$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9d98596-e2af-3da2-bcb9-0771e50b080a.roa File: c9d98596-e2af-3da2-bcb9-0771e50b080a.roa (raw, json) Hash identifier: SBtH0wPRtYX7HN9IMmDIcfoOBn5YvGWErxbQcJr4Fok= Subject key identifier: 25:3E:45:4F:6B:CA:E2:31:87:B1:D8:8E:D5:00:DA:39:8F:18:71:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8C70BF92FA1B2C7CBD249300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9d98596-e2af-3da2-bcb9-0771e50b080a.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 32787 IP address blocks: 209.200.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:bf:92:fa:1b:2c:7c:bd:24:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=4e6f099a-b70b-4404-a54e-902f2e381523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:80:c0:d5:94:23:87:58:e6:66:84:b6:44:4e: e2:6f:82:a7:a0:cd:05:70:6e:93:9c:95:40:b9:49: 05:97:47:7f:48:cb:c7:88:4c:56:19:e8:a6:f7:ea: c8:ae:31:b5:e9:1b:f8:1a:9a:58:94:e0:33:16:48: 4a:97:e9:c2:9e:cd:5d:16:17:93:35:e9:4d:5d:9e: 83:94:56:24:de:5b:21:21:7e:8f:76:06:bf:ad:4c: 96:47:e3:92:46:40:bf:58:46:9b:00:4f:05:99:9b: e6:5a:48:f7:98:53:ae:1c:c1:7a:36:7b:41:8e:db: 7e:16:03:d0:3c:a7:63:0d:c5:6b:9b:b2:10:3e:bf: 77:13:db:20:c0:d1:be:be:3c:3c:cc:9c:1e:36:8a: 0e:02:47:3c:73:a6:b1:58:b1:2f:c8:dd:6b:d7:d4: a1:f2:67:c3:40:58:f3:ff:15:ea:19:0e:d1:4e:42: 1d:34:a8:a3:71:10:4e:87:4d:01:3f:27:8b:7d:72: ed:63:5d:7c:16:f7:19:6b:a2:8b:7d:20:c3:5a:da: 87:bb:03:2d:28:b1:1e:09:7c:ab:a1:77:ab:e0:6a: bc:fd:5d:38:37:f3:00:8e:68:9d:03:3b:f1:fe:9c: 95:a9:72:4e:b8:8c:68:a0:24:43:56:d6:ab:e4:5e: b5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3E:45:4F:6B:CA:E2:31:87:B1:D8:8E:D5:00:DA:39:8F:18:71:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9d98596-e2af-3da2-bcb9-0771e50b080a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:cf:09:00:b6:da:3d:94:8e:94:62:23:4a:db:3d:ca:06:16: 18:85:e8:b2:8a:1d:fb:aa:bb:48:22:5e:eb:fe:23:f6:ab:6c: 18:22:11:b3:7b:6f:15:d0:f0:09:9d:f0:1c:51:1c:1a:93:22: 4d:81:b7:1b:e1:d0:6f:b7:ce:e3:65:a7:7a:8f:a3:f6:04:bb: 72:d6:9d:88:e9:c4:d5:72:5f:a2:18:b6:04:81:9a:84:84:ff: 85:6c:88:52:df:8c:37:b1:a4:08:96:50:f5:48:80:01:60:6f: d6:e5:33:25:72:71:fd:b0:34:13:a0:10:5e:51:cd:01:61:c1: 0a:79:86:bc:da:6c:32:e7:6a:7a:bc:bb:c7:cb:53:d5:a8:78: 66:52:cf:91:b9:51:46:84:02:85:60:f5:d6:ea:a3:78:c4:8d: de:61:4e:7f:14:7e:1e:bc:50:bf:7e:78:08:50:71:04:c5:bf: e8:ce:25:a2:74:ce:00:88:7a:af:17:94:7e:bf:a0:2f:af:11: 47:df:d9:92:19:2e:1f:4a:ab:48:8b:0e:91:df:c9:aa:5c:ea: 9f:4f:79:dc:49:06:a1:fe:81:07:01:5b:d8:64:47:fb:bb:dd: 10:f8:96:87:82:fb:00:b4:fb:62:57:b4:16:44:67:8b:94:e3: 42:af:15:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcL+S+hssfL0kkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NGU2ZjA5OWEtYjcwYi00NDA0LWE1NGUtOTAyZjJlMzgxNTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIDA1ZQjh1jmZoS2RE7ib4KnoM0FcG6TnJVA uUkFl0d/SMvHiExWGeim9+rIrjG16Rv4GppYlOAzFkhKl+nCns1dFheTNelNXZ6D lFYk3lshIX6Pdga/rUyWR+OSRkC/WEabAE8FmZvmWkj3mFOuHMF6NntBjtt+FgPQ PKdjDcVrm7IQPr93E9sgwNG+vjw8zJweNooOAkc8c6axWLEvyN1r19Sh8mfDQFjz /xXqGQ7RTkIdNKijcRBOh00BPyeLfXLtY118FvcZa6KLfSDDWtqHuwMtKLEeCXyr oXer4Gq8/V04N/MAjmidAzvx/pyVqXJOuIxooCRDVtar5F61lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCU+RU9ryuIxh7HYjtUA2jmPGHFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzlkOTg1OTYtZTJhZi0z ZGEyLWJjYjktMDc3MWU1MGIwODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzPCQC22j2UjpRiI0rbPcoGFhiF6LKKHfuqu0giXuv+I/arbBgiEbN7 bxXQ8Amd8BxRHBqTIk2Btxvh0G+3zuNlp3qPo/YEu3LWnYjpxNVyX6IYtgSBmoSE /4VsiFLfjDexpAiWUPVIgAFgb9blMyVycf2wNBOgEF5RzQFhwQp5hrzabDLnanq8 u8fLU9WoeGZSz5G5UUaEAoVg9dbqo3jEjd5hTn8Ufh68UL9+eAhQcQTFv+jOJaJ0 zgCIeq8XlH6/oC+vEUff2ZIZLh9Kq0iLDpHfyapc6p9PedxJBqH+gQcBW9hkR/u7 3RD4loeC+wC0+2JXtBZEZ4uU40KvFes= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:43 2025 by rpki-client