$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc99daf-866f-3294-894c-cd40fbacd7a7.roa File: 8cc99daf-866f-3294-894c-cd40fbacd7a7.roa (raw, json) Hash identifier: sEIdbv7+LF9vl+e0XXzgA0Cu3bFuzqWWA8qoyy2TzX0= Subject key identifier: 88:AA:4B:29:5A:B6:49:56:2B:0D:A0:88:61:1D:4C:13:28:EC:01:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6C55DC35DBA24134D83C6000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc99daf-866f-3294-894c-cd40fbacd7a7.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 32787 IP address blocks: 209.200.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:dc:35:db:a2:41:34:d8:3c:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=90f0b53d-ec66-4688-be72-b04a70ca1449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:10:fb:93:21:2d:fb:0d:d6:04:ae:ca:f1:df: 07:4e:f9:08:58:2d:19:5b:2e:77:ba:f7:79:69:28: 11:0f:65:6b:a9:24:bb:5c:09:26:27:ca:7e:b3:67: 28:e6:95:f3:6c:e6:61:d7:07:de:30:bf:c6:36:af: 31:57:69:81:a1:3a:d4:3e:2b:d9:51:45:25:49:87: 38:b6:b6:e0:ec:38:88:3d:17:a3:45:39:dc:73:9c: 5c:1e:5a:25:28:a6:e1:06:c3:1b:05:9c:54:b6:35: b1:4c:b3:e8:09:0b:87:0d:bf:56:38:28:78:c4:b7: 3c:f4:4f:a4:1c:a8:df:69:89:7c:55:1f:59:c7:ed: 7a:01:9b:d0:84:62:69:8f:49:84:7d:97:d6:33:a5: aa:b7:3d:06:48:48:3b:4b:61:cd:99:e6:33:ee:7a: 37:6f:30:15:88:a1:e6:8a:ec:e2:f0:87:51:3e:69: 68:c6:38:fa:54:71:b2:34:53:f6:49:37:80:77:33: 69:fd:b6:d9:0c:c7:0e:eb:07:a8:6b:5a:1d:41:94: 7b:4e:91:62:66:a0:73:ad:20:c6:01:94:d1:24:28: e2:40:c3:cc:eb:b1:5e:2c:f3:30:9d:fd:92:62:6d: e2:f2:68:d5:09:41:de:e6:6e:e0:5b:04:d2:7c:13: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AA:4B:29:5A:B6:49:56:2B:0D:A0:88:61:1D:4C:13:28:EC:01:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc99daf-866f-3294-894c-cd40fbacd7a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:00:f3:94:b6:1a:de:23:61:29:9e:9f:28:4e:4b:c0:69:c5: 6d:36:22:7c:bd:70:11:31:4e:63:9b:69:8d:2e:6f:1b:28:d8: ad:cf:be:89:f7:16:63:bd:72:f9:66:98:52:01:18:1c:70:8c: 25:e2:2f:96:18:8a:35:2e:6e:19:0e:f2:3e:b9:64:eb:0d:b3: f8:b6:0b:3c:cf:7b:30:ed:05:b4:a6:a3:c6:9c:74:de:6b:3b: 99:7f:c2:03:7e:22:a1:c9:d7:44:6d:ea:8f:1f:8a:cb:81:ea: 22:96:c1:ba:88:38:ce:b7:bd:73:ab:bd:f4:81:49:c4:87:0b: b9:e5:90:8d:93:d0:89:23:4f:fd:7b:f2:d3:db:24:74:d1:39: be:fd:d1:bc:39:7b:d7:33:46:f2:b4:fc:18:02:17:a6:5f:d8: 50:31:bd:80:9a:72:ac:3e:ee:a0:b4:f3:ee:23:f5:ab:8c:99: e3:9e:d8:a2:23:11:75:20:3c:2d:36:8b:68:fc:b1:56:de:75: 8e:cc:15:3b:48:cc:22:ea:bb:d3:4d:ad:30:14:a3:0c:30:b9: b5:5a:b7:79:67:52:13:57:cb:0d:68:d7:35:20:0a:86:fc:d7: 3b:07:9d:93:dc:08:9f:1b:08:80:b5:9b:7b:b8:8f:fc:f0:15: 1c:49:b2:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdw126JBNNg8YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OTBmMGI1M2QtZWM2Ni00Njg4LWJlNzItYjA0YTcwY2ExNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghD7kyEt+w3WBK7K8d8HTvkIWC0ZWy53uvd5 aSgRD2VrqSS7XAkmJ8p+s2co5pXzbOZh1wfeML/GNq8xV2mBoTrUPivZUUUlSYc4 trbg7DiIPRejRTncc5xcHlolKKbhBsMbBZxUtjWxTLPoCQuHDb9WOCh4xLc89E+k HKjfaYl8VR9Zx+16AZvQhGJpj0mEfZfWM6Wqtz0GSEg7S2HNmeYz7no3bzAViKHm iuzi8IdRPmloxjj6VHGyNFP2STeAdzNp/bbZDMcO6weoa1odQZR7TpFiZqBzrSDG AZTRJCjiQMPM67FeLPMwnf2SYm3i8mjVCUHe5m7gWwTSfBOMIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiqSylatklWKw2giGEdTBMo7AHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGNjOTlkYWYtODY2Zi0z Mjk0LTg5NGMtY2Q0MGZiYWNkN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQA85S2Gt4jYSmenyhOS8BpxW02Iny9cBExTmObaY0ubxso2K3Pvon3 FmO9cvlmmFIBGBxwjCXiL5YYijUubhkO8j65ZOsNs/i2CzzPezDtBbSmo8acdN5r O5l/wgN+IqHJ10Rt6o8fisuB6iKWwbqIOM63vXOrvfSBScSHC7nlkI2T0IkjT/17 8tPbJHTROb790bw5e9czRvK0/BgCF6Zf2FAxvYCacqw+7qC08+4j9auMmeOe2KIj EXUgPC02i2j8sVbedY7MFTtIzCLqu9NNrTAUowwwubVat3lnUhNXyw1o1zUgCob8 1zsHnZPcCJ8bCIC1m3u4j/zwFRxJso8= -----END CERTIFICATE-----Generated at Wed Jul 23 01:34:30 2025 by rpki-client