$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5e5dde61-6fb0-31b1-ba1c-69031d17bde5.roa File: 5e5dde61-6fb0-31b1-ba1c-69031d17bde5.roa (raw, json) Hash identifier: 32Iy6p8OFYnV/qUIcxXoLCjJr9G4jSSRQOezVL5dDUg= Subject key identifier: 64:9D:48:DD:14:F6:54:50:E9:5B:1D:D7:1B:28:A2:E2:F2:F3:63:6B Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B10070227BBC5055C85544F00 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5e5dde61-6fb0-31b1-ba1c-69031d17bde5.roa Signing time: Tue 02 Sep 2025 16:14:45 +0000 ROA not before: Tue 02 Sep 2025 16:14:45 +0000 ROA not after: Mon 01 Dec 2025 17:14:45 +0000 asID: 55081 IP address blocks: 209.127.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:07:02:27:bb:c5:05:5c:85:54:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 2 16:14:45 2025 GMT Not After : Dec 1 17:14:45 2025 GMT Subject: CN=fea1f8bd-c1f7-4a5e-95e1-7e6194a5a22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:50:16:96:6f:55:31:63:2e:e2:00:05:c9: 9e:7f:81:db:99:b0:72:04:01:b3:4a:2f:10:b9:fa: fa:b8:f9:14:af:c2:38:20:0e:f4:cb:fc:57:2b:b0: 36:01:eb:76:3b:7e:35:85:4d:b0:6c:8e:15:61:df: 73:c6:df:da:df:1c:e2:db:8e:eb:04:59:ce:e5:49: 04:09:0a:22:c3:6e:3c:fd:34:04:d3:52:c2:55:27: 22:6f:3c:42:63:be:6f:0f:76:eb:b0:34:47:51:5e: ea:be:42:dd:40:04:a2:e9:c6:61:7e:ce:12:14:df: e1:bd:80:39:85:a9:0c:54:97:83:ff:e0:cd:15:de: c8:8c:21:b7:9b:60:e5:53:1c:63:d5:70:a1:9b:f8: f5:e1:c7:0d:65:96:17:13:1b:10:29:42:80:5c:83: f5:a4:07:26:0b:2a:01:a8:ca:08:b6:06:10:80:a3: 63:99:4b:d8:0d:fc:1f:3c:27:83:9e:7c:97:62:f5: 22:3e:6d:81:6d:32:90:df:1f:8f:7e:50:62:b2:d7: e1:b1:24:d3:46:e7:0c:f0:17:a4:6e:4c:ee:55:19: 6e:32:58:02:b9:fa:91:b0:02:59:84:b9:5c:60:72: 3e:e8:f9:1f:d3:b8:9d:05:d5:78:dc:4b:03:12:69: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9D:48:DD:14:F6:54:50:E9:5B:1D:D7:1B:28:A2:E2:F2:F3:63:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5e5dde61-6fb0-31b1-ba1c-69031d17bde5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:47:24:cd:2a:53:a4:83:fe:33:1a:ab:e3:97:eb:40:ed:83: a9:6a:4b:f4:c0:5f:c4:7f:74:16:c4:ac:08:62:72:d0:d8:87: a1:68:ab:eb:6e:fe:f5:1e:d7:0e:46:94:c0:1d:81:47:f4:dd: ff:80:43:1b:26:0f:60:6c:03:a4:7e:cd:dc:ed:5a:66:f2:da: 44:de:e0:15:a5:fa:47:2f:69:62:f4:da:9b:55:0b:0e:4c:49: 76:8b:ac:39:16:d3:48:56:ea:ca:2e:1f:87:75:5c:1f:66:a2: aa:e4:d1:74:0b:94:9f:4f:66:52:aa:82:1d:21:06:42:d7:69: 61:74:76:26:7a:3f:dc:97:14:18:8b:a7:83:b7:c8:b2:39:50: a0:bd:74:2c:a7:11:5d:83:42:a9:28:3a:c2:f8:37:c2:24:18: 89:eb:e3:86:fd:96:22:49:55:db:8e:b8:89:a0:e3:23:c4:82: 5a:a1:ee:92:67:5a:25:fd:aa:ae:7e:34:88:b2:ea:7a:56:50: e1:9f:d7:d4:d0:47:cd:4b:46:7b:a8:84:60:38:a7:3e:c9:04: 33:be:da:f6:f6:dd:44:cd:04:84:68:78:24:88:96:62:80:34: 76:b2:5e:61:17:b4:30:76:d6:a1:67:28:a4:0a:5c:8b:08:18: f3:90:96:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsQBwInu8UFXIVUTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkwMjE2MTQ0NVoXDTI1MTIwMTE3MTQ0NVowLzEtMCsGA1UEAxMk ZmVhMWY4YmQtYzFmNy00YTVlLTk1ZTEtN2U2MTk0YTVhMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+BQFpZvVTFjLuIABcmef4HbmbByBAGzSi8Q ufr6uPkUr8I4IA70y/xXK7A2Aet2O341hU2wbI4VYd9zxt/a3xzi247rBFnO5UkE CQoiw248/TQE01LCVScibzxCY75vD3brsDRHUV7qvkLdQASi6cZhfs4SFN/hvYA5 hakMVJeD/+DNFd7IjCG3m2DlUxxj1XChm/j14ccNZZYXExsQKUKAXIP1pAcmCyoB qMoItgYQgKNjmUvYDfwfPCeDnnyXYvUiPm2BbTKQ3x+PflBistfhsSTTRucM8Bek bkzuVRluMlgCufqRsAJZhLlcYHI+6Pkf07idBdV43EsDEmlt7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSdSN0U9lRQ6Vsd1xsoouLy82NrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNWU1ZGRlNjEtNmZiMC0z MWIxLWJhMWMtNjkwMzFkMTdiZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0X/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVHJM0qU6SD/jMaq+OX60Dtg6lqS/TAX8R/dBbErAhictDYh6Foq+tu /vUe1w5GlMAdgUf03f+AQxsmD2BsA6R+zdztWmby2kTe4BWl+kcvaWL02ptVCw5M SXaLrDkW00hW6souH4d1XB9moqrk0XQLlJ9PZlKqgh0hBkLXaWF0diZ6P9yXFBiL p4O3yLI5UKC9dCynEV2DQqkoOsL4N8IkGInr44b9liJJVduOuImg4yPEglqh7pJn WiX9qq5+NIiy6npWUOGf19TQR81LRnuohGA4pz7JBDO+2vb23UTNBIRoeCSIlmKA NHayXmEXtDB21qFnKKQKXIsIGPOQlvg= -----END CERTIFICATE-----Generated at Thu Sep 11 01:28:08 2025 by rpki-client