$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa2004bc-167d-3b61-a56f-46f6ac99adb8.roa File: aa2004bc-167d-3b61-a56f-46f6ac99adb8.roa (raw, json) Hash identifier: 2oTaeS3BMbkfoVAWAGIjd23Crx2RpEFHdavvKktKQ6w= Subject key identifier: 71:5A:EB:45:79:28:E2:2F:23:2D:82:87:A0:55:99:14:F4:03:37:CB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8C70BE6476F48D9BF04E1E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa2004bc-167d-3b61-a56f-46f6ac99adb8.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 32787 IP address blocks: 209.200.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:be:64:76:f4:8d:9b:f0:4e:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=f8dbfa71-f004-4606-ad07-b6aa5fc31ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:a7:58:02:23:9c:f2:33:21:1f:f2:8a:4b: 63:50:e3:04:6c:12:49:37:11:b4:34:76:46:e8:b1: 7f:13:ee:03:16:c6:ad:5e:94:7f:c1:ab:24:91:0b: 06:7b:c5:ba:bd:a3:03:a5:73:ba:e1:d3:f6:c3:6b: a3:7d:f1:d6:c6:30:b8:55:1a:f0:98:7b:f7:a6:ce: 88:8d:c2:d1:e0:8b:6c:49:47:d6:01:af:18:e7:0d: 4f:c9:f4:6b:d3:7f:22:aa:81:0f:68:40:40:7f:af: d7:b4:33:df:6d:97:57:8f:26:b0:34:4b:5d:bc:e6: db:b6:bc:4d:98:f6:56:2d:66:95:7e:57:78:f4:73: 33:12:aa:85:1f:a6:70:71:86:93:d0:8b:ee:db:6b: e7:86:75:6d:91:d8:42:90:41:7b:95:c1:34:87:00: 6c:d1:ea:f2:fd:b3:85:db:f8:e4:8d:41:57:6a:3b: 82:7a:d7:1f:a7:e7:bf:8d:25:c1:4c:f3:34:dc:d0: 4d:b0:dd:78:ec:4f:6f:11:50:b1:2a:60:dc:eb:a9: 6f:db:7a:07:9c:ea:38:ac:fc:7c:37:5b:29:51:93: 71:f8:8b:03:f1:45:fa:9e:43:eb:74:7e:cf:a7:08: 61:7f:9b:26:c5:0a:29:24:ce:b3:72:8b:e2:e3:50: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5A:EB:45:79:28:E2:2F:23:2D:82:87:A0:55:99:14:F4:03:37:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa2004bc-167d-3b61-a56f-46f6ac99adb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f9:f9:85:00:a8:d4:99:68:af:7d:8a:76:b5:9f:b6:3a:21: 9f:b2:3b:43:59:fb:5a:6f:86:45:65:89:6f:cd:74:82:49:16: 2a:31:5f:78:0b:46:3d:69:95:af:1b:9d:38:21:c5:09:b9:40: 45:90:13:20:61:cb:b1:e7:a5:b3:46:5f:e3:ae:dd:49:ab:6e: 54:34:c0:e9:da:74:3a:8b:5b:07:c5:4c:c3:80:e4:51:97:48: 0c:cc:04:73:63:1b:bd:c7:05:64:4e:85:a3:e7:0c:fa:30:c1: 49:eb:fd:10:62:91:cf:cd:0a:44:66:1d:72:e8:8a:55:06:77: b1:3d:53:96:78:5b:df:09:c9:b5:c8:10:76:e5:47:d0:1d:76: b7:b1:0f:0e:77:fb:dc:5b:a5:b5:e7:63:5c:35:1b:73:34:31: 4b:e1:ac:47:9e:db:ca:63:70:41:22:cd:ce:e3:ab:b8:f3:00: 38:0b:92:ad:e0:e5:69:c2:b7:d6:82:88:a7:f2:f1:e5:0c:f8: e2:cf:91:21:f7:1a:10:21:30:e1:bf:0f:ba:d7:96:dc:16:2c: 64:08:c2:b8:65:be:ab:4f:22:be:02:85:04:5e:6d:5d:e9:6b: 4b:bb:24:f0:e7:f6:49:fa:ce:2a:16:80:f8:d4:fc:c7:ee:04: 28:df:ab:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcL5kdvSNm/BOHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk ZjhkYmZhNzEtZjAwNC00NjA2LWFkMDctYjZhYTVmYzMxZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6OnWAIjnPIzIR/yiktjUOMEbBJJNxG0NHZG 6LF/E+4DFsatXpR/waskkQsGe8W6vaMDpXO64dP2w2ujffHWxjC4VRrwmHv3ps6I jcLR4ItsSUfWAa8Y5w1PyfRr038iqoEPaEBAf6/XtDPfbZdXjyawNEtdvObbtrxN mPZWLWaVfld49HMzEqqFH6ZwcYaT0Ivu22vnhnVtkdhCkEF7lcE0hwBs0ery/bOF 2/jkjUFXajuCetcfp+e/jSXBTPM03NBNsN147E9vEVCxKmDc66lv23oHnOo4rPx8 N1spUZNx+IsD8UX6nkPrdH7Ppwhhf5smxQopJM6zcovi41CapQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFa60V5KOIvIy2Ch6BVmRT0AzfLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWEyMDA0YmMtMTY3ZC0z YjYxLWE1NmYtNDZmNmFjOTlhZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cimMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP5+YUAqNSZaK99ina1n7Y6IZ+yO0NZ+1pvhkVliW/NdIJJFioxX3gL Rj1pla8bnTghxQm5QEWQEyBhy7HnpbNGX+Ou3UmrblQ0wOnadDqLWwfFTMOA5FGX SAzMBHNjG73HBWROhaPnDPowwUnr/RBikc/NCkRmHXLoilUGd7E9U5Z4W98JybXI EHblR9AddrexDw53+9xbpbXnY1w1G3M0MUvhrEee28pjcEEizc7jq7jzADgLkq3g 5WnCt9aCiKfy8eUM+OLPkSH3GhAhMOG/D7rXltwWLGQIwrhlvqtPIr4ChQRebV3p a0u7JPDn9kn6zioWgPjU/MfuBCjfq5A= -----END CERTIFICATE-----Generated at Wed Jul 23 01:42:00 2025 by rpki-client