$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/5e96c0cf-3077-3854-81df-de74836c1b82.roa File: 5e96c0cf-3077-3854-81df-de74836c1b82.roa (raw, json) Hash identifier: A2rg+EF9sgrZoq0xGi+HCWPfuZjerUoIq1Z9U8Dhn0A= Subject key identifier: BF:27:BD:3D:6A:FB:61:80:B8:47:60:94:9E:76:47:D3:89:51:5A:3D Certificate issuer: /CN=914c4a10-97c5-4f06-914d-13485f7f3e12 Certificate serial: 010D0C9F4328584AD50671ED2E2BDCEBF2312EC0 Authority key identifier: DB:B8:B2:F4:DF:9F:2E:9D:14:08:37:EE:78:0A:A2:6A:31:0A:96:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/5e96c0cf-3077-3854-81df-de74836c1b82.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 398032 IP address blocks: 209.151.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:71:ed:2e:2b:dc:eb:f2:31:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914c4a10-97c5-4f06-914d-13485f7f3e12 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=4d589bdf-ca5e-4de8-bba2-ddce76455138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:26:58:c2:6c:99:a0:1f:d0:0a:a0:be:d0: 61:54:47:e6:cf:7f:e1:60:3d:58:92:cb:45:ce:aa: f9:aa:19:a5:17:68:79:6c:db:0f:d3:24:52:bd:a8: e7:4c:9b:5b:a8:58:2b:03:3c:68:15:93:f2:44:5e: 6d:da:d1:f6:45:2a:19:73:31:44:5b:cf:71:2a:67: 3d:c0:32:a5:98:c9:a2:d9:92:0d:0f:e8:cb:bf:66: ab:9f:b2:c9:21:e3:41:37:24:91:d4:93:cf:08:1a: e3:19:dd:50:23:cc:83:2e:4e:19:f9:36:32:4e:a4: f3:39:b2:f0:c6:a7:a8:b4:68:81:06:9a:e0:90:8f: 4b:67:06:d9:ba:80:26:87:42:69:b3:d4:2b:eb:79: 3a:01:7d:69:c2:b3:4e:86:f3:fa:b1:f0:2b:a7:21: eb:4c:1f:df:90:51:78:e5:e1:d6:09:82:cb:22:a2: 3f:87:2b:be:de:3e:22:32:ef:19:d6:12:d4:25:f0: f9:13:30:ec:42:5f:05:55:8f:ce:2c:3e:84:c9:a6: 01:f3:06:05:02:51:b5:bb:c2:d7:39:58:7c:38:f4: 4c:61:73:cf:3c:77:24:f4:c8:75:6f:9d:a2:1a:0e: b8:59:13:3a:17:6c:bd:fa:e0:46:4c:5e:be:51:b2: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:27:BD:3D:6A:FB:61:80:B8:47:60:94:9E:76:47:D3:89:51:5A:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/5e96c0cf-3077-3854-81df-de74836c1b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.crl X509v3 Authority Key Identifier: keyid:DB:B8:B2:F4:DF:9F:2E:9D:14:08:37:EE:78:0A:A2:6A:31:0A:96:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer sbgp-ipAddrBlock: critical IPv4: 209.151.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:69:84:5b:62:b5:a2:57:0a:9f:b4:fd:7c:05:22:a2:73:ef: df:19:e5:37:a7:33:48:7d:0d:94:c0:a1:2d:df:37:71:24:47: f7:84:3f:79:a3:46:0e:0d:c0:97:f0:37:3a:c8:83:b6:35:6a: ce:c8:a1:0e:82:27:8c:24:a6:ad:de:b0:91:49:9e:c7:1a:98: 68:b7:14:6a:ca:82:45:e0:b9:a6:bb:54:81:9a:9f:1c:a2:c2: 5a:e2:7d:43:42:0c:e9:24:ba:50:10:45:a3:03:06:89:a6:f3: 7d:5b:9d:44:b4:78:77:19:2c:58:90:62:3d:d8:94:40:c3:db: 49:8a:83:f1:c1:fb:03:67:3b:14:0d:e8:24:37:0c:c4:47:4e: f1:17:a2:94:38:1d:d1:31:ad:f6:86:2d:ce:e3:9e:b2:1c:36: 92:95:06:db:89:b4:6d:75:83:f6:a7:fa:4d:6e:3d:ee:05:15: fc:59:08:66:54:68:84:1f:a8:f3:a3:83:fa:d8:cb:7e:81:28: d4:ea:35:dc:c6:2b:87:d0:36:ce:e5:95:b0:bd:e2:c4:44:b8: b2:14:87:de:5b:f9:74:c2:70:e3:67:0a:f6:94:c1:38:8a:86: ca:30:ea:53:51:0f:58:c6:d2:43:85:50:3e:ab:09:94:30:93: 48:86:8b:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBnHtLivc6/IxLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0YzRhMTAtOTdjNS00ZjA2LTkxNGQtMTM0ODVmN2Yz ZTEyMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk NGQ1ODliZGYtY2E1ZS00ZGU4LWJiYTItZGRjZTc2NDU1MTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgMmWMJsmaAf0AqgvtBhVEfmz3/hYD1YkstF zqr5qhmlF2h5bNsP0yRSvajnTJtbqFgrAzxoFZPyRF5t2tH2RSoZczFEW89xKmc9 wDKlmMmi2ZIND+jLv2arn7LJIeNBNySR1JPPCBrjGd1QI8yDLk4Z+TYyTqTzObLw xqeotGiBBprgkI9LZwbZuoAmh0Jps9Qr63k6AX1pwrNOhvP6sfArpyHrTB/fkFF4 5eHWCYLLIqI/hyu+3j4iMu8Z1hLUJfD5EzDsQl8FVY/OLD6EyaYB8wYFAlG1u8LX OVh8OPRMYXPPPHck9Mh1b52iGg64WRM6F2y9+uBGTF6+UbLlQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8nvT1q+2GAuEdglJ52R9OJUVo9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85MTRj NGExMC05N2M1LTRmMDYtOTE0ZC0xMzQ4NWY3ZjNlMTIvNWU5NmMwY2YtMzA3Ny0z ODU0LTgxZGYtZGU3NDgzNmMxYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTE0YzRhMTAtOTdjNS00ZjA2LTkx NGQtMTM0ODVmN2YzZTEyLzkxNGM0YTEwLTk3YzUtNGYwNi05MTRkLTEzNDg1Zjdm M2UxMi5jcmwwHwYDVR0jBBgwFoAU27iy9N+fLp0UCDfueAqiajEKloMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MTRjNGExMC05N2M1LTRmMDYtOTE0ZC0xMzQ4 NWY3ZjNlMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Zd/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpphFtitaJXCp+0/XwFIqJz798Z5TenM0h9DZTAoS3fN3EkR/eEP3mj Rg4NwJfwNzrIg7Y1as7IoQ6CJ4wkpq3esJFJnscamGi3FGrKgkXguaa7VIGanxyi wlrifUNCDOkkulAQRaMDBomm831bnUS0eHcZLFiQYj3YlEDD20mKg/HB+wNnOxQN 6CQ3DMRHTvEXopQ4HdExrfaGLc7jnrIcNpKVBtuJtG11g/an+k1uPe4FFfxZCGZU aIQfqPOjg/rYy36BKNTqNdzGK4fQNs7llbC94sREuLIUh95b+XTCcONnCvaUwTiK hsow6lNRD1jG0kOFUD6rCZQwk0iGi3w= -----END CERTIFICATE-----Generated at Sat Aug 23 16:58:25 2025 by rpki-client