$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa File: 49e5f290-618f-3550-b059-0c6232263b33.roa (raw, json) Hash identifier: 70TASbII8EQOZuwRXX6iff40nqSeMCsUwaPqYUF4Xkg= Subject key identifier: F8:48:60:CD:0B:83:45:6A:0A:6D:24:4E:57:3F:40:72:07:62:C0:0C Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F4328584B28C6E31B470085C6EFF5E580 Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 11739 IP address blocks: 209.20.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:e3:1b:47:00:85:c6:ef:f5:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=e60ffbc4-ec87-4ba0-be9a-45dda2d34de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:22:61:d1:0c:ee:d5:26:7f:99:e2:ec:6e:55: 6f:e7:8e:a7:d2:10:10:cd:92:c5:5d:09:56:cb:2e: 7b:28:ef:09:1d:3c:da:d2:59:93:65:05:b6:10:5c: 0b:b5:07:24:73:8b:f5:fc:e5:c1:c7:80:b4:c4:3f: 78:72:07:05:b8:00:5a:02:76:5a:28:6d:2a:49:5a: 91:13:ac:55:e7:4b:5d:af:98:be:04:dc:c5:be:80: 56:bb:e0:f1:b2:6e:54:0d:84:c8:bb:2e:34:2e:ba: 45:86:4f:4e:f5:ad:cd:36:2b:ef:cf:56:10:c8:9e: d1:c3:de:8a:fe:24:a4:d2:3b:0e:4f:5a:38:33:41: 08:b4:0c:6e:c0:5d:4f:cb:fa:33:68:75:c0:3d:91: 0f:60:11:fc:d5:12:25:e0:7f:49:a2:18:e4:c4:6e: 9d:ce:f9:bd:4b:51:88:66:40:3c:7b:83:7a:ed:6b: 47:8f:2f:51:bb:d5:0b:0e:24:a1:88:5f:2f:ed:81: c2:2a:4e:a3:07:89:9f:eb:db:2e:35:d8:8c:da:4a: 57:7d:02:52:9c:61:c3:34:2a:24:12:eb:26:be:c8: 14:bc:4c:29:2f:8f:88:0b:35:03:a5:df:a4:5a:76: b1:07:4e:b2:4d:8c:03:11:7e:1e:48:51:4a:ee:09: 05:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:48:60:CD:0B:83:45:6A:0A:6D:24:4E:57:3F:40:72:07:62:C0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: 209.20.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0e:f9:ad:13:53:66:d5:24:9e:37:68:a2:cd:64:73:ea:80: 49:7d:62:ed:cf:f9:65:e4:bd:76:ab:7e:fc:13:2d:ba:99:27: 1e:f7:0a:5b:5b:03:ce:29:86:8f:22:a8:4b:70:13:44:84:e3: e2:cf:83:10:f2:da:53:74:53:9c:ac:71:c4:da:57:4f:47:41: 2f:4f:ff:3a:75:fb:e1:1c:4a:50:7f:24:1b:a0:4f:bc:e3:f3: a6:29:a3:45:a8:1c:db:90:c1:1a:f5:ec:aa:45:6d:5c:52:bc: a8:59:0c:2c:da:48:67:ee:f3:cd:dd:8c:0f:46:83:ce:ff:1e: 69:c2:83:e4:8b:ad:57:ec:c7:13:b2:a3:97:77:6a:d6:c5:34: e8:d1:34:50:50:6b:76:a1:d0:e8:20:60:36:48:60:44:fd:9d: 7d:4c:eb:b8:da:e9:9b:f9:7f:a4:16:77:9e:4c:60:a9:8b:d4: 46:b5:64:13:6a:fa:e1:f7:12:ae:c8:07:d4:9c:ce:c3:c4:4f: d5:7b:7b:17:3c:80:1d:64:56:c7:12:0d:a3:54:47:bc:07:27: df:9b:79:a5:19:18:66:d0:01:31:96:f0:7c:0c:ae:dc:82:e3: 2a:63:8d:a7:3f:70:cf:c3:fc:b6:55:86:4b:4e:ee:2f:9e:a9: cd:50:5b:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuMbRwCFxu/15YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTYwZmZiYzQtZWM4Ny00YmEwLWJlOWEtNDVkZGEyZDM0ZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiJh0Qzu1SZ/meLsblVv546n0hAQzZLFXQlW yy57KO8JHTza0lmTZQW2EFwLtQckc4v1/OXBx4C0xD94cgcFuABaAnZaKG0qSVqR E6xV50tdr5i+BNzFvoBWu+Dxsm5UDYTIuy40LrpFhk9O9a3NNivvz1YQyJ7Rw96K /iSk0jsOT1o4M0EItAxuwF1Py/ozaHXAPZEPYBH81RIl4H9JohjkxG6dzvm9S1GI ZkA8e4N67WtHjy9Ru9ULDiShiF8v7YHCKk6jB4mf69suNdiM2kpXfQJSnGHDNCok EusmvsgUvEwpL4+ICzUDpd+kWnaxB06yTYwDEX4eSFFK7gkFlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhIYM0Lg0VqCm0kTlc/QHIHYsAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvNDllNWYyOTAtNjE4Zi0z NTUwLWIwNTktMGM2MjMyMjYzYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAO+a0TU2bVJJ43aKLNZHPqgEl9Yu3P+WXkvXarfvwTLbqZJx73Cltb A84pho8iqEtwE0SE4+LPgxDy2lN0U5ysccTaV09HQS9P/zp1++EcSlB/JBugT7zj 86Ypo0WoHNuQwRr17KpFbVxSvKhZDCzaSGfu883djA9Gg87/HmnCg+SLrVfsxxOy o5d3atbFNOjRNFBQa3ah0OggYDZIYET9nX1M67ja6Zv5f6QWd55MYKmL1Ea1ZBNq +uH3Eq7IB9SczsPET9V7exc8gB1kVscSDaNUR7wHJ9+beaUZGGbQATGW8HwMrtyC 4ypjjac/cM/D/LZVhktO7i+eqc1QW5E= -----END CERTIFICATE-----Generated at Fri Oct 10 03:53:18 2025 by rpki-client