$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa File: bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa (raw, json) Hash identifier: qk3to2YGJTeJDEt1WONDvi8Y25MfC2SA3pH332GiM8s= Subject key identifier: B6:2A:CA:ED:09:DC:A5:58:F6:BF:D1:CE:22:28:71:58:FC:D7:14:F4 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584B047C121D5CF8717E9D442540 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 207.202.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:12:1d:5c:f8:71:7e:9d:44:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=4dd1b0a3-9164-436d-b792-d452345b0b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:76:3c:8d:b7:da:56:3c:5c:72:d7:7a:10: cd:07:ba:55:1f:71:9f:a5:f9:de:5a:e8:07:f4:71: 60:97:c2:c5:8b:44:66:3d:a8:b1:9f:41:24:6e:9f: 63:50:f6:c9:22:56:93:68:b8:a2:e0:25:1d:60:f8: 5d:61:b1:c4:80:70:59:91:80:9d:ee:85:b1:04:0f: f3:9f:f2:54:04:4f:24:6f:ff:21:e9:a9:0b:2c:f8: ab:8d:8b:0c:da:22:7f:38:6b:20:0c:ad:95:a4:e2: 29:a7:99:a9:31:58:e0:62:94:cb:3b:87:a7:d6:4a: 82:55:36:c8:d7:4d:9b:72:54:05:ef:3a:af:23:9a: a9:53:cb:ce:d9:1e:48:4b:e5:1d:b5:62:06:22:1e: af:11:d3:6e:47:0e:54:ba:cf:c5:24:ba:1f:f4:f2: 60:b3:52:6b:09:dc:1d:e4:9d:2a:f2:06:b6:51:6b: 35:cc:19:af:70:9c:1a:d8:ea:db:a3:1f:16:03:da: a5:15:7a:14:64:29:f7:7e:2b:20:2f:62:8e:20:25: 08:cc:aa:5b:ab:fe:51:4f:58:31:43:47:64:ec:91: 11:ff:ba:a3:7a:d1:c3:a0:81:3a:06:5d:19:4a:ed: 16:37:97:45:f5:c4:71:7b:fe:4d:b2:77:d1:59:61: a7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2A:CA:ED:09:DC:A5:58:F6:BF:D1:CE:22:28:71:58:FC:D7:14:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9b:19:43:2d:30:84:d7:18:87:46:e7:43:e9:de:5b:ee:37: 55:40:8f:3a:d8:c0:d4:dc:04:81:2b:4f:8c:78:2a:a1:2a:83: 1b:66:03:db:6b:a8:45:36:d0:ff:da:53:fd:0f:58:6d:a5:99: 83:f6:30:47:58:ee:c5:74:e7:3b:91:2a:e4:de:bf:79:a3:93: db:f6:fe:a8:28:11:9f:df:ef:9b:78:aa:46:1e:2f:b0:e1:54: f4:1e:45:5c:0c:fb:90:54:7f:9b:69:d5:00:56:9c:26:9b:1b: cf:6b:9f:86:8a:e7:62:f4:2a:f8:bb:11:ff:88:94:d4:a2:29: 21:50:ce:cd:f1:ec:a3:03:1e:2c:5b:c5:1c:52:f7:20:7d:15: 20:a2:ed:3c:69:9d:60:95:d8:88:38:5b:29:c7:ec:03:99:61: 6c:d6:0b:7e:3b:39:ec:c5:73:ae:d3:cc:8d:dc:cc:bc:14:43: 91:56:d4:81:c6:f0:a2:79:b0:d8:96:31:66:5c:8f:ee:08:91: f3:31:04:e6:08:ad:ae:24:fe:e4:07:1e:87:a2:33:e8:ae:78: de:0d:7f:66:31:1b:79:e1:f7:de:f0:44:19:be:af:0c:95:6f: d7:b2:e4:0c:2f:d2:07:d1:ec:cf:fc:8d:74:ff:d3:30:fd:e5: 8d:23:83:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBIdXPhxfp1EJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NGRkMWIwYTMtOTE2NC00MzZkLWI3OTItZDQ1MjM0NWIwYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSx2PI232lY8XHLXehDNB7pVH3GfpfneWugH 9HFgl8LFi0RmPaixn0Ekbp9jUPbJIlaTaLii4CUdYPhdYbHEgHBZkYCd7oWxBA/z n/JUBE8kb/8h6akLLPirjYsM2iJ/OGsgDK2VpOIpp5mpMVjgYpTLO4en1kqCVTbI 102bclQF7zqvI5qpU8vO2R5IS+UdtWIGIh6vEdNuRw5Uus/FJLof9PJgs1JrCdwd 5J0q8ga2UWs1zBmvcJwa2Orbox8WA9qlFXoUZCn3fisgL2KOICUIzKpbq/5RT1gx Q0dk7JER/7qjetHDoIE6Bl0ZSu0WN5dF9cRxe/5NsnfRWWGn+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYqyu0J3KVY9r/RziIocVj81xT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYmRiZWMzZmYtYmFjNi0z MTNjLTg1ODAtYmE3MWY2MWRmYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKbGUMtMITXGIdG50Pp3lvuN1VAjzrYwNTcBIErT4x4KqEqgxtmA9tr qEU20P/aU/0PWG2lmYP2MEdY7sV05zuRKuTev3mjk9v2/qgoEZ/f75t4qkYeL7Dh VPQeRVwM+5BUf5tp1QBWnCabG89rn4aK52L0Kvi7Ef+IlNSiKSFQzs3x7KMDHixb xRxS9yB9FSCi7TxpnWCV2Ig4WynH7AOZYWzWC347OezFc67TzI3czLwUQ5FW1IHG 8KJ5sNiWMWZcj+4IkfMxBOYIra4k/uQHHoeiM+iueN4Nf2YxG3nh997wRBm+rwyV b9ey5Awv0gfR7M/8jXT/0zD95Y0jg3M= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:35 2025 by rpki-client