$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa File: 59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa (raw, json) Hash identifier: oUVnHZwGskedwjXrph8DQhvVjS0tkoptce78zFayhkI= Subject key identifier: 50:C6:5F:85:C4:72:BD:B1:E6:39:3F:D7:7F:19:09:D4:97:72:8D:CF Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584B9CA22DD2879AA968E93553A0 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 46450 IP address blocks: 209.20.134.0/24 maxlen: 24 209.20.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2d:d2:87:9a:a9:68:e9:35:53:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=69669de3-2777-4f86-aed1-bb46bc016b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:a0:c0:5c:ea:d8:5a:28:8d:f8:30:85:33: ef:6d:89:96:bc:c7:91:80:20:10:47:e1:5f:08:65: ff:5d:e1:6a:f9:77:2c:41:03:c6:72:cb:75:23:12: f6:e6:4e:fe:c9:11:eb:06:62:65:8a:fe:63:1e:9c: 01:f6:76:2d:a7:97:f4:a6:5d:47:03:cb:15:b7:57: e6:5b:07:00:64:c2:bb:b0:46:36:65:e3:1c:e7:e2: 81:8d:f6:60:75:85:89:76:40:1a:21:57:6e:6f:e5: c0:40:be:cc:1d:c6:b6:4a:f2:c4:5c:78:5b:69:14: 0e:4e:9c:03:6d:bf:c5:8b:17:26:e5:40:fb:c5:98: ba:1c:1b:78:93:79:ee:d0:f3:f8:94:a1:b9:bb:16: c1:29:39:30:54:94:c9:2a:5b:bd:bb:bd:a7:3f:93: 6a:f5:b9:b0:ac:0c:8b:bf:2a:db:bb:f3:ee:03:7d: 86:10:9b:e1:9d:3b:32:ff:d3:ef:f1:67:12:00:cb: aa:05:14:b4:09:5c:52:07:42:e0:6b:5b:42:9b:96: 15:60:68:61:b2:b7:76:ec:a1:0e:c1:e3:c9:cb:94: 91:64:9c:fb:29:62:0e:de:36:ff:34:b5:a7:52:95: 4f:42:16:43:70:c4:af:28:0f:fd:b0:56:85:35:13: d3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C6:5F:85:C4:72:BD:B1:E6:39:3F:D7:7F:19:09:D4:97:72:8D:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:59:e0:ed:74:2b:59:a7:4f:9e:dd:49:98:a0:2e:dd:35:9b: b2:30:b9:f3:0c:2f:0f:bd:0d:2a:bd:2f:4e:45:60:48:65:1c: 2c:7c:9d:45:f6:32:49:19:50:5c:5e:c5:53:ce:19:42:ae:b3: 3c:a4:e3:12:7c:4d:ec:6f:76:79:9a:56:88:93:f3:f8:b6:54: b8:d1:0b:42:90:1d:36:5b:f3:94:05:db:5a:dd:94:53:3b:c2: 79:b5:80:a5:87:81:38:b4:38:6c:be:8b:f1:96:01:7e:d5:f0: e7:42:a7:e0:13:06:b0:8d:c1:aa:b0:16:f9:b2:57:99:60:dc: cb:1b:3c:22:64:8d:6f:4a:78:66:76:b2:fb:74:48:3a:db:ba: 9a:ec:ca:69:64:88:cf:5d:5c:5b:e2:94:0f:53:31:ad:b7:89: 01:6b:de:97:ab:d0:07:c9:b7:ae:c0:49:72:2f:23:85:35:a2: 42:97:f0:9b:07:d8:6e:f3:ae:d5:ab:a5:d5:88:f5:02:17:b0: 48:6f:b8:43:e1:9e:93:4d:f0:f8:25:b6:41:32:4b:7f:f0:07: f4:c2:20:0b:2c:7f:59:9c:df:6f:f4:96:93:8c:ae:c9:67:f4: 84:a2:ee:e9:8a:f4:b4:c0:b5:b5:17:8e:4a:3d:24:c8:c1:03: 8a:8d:82:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucoi3Sh5qpaOk1U6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk Njk2NjlkZTMtMjc3Ny00Zjg2LWFlZDEtYmI0NmJjMDE2YjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuqgwFzq2FoojfgwhTPvbYmWvMeRgCAQR+Ff CGX/XeFq+XcsQQPGcst1IxL25k7+yRHrBmJliv5jHpwB9nYtp5f0pl1HA8sVt1fm WwcAZMK7sEY2ZeMc5+KBjfZgdYWJdkAaIVdub+XAQL7MHca2SvLEXHhbaRQOTpwD bb/Fixcm5UD7xZi6HBt4k3nu0PP4lKG5uxbBKTkwVJTJKlu9u72nP5Nq9bmwrAyL vyrbu/PuA32GEJvhnTsy/9Pv8WcSAMuqBRS0CVxSB0Lga1tCm5YVYGhhsrd27KEO wePJy5SRZJz7KWIO3jb/NLWnUpVPQhZDcMSvKA/9sFaFNRPTbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDGX4XEcr2x5jk/138ZCdSXco3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTljMjYzMjgtZGRkNi0z NjIzLTk3NTktM2FhMWIyMWNiYWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RSGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRZ4O10K1mnT57dSZigLt01m7IwufMMLw+9DSq9L05FYEhlHCx8nUX2 MkkZUFxexVPOGUKuszyk4xJ8TexvdnmaVoiT8/i2VLjRC0KQHTZb85QF21rdlFM7 wnm1gKWHgTi0OGy+i/GWAX7V8OdCp+ATBrCNwaqwFvmyV5lg3MsbPCJkjW9KeGZ2 svt0SDrbuprsymlkiM9dXFvilA9TMa23iQFr3per0AfJt67ASXIvI4U1okKX8JsH 2G7zrtWrpdWI9QIXsEhvuEPhnpNN8PgltkEyS3/wB/TCIAssf1mc32/0lpOMrsln 9ISi7umK9LTAtbUXjko9JMjBA4qNgqg= -----END CERTIFICATE-----Generated at Tue Nov 11 22:16:40 2025 by rpki-client