$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa File: 0475b828-a277-3eeb-8b05-22e0f1e69824.roa (raw, json) Hash identifier: sSlyT5TaGjZKXrfTVHn1RU/tvDo0Wl6bjx4764S8BoE= Subject key identifier: B2:19:D3:28:95:6E:40:37:6E:78:7A:62:F9:75:64:24:CC:F0:57:17 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584B5DD1E4A63A2742A6845E4380 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 8100 IP address blocks: 209.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e4:a6:3a:27:42:a6:84:5e:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=1519c763-2361-4dab-a0d4-3fc130c61b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2b:e8:f4:57:26:48:61:36:fe:c0:ec:f2:76: 2c:d3:f7:c2:d2:33:cd:d4:e2:b4:58:a9:a0:95:61: 39:12:2b:72:a2:d9:2f:ca:1d:8c:c9:06:e6:f2:34: 38:a4:83:e8:0e:4a:e1:42:c3:b3:0c:28:41:46:9f: f0:62:c1:b3:1c:a2:f0:7e:a2:0b:3e:c4:0e:63:58: ea:d1:46:db:81:5e:61:45:4e:fd:7f:1e:43:91:dc: b4:54:c7:21:ec:b4:40:5d:52:84:18:a3:a6:c1:4d: 84:b4:36:56:0f:5e:e0:50:4b:40:c4:69:7d:e9:e6: 49:59:4b:08:4f:91:12:7e:2c:6f:c4:7b:fc:8e:cf: 7e:9d:37:6a:42:e7:c2:84:6a:8b:05:76:b4:e9:e4: 0a:8c:aa:cf:76:50:af:ef:74:f2:5f:da:73:e4:35: 12:65:ad:36:07:80:69:dd:43:3b:1d:1a:be:e9:1a: 47:4c:58:2e:ba:b0:71:a6:98:d4:e1:1a:da:a5:b0: cc:25:c5:8e:e9:74:9c:bd:d2:2a:f9:46:72:5a:f8: 7d:1c:ae:9e:a8:b5:2e:ce:e4:43:be:7a:6a:6b:9e: f2:f6:ed:1a:8f:f2:27:f2:0a:34:18:71:34:18:af: 2b:b7:5e:a4:f2:fa:26:a8:21:07:b6:6a:bb:fd:35: 6b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:19:D3:28:95:6E:40:37:6E:78:7A:62:F9:75:64:24:CC:F0:57:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1e:28:15:32:b8:d0:c7:76:ca:40:12:cd:04:80:70:07:6f: 01:46:47:fe:8a:fc:fe:30:c1:88:7f:32:05:12:79:9a:4a:50: 5b:f2:af:b4:97:bc:21:0d:32:9a:d6:37:24:b9:c6:38:98:bb: 2a:c3:2a:30:ce:e3:61:ce:c4:5f:2a:a1:5c:11:ea:3a:bf:db: 97:44:cb:26:70:a3:b9:26:56:2a:3b:46:6d:8f:27:c8:23:6d: 05:a7:a6:9d:a1:e2:ed:6b:02:a7:22:39:8b:f5:2a:c6:86:f6: e6:d9:43:81:55:d4:ee:09:a9:24:99:72:b8:28:bf:64:46:66: a0:a0:98:fa:5b:65:9c:83:18:1c:13:20:84:b2:16:97:d3:ff: d8:70:b4:ed:8d:d5:07:6a:2e:61:a2:88:a4:71:8a:d1:46:1d: 87:71:8d:5e:f2:74:25:2a:ba:3a:0c:8c:2d:5f:f8:ff:57:fe: e8:16:60:4c:56:a6:f3:0f:d0:a6:c5:13:cc:96:2f:aa:08:26: 7e:46:92:0c:91:04:35:e0:87:fd:2e:3d:e7:6c:12:ab:1c:f7: 9b:9f:97:7c:2b:d4:36:3b:d6:09:13:30:b4:07:8a:ba:65:59: 99:66:4f:a5:ed:0e:3b:74:e1:2a:21:01:ae:77:40:13:8b:3c: 1b:5f:e2:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0eSmOidCpoReQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MTUxOWM3NjMtMjM2MS00ZGFiLWEwZDQtM2ZjMTMwYzYxYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCvo9FcmSGE2/sDs8nYs0/fC0jPN1OK0WKmg lWE5Eityotkvyh2MyQbm8jQ4pIPoDkrhQsOzDChBRp/wYsGzHKLwfqILPsQOY1jq 0UbbgV5hRU79fx5Dkdy0VMch7LRAXVKEGKOmwU2EtDZWD17gUEtAxGl96eZJWUsI T5ESfixvxHv8js9+nTdqQufChGqLBXa06eQKjKrPdlCv73TyX9pz5DUSZa02B4Bp 3UM7HRq+6RpHTFguurBxppjU4RrapbDMJcWO6XScvdIq+UZyWvh9HK6eqLUuzuRD vnpqa57y9u0aj/In8go0GHE0GK8rt16k8vomqCEHtmq7/TVrpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIZ0yiVbkA3bnh6Yvl1ZCTM8FcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMDQ3NWI4MjgtYTI3Ny0z ZWViLThiMDUtMjJlMGYxZTY5ODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAceKBUyuNDHdspAEs0EgHAHbwFGR/6K/P4wwYh/MgUSeZpKUFvyr7SX vCENMprWNyS5xjiYuyrDKjDO42HOxF8qoVwR6jq/25dEyyZwo7kmVio7Rm2PJ8gj bQWnpp2h4u1rAqciOYv1KsaG9ubZQ4FV1O4JqSSZcrgov2RGZqCgmPpbZZyDGBwT IISyFpfT/9hwtO2N1QdqLmGiiKRxitFGHYdxjV7ydCUqujoMjC1f+P9X/ugWYExW pvMP0KbFE8yWL6oIJn5GkgyRBDXgh/0uPedsEqsc95ufl3wr1DY71gkTMLQHirpl WZlmT6XtDjt04SohAa53QBOLPBtf4tc= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:10 2025 by rpki-client