$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa File: 6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa (raw, json) Hash identifier: CmMaW6dTta/p1iRFHP6rPNdNv/zgfA4Ww0CE4dfBxh8= Subject key identifier: E0:E5:88:E6:B7:35:B5:08:65:01:1B:99:F9:12:B8:79:7B:9E:CC:BA Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584AFC609E046BF8E13B29DC3400 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa Signing time: Tue 26 Aug 2025 15:19:08 +0000 ROA not before: Tue 26 Aug 2025 15:19:08 +0000 ROA not after: Mon 24 Nov 2025 16:19:08 +0000 asID: 55286 IP address blocks: 209.127.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:60:9e:04:6b:f8:e1:3b:29:dc:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Aug 26 15:19:08 2025 GMT Not After : Nov 24 16:19:08 2025 GMT Subject: CN=ba5263f6-0df0-4966-9727-e0970e92696b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:87:06:bd:b4:c3:8c:f4:de:76:e2:c7:a0: 55:7b:22:cc:9f:92:ac:7d:fe:89:d5:df:1f:6d:b1: 68:fb:3d:2a:40:98:1c:08:4e:e7:43:bc:d7:01:9e: 23:d8:44:4e:68:bb:ec:b0:5e:c7:6e:37:1a:f5:58: 94:21:e0:1b:bb:dd:ac:9b:e2:8b:6e:50:72:0d:b4: cc:8f:8b:23:40:55:74:3d:c7:56:e0:93:70:e8:73: e2:c1:ad:3b:fc:30:f3:53:00:60:c8:5c:99:df:b9: a6:26:80:d5:b3:84:9d:6b:1a:ee:4d:d4:45:99:7a: f3:42:cf:c4:5d:6d:f4:8c:8a:5a:ac:9d:dd:57:d9: 11:1d:72:da:a1:b7:fc:d5:e0:77:b1:aa:1f:1c:50: f8:a4:3b:5a:0c:f4:68:b3:3a:c6:91:31:69:8f:5b: 17:e5:f3:cb:95:35:03:1e:08:a0:bf:aa:4a:2f:1f: 14:6a:15:f5:a9:58:ec:78:a6:95:61:a4:f7:0a:fe: 0e:cb:83:0d:24:c9:3f:6b:24:5f:7d:2d:2c:82:48: 8a:f6:6f:72:95:94:8d:ea:a6:6f:5b:a8:51:f6:e3: ba:23:63:7e:37:a7:ee:27:3f:b2:f4:92:87:80:2f: 96:8e:fa:31:e5:f7:0b:03:34:0a:cb:a4:ec:a4:7a: 60:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E5:88:E6:B7:35:B5:08:65:01:1B:99:F9:12:B8:79:7B:9E:CC:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:89:6e:30:c7:f1:f4:73:9a:90:94:fa:b2:8d:8f:b4:47:65: 31:44:ea:54:8b:38:74:a6:40:54:b9:c4:4b:ce:92:7d:96:0c: 4b:09:b8:c4:cf:0c:0f:4b:71:12:2d:ba:ae:68:f7:28:10:c7: 8f:ad:f1:7f:40:61:08:b6:7b:cd:86:a2:e1:40:0b:c9:2f:87: a1:41:fd:d1:31:12:5a:d3:84:5a:97:40:02:9b:3b:bf:c8:03: 2b:2d:7c:ab:58:34:87:88:e8:b0:0f:3d:85:dd:d5:90:93:50: b7:b3:66:d1:4d:39:01:82:c0:64:e2:70:9e:a8:1b:bf:87:17: b0:d9:50:4e:ed:3c:d9:ad:f7:6f:be:2b:26:24:88:3c:94:4e: 67:8d:83:85:1c:2b:1e:6e:b1:bd:b3:82:4b:1f:fd:87:fa:0f: 88:09:2a:3f:ca:f9:63:65:70:9f:22:c0:6f:58:1c:35:eb:50: 15:db:d0:68:ee:5e:4c:ba:47:21:a6:a5:f3:54:13:05:36:1c: ab:67:6b:7f:56:2e:cd:3c:69:2f:e4:7d:a2:5b:79:8d:7c:94: 65:03:c2:75:25:53:e7:21:15:a6:87:11:29:49:9b:c3:b0:3f: 18:5a:8f:80:d1:06:38:bd:6f:94:8c:ca:f5:0b:0e:22:76:d0: f0:64:f0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8YJ4Ea/jhOyncNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDgyNjE1MTkwOFoXDTI1MTEyNDE2MTkwOFowLzEtMCsGA1UEAxMk YmE1MjYzZjYtMGRmMC00OTY2LTk3MjctZTA5NzBlOTI2OTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYeHBr20w4z03nbix6BVeyLMn5Ksff6J1d8f bbFo+z0qQJgcCE7nQ7zXAZ4j2EROaLvssF7Hbjca9ViUIeAbu92sm+KLblByDbTM j4sjQFV0PcdW4JNw6HPiwa07/DDzUwBgyFyZ37mmJoDVs4SdaxruTdRFmXrzQs/E XW30jIparJ3dV9kRHXLaobf81eB3saofHFD4pDtaDPRoszrGkTFpj1sX5fPLlTUD Hgigv6pKLx8UahX1qVjseKaVYaT3Cv4Oy4MNJMk/ayRffS0sgkiK9m9ylZSN6qZv W6hR9uO6I2N+N6fuJz+y9JKHgC+Wjvox5fcLAzQKy6TspHpgOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODliOa3NbUIZQEbmfkSuHl7nsy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNmU0OWYyNjEtOGM1ZS0z MDhlLThkYTYtN2ZkMWJlYmZmOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmJbjDH8fRzmpCU+rKNj7RHZTFE6lSLOHSmQFS5xEvOkn2WDEsJuMTP DA9LcRItuq5o9ygQx4+t8X9AYQi2e82GouFAC8kvh6FB/dExElrThFqXQAKbO7/I AystfKtYNIeI6LAPPYXd1ZCTULezZtFNOQGCwGTicJ6oG7+HF7DZUE7tPNmt92++ KyYkiDyUTmeNg4UcKx5usb2zgksf/Yf6D4gJKj/K+WNlcJ8iwG9YHDXrUBXb0Gju Xky6RyGmpfNUEwU2HKtna39WLs08aS/kfaJbeY18lGUDwnUlU+chFaaHESlJm8Ow Pxhaj4DRBji9b5SMyvULDiJ20PBk8As= -----END CERTIFICATE-----Generated at Thu Oct 9 07:33:32 2025 by rpki-client