c:3c:a1:46:8e:69:59:96:84:8c:b9: 6a:43:5e:4a:46:9b:da:fe:5d:a2:e0:b7:00:a9:78:5c:39:e6: a2:12:c1:3c:3e:33:c6:fb:cf:92:72:78:c5:ae:07:c3:e9:7b: e3:1e:05:e1:21:b6:fa:85:f2:53:02:04:18:56:0e:26:db:c7: 71:97:1f:88:c2:04:5b:77:be:a5:cd:6f:d8:4d:1f:3d:5a:33: ae:b1:a2:3e:ef:3d:7e:46:50:62:c1:3c:25:fb:3b:ba:b7:99: 3b:09:13:c6:33:a6:e2:f5:24:8c:90:34:5d:f0:4c:b5:6c:00: e6:2c:7b:e6:5a:50:ca:f8:3d:ee:ec:d5:53:e7:e3:f9:5a:4a: d1:cd:f1:69:37:5a:29:bd:86:cf:03:6d:f4:82:fb:5e:55:5a: d8:a3:a8:67:76:6c:39:17:bd:45:96:ab:34:30:24:b6:d1:0d: cf:d8:a9:22:dc:12:a7:81:e8:26:7c:6b:53:57:ac:20:f3:19: 8d:eb:21:cd:58:66:00:fa:74:70:63:3e:60:38:19:5e:e1:c9: f5:b9:df:e9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEt6ULbUh9pb921d2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MTAxMDE3NTg1N1oXDTI2MDEwODE4NTg1N1owLzEtMCsGA1UEAxMk YWVhYTgwYTMtYTllMy00MGJkLWE0MWYtMGMxZDRhYTcyY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNhwTEFwOyVLGUEE1K15CDsuieMbIATtHicK dNcZ6a2B7xCxZicaM2iEhXiK4ZXeTzPxOx6QikbDyOXSTZ1bxEbFhF3NIg8v/N2E WOA9hYOEsmFxNSH8blbH3OKKbIJS9ooxtO3kkITX6X+Z7BobRYqkGsExTDdnOLNF keZjv3aQlwsT6ZSu4h0DzGCw1KcFv7a12hXOIzELyP2xU6mF1/KYsMuat1++aqWY amKxRhGdjzbwynOByiQF2CMpPfhfF2z03bGX9BZS0kGwimb7u5gc3x3t3Q4X7vEg +LWHwGSCdQ2VjVAEIoVz/s2ycQtzwxuWaiNJQ9u8652jhMWhgQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGofPuB7JAOczhWLqT7XLMkiX0QBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvZTY0YmM5MzItMWE2Yy0z ZjRiLWFiZWQtM2E3NTgzZjdkNGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz7QXAwQA 2EucMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEYXehMp21Jt7v8z1VhYsFOoW6Q//U524rnvfdJCGMdQ/d+B 5+A/xxkXj9KcPKFGjmlZloSMuWpDXkpGm9r+XaLgtwCpeFw55qISwTw+M8b7z5Jy eMWuB8Ppe+MeBeEhtvqF8lMCBBhWDibbx3GXH4jCBFt3vqXNb9hNHz1aM66xoj7v PX5GUGLBPCX7O7q3mTsJE8YzpuL1JIyQNF3wTLVsAOYse+ZaUMr4Pe7s1VPn4/la StHN8Wk3Wim9hs8DbfSC+15VWtijqGd2bDkXvUWWqzQwJLbRDc/YqSLcEqeB6CZ8 a1NXrCDzGY3rIc1YZgD6dHBjPmA4GV7hyfW53+k= -----END CERTIFICATE-----Generated at Mon Oct 20 22:49:53 2025 by rpki-client