$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f8e491a-a51d-32bf-b35a-268496e5be98.roa File: 0f8e491a-a51d-32bf-b35a-268496e5be98.roa (raw, json) Hash identifier: o4NQ8f+E1UInXQOhvxaMMY2vF+wX0q6vZ8zFMmkZyAE= Subject key identifier: A7:13:15:50:9F:BF:40:E1:E5:6F:51:99:1E:64:EA:72:DE:0A:D1:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E1C57DE22FE6C5713CADC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f8e491a-a51d-32bf-b35a-268496e5be98.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 32787 IP address blocks: 209.200.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c5:7d:e2:2f:e6:c5:71:3c:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=a86b691d-1a83-44f2-9052-fa7d4a2a3e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:45:03:e3:93:de:71:4c:d6:b7:1d:4b:f2:86: a1:f1:a9:bd:18:4a:68:0a:68:2c:ba:d1:0d:d2:1f: 43:05:22:e2:55:4e:c0:5e:ed:be:af:33:2f:02:8a: 12:9c:25:bd:7c:60:a7:ab:a2:98:e4:25:69:db:47: 28:fe:4b:a4:f0:62:64:7f:21:5e:5d:a5:ce:87:e8: 96:cc:95:a4:cb:60:38:5e:2d:cd:5c:6a:9b:49:ce: 1d:f4:12:15:28:7e:b4:88:f4:cd:4a:57:a4:be:21: 26:b6:c6:13:88:fa:c6:7f:a5:7f:20:32:9a:15:92: 6e:4a:7e:bd:cb:d3:43:ea:9f:65:6c:a1:5d:bb:78: e7:25:ec:31:39:98:71:78:5f:73:64:83:4f:6d:33: 35:bc:64:ac:ba:b4:24:c0:3f:f8:67:e7:39:19:bc: 68:01:d0:78:a7:1e:c9:fe:96:e7:e2:0f:4b:4a:b1: 66:80:d2:92:f8:cd:d1:9b:d6:52:69:13:95:d7:05: 30:73:f6:82:29:ba:e3:d4:16:24:03:8d:b5:78:81: c8:49:91:0d:3d:dc:0a:b1:e1:88:e8:c7:a5:2d:ad: 56:09:20:e7:9a:aa:79:e9:12:4b:02:9c:b9:76:81: 2a:75:8e:09:7d:35:88:51:d0:25:98:af:17:b4:01: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:13:15:50:9F:BF:40:E1:E5:6F:51:99:1E:64:EA:72:DE:0A:D1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f8e491a-a51d-32bf-b35a-268496e5be98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e3:64:2d:9b:a7:fe:83:16:2e:b7:57:4e:4a:1b:d8:05:b3: 2b:58:d7:a9:a5:09:2f:d8:ec:79:41:bd:1d:14:d9:5e:71:ae: 69:5d:c2:c6:80:56:d8:7f:4b:26:12:ff:40:76:3d:24:14:29: 14:43:27:46:0b:40:aa:b7:4d:cb:cf:f1:ca:35:62:a2:6d:c7: 88:60:b9:c6:8c:9e:bb:9d:49:2a:a3:40:37:a7:51:02:75:52: 3e:70:f1:83:6d:03:1d:56:3f:82:87:03:9a:c4:e5:56:84:b9: 93:45:3a:fe:be:65:89:7d:e0:80:34:1e:02:a5:39:3d:d4:e7: 74:cf:3e:0b:16:7f:bd:3f:b8:d7:cc:12:db:d1:75:f6:60:b5: 03:7c:a9:f8:55:81:15:62:71:fe:10:83:1e:84:b2:a1:c0:b2: 2e:8c:d4:b2:fe:56:57:18:a8:b1:33:08:48:65:75:d3:cf:38: df:c8:7a:14:c8:24:af:50:37:54:34:9b:24:e9:06:ed:46:60: db:45:07:c9:a2:bf:1f:46:d2:f3:83:a1:f6:5a:04:bd:bf:2f: 41:14:bc:53:d3:54:11:81:4f:55:8a:18:b9:b1:05:14:85:d8: 7d:b4:8d:64:d7:a4:b0:64:a7:06:68:02:ae:7b:e1:1f:1a:fa: 6f:70:13:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cV94i/mxXE8rcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTg2YjY5MWQtMWE4My00NGYyLTkwNTItZmE3ZDRhMmEzZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEUD45PecUzWtx1L8oah8am9GEpoCmgsutEN 0h9DBSLiVU7AXu2+rzMvAooSnCW9fGCnq6KY5CVp20co/kuk8GJkfyFeXaXOh+iW zJWky2A4Xi3NXGqbSc4d9BIVKH60iPTNSlekviEmtsYTiPrGf6V/IDKaFZJuSn69 y9ND6p9lbKFdu3jnJewxOZhxeF9zZINPbTM1vGSsurQkwD/4Z+c5GbxoAdB4px7J /pbn4g9LSrFmgNKS+M3Rm9ZSaROV1wUwc/aCKbrj1BYkA421eIHISZENPdwKseGI 6MelLa1WCSDnmqp56RJLApy5doEqdY4JfTWIUdAlmK8XtAGTPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcTFVCfv0Dh5W9RmR5k6nLeCtHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY4ZTQ5MWEtYTUxZC0z MmJmLWIzNWEtMjY4NDk2ZTViZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfjZC2bp/6DFi63V05KG9gFsytY16mlCS/Y7HlBvR0U2V5xrmldwsaA Vth/SyYS/0B2PSQUKRRDJ0YLQKq3TcvP8co1YqJtx4hgucaMnrudSSqjQDenUQJ1 Uj5w8YNtAx1WP4KHA5rE5VaEuZNFOv6+ZYl94IA0HgKlOT3U53TPPgsWf70/uNfM EtvRdfZgtQN8qfhVgRVicf4Qgx6EsqHAsi6M1LL+VlcYqLEzCEhlddPPON/IehTI JK9QN1Q0myTpBu1GYNtFB8mivx9G0vODofZaBL2/L0EUvFPTVBGBT1WKGLmxBRSF 2H20jWTXpLBkpwZoAq574R8a+m9wE4k= -----END CERTIFICATE-----Generated at Mon Oct 20 18:18:32 2025 by rpki-client