$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c8fa85-a941-309f-8ce6-3ed6e832d0ec.roa File: 52c8fa85-a941-309f-8ce6-3ed6e832d0ec.roa (raw, json) Hash identifier: i1bK0hibiMhUv4heHfBUz5GNsVpK6S3TRM4vrYDerE4= Subject key identifier: BC:2A:5D:A9:F9:2C:53:BA:AD:96:4B:5D:8D:4B:AE:FE:3A:6F:49:B1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C370FD1828FC21E4D0D49C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c8fa85-a941-309f-8ce6-3ed6e832d0ec.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 209.158.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:0f:d1:82:8f:c2:1e:4d:0d:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=67a0b064-b7a2-40a2-af00-7721fabcbf36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:97:31:a1:2d:0e:7c:42:3d:51:d7:77:0d: 29:1c:7e:79:c0:c4:bf:6f:8d:ac:9f:56:5a:38:a3: 32:86:45:9e:0a:f5:0f:57:32:74:06:c3:a4:53:7f: ff:40:a7:9c:6a:01:d8:c9:35:90:7e:77:a2:ac:96: 7b:f2:07:7f:99:4a:e6:c9:f2:63:7e:dd:6a:42:37: 74:d8:94:98:62:19:5b:4c:9b:92:e3:80:b6:02:76: 63:2f:d7:6b:5c:f7:ef:e6:21:38:b7:81:05:3a:6b: 65:22:d3:73:2a:85:1d:db:d4:36:78:84:cd:81:79: c7:2b:70:a2:63:a5:1a:0a:47:46:ea:c3:29:e5:06: 11:d5:0d:e2:28:b0:99:00:33:ce:2f:19:27:e7:c0: 9c:1b:00:4c:87:78:02:21:f7:7b:15:ac:4b:45:b5: c4:b9:16:71:f8:d1:d7:8f:6f:d1:03:ed:7e:f8:69: fc:ec:5c:43:9f:9e:b1:be:4b:7e:fb:34:4a:48:ab: 41:fd:50:0e:b7:53:15:5d:c0:3a:93:4e:74:41:b9: dc:6b:f1:be:c1:ec:7a:2b:51:b8:68:8d:5d:d0:93: a6:93:fa:9f:07:45:61:ea:71:dd:f0:ab:fd:89:94: 3a:7b:30:39:b5:96:d3:9b:8a:cf:f8:95:78:ff:d2: a7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2A:5D:A9:F9:2C:53:BA:AD:96:4B:5D:8D:4B:AE:FE:3A:6F:49:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c8fa85-a941-309f-8ce6-3ed6e832d0ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.158.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5e:9d:d7:83:c4:49:ae:67:7a:58:f4:c6:bf:c5:7c:b9:9d: 4d:96:b6:34:37:e4:b2:25:78:07:1c:bf:90:8d:67:b0:5e:9c: 45:42:9e:d0:9d:d9:db:3d:6d:35:3d:c0:99:7f:3e:1c:ef:7e: fc:8e:b1:31:fe:19:83:8d:ad:17:cc:3c:fd:ff:8a:0f:2f:cc: d6:0e:f9:a1:4d:82:a8:e0:79:12:dd:9b:2d:1e:31:bd:f1:b5: 9f:df:1c:b0:e2:b1:02:c5:92:f0:0f:c4:bb:3e:93:00:a0:c7: a6:47:15:b5:6c:4e:c0:64:9d:0a:30:ee:1a:18:31:94:a6:f7: 39:d4:26:1c:6b:48:ca:75:eb:92:5f:7e:1f:c6:10:3a:ed:04: 0c:e9:fa:c9:8d:cc:7b:4b:3b:b8:72:d3:f2:78:c3:7a:63:cc: 9e:df:43:eb:7e:e2:af:11:5b:64:74:b7:11:86:23:9b:ae:e3: 78:9c:33:60:e3:42:dc:9c:75:28:7c:f3:b1:49:e9:5c:d7:f9: 05:59:db:9b:c7:ba:cf:a7:08:e1:e8:74:d5:f5:48:5e:e5:e3: 16:9a:aa:08:55:88:09:d0:fc:a4:0f:a4:5b:82:9e:ac:0a:00: 7c:3e:cf:31:2b:2f:4b:fa:f8:65:c1:b5:07:16:62:0b:dd:27: bc:e3:4b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNw/Rgo/CHk0NScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NjdhMGIwNjQtYjdhMi00MGEyLWFmMDAtNzcyMWZhYmNiZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbSXMaEtDnxCPVHXdw0pHH55wMS/b42sn1Za OKMyhkWeCvUPVzJ0BsOkU3//QKecagHYyTWQfneirJZ78gd/mUrmyfJjft1qQjd0 2JSYYhlbTJuS44C2AnZjL9drXPfv5iE4t4EFOmtlItNzKoUd29Q2eITNgXnHK3Ci Y6UaCkdG6sMp5QYR1Q3iKLCZADPOLxkn58CcGwBMh3gCIfd7FaxLRbXEuRZx+NHX j2/RA+1++Gn87FxDn56xvkt++zRKSKtB/VAOt1MVXcA6k050Qbnca/G+wex6K1G4 aI1d0JOmk/qfB0Vh6nHd8Kv9iZQ6ezA5tZbTm4rP+JV4/9KnhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwqXan5LFO6rZZLXY1Lrv46b0mxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTJjOGZhODUtYTk0MS0z MDlmLThjZTYtM2VkNmU4MzJkMGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Z6GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxendeDxEmuZ3pY9Ma/xXy5nU2WtjQ35LIleAccv5CNZ7BenEVCntCd 2ds9bTU9wJl/PhzvfvyOsTH+GYONrRfMPP3/ig8vzNYO+aFNgqjgeRLdmy0eMb3x tZ/fHLDisQLFkvAPxLs+kwCgx6ZHFbVsTsBknQow7hoYMZSm9znUJhxrSMp165Jf fh/GEDrtBAzp+smNzHtLO7hy0/J4w3pjzJ7fQ+t+4q8RW2R0txGGI5uu43icM2Dj QtycdSh887FJ6VzX+QVZ25vHus+nCOHodNX1SF7l4xaaqghViAnQ/KQPpFuCnqwK AHw+zzErL0v6+GXBtQcWYgvdJ7zjS0o= -----END CERTIFICATE-----Generated at Sun Sep 7 03:37:04 2025 by rpki-client