$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b52eeb7-fa30-3c05-ad07-51c08499bff2.roa File: 5b52eeb7-fa30-3c05-ad07-51c08499bff2.roa (raw, json) Hash identifier: ZXEspy7lYKiCjqT/tvUW+vgV7qOrt9oGpTUfEYUclGs= Subject key identifier: D3:4A:EA:39:8A:D7:A8:B1:75:07:89:5C:7C:4F:6D:CB:14:CA:F7:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6D2CB731A52D2EBC9561EE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b52eeb7-fa30-3c05-ad07-51c08499bff2.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 32787 IP address blocks: 209.200.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b7:31:a5:2d:2e:bc:95:61:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=e3ba4870-a8c4-405c-825b-fa4702a25b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b8:4c:e3:8a:2e:13:2d:aa:59:f2:95:8b:45: 6a:bd:55:48:f4:e4:6c:1d:08:87:34:e9:f0:57:f0: 81:5d:82:c8:38:63:fa:c9:06:3b:84:cc:82:c0:cd: 39:45:74:0a:2f:53:19:72:fc:7b:c7:ac:b1:4a:cd: 50:a7:c7:43:58:78:79:cf:ca:3f:e5:4b:aa:b0:34: ff:1f:83:74:af:b5:db:51:f7:c4:78:32:4c:4d:c4: 9f:35:0f:38:70:7d:78:6b:04:d9:82:75:7c:be:7a: 1a:1b:86:41:55:12:93:cb:99:e4:bf:8e:d4:64:47: 61:4e:18:e2:ee:89:11:26:82:07:eb:f3:5d:2a:2a: 76:39:e0:92:20:64:6e:dc:bb:ef:3e:ca:58:fa:19: 7c:dc:f6:0c:d4:58:dd:99:e9:1a:8e:b0:e7:5f:71: c7:6c:94:5b:a1:53:74:d7:f8:04:5e:96:76:c5:b8: c9:ca:a4:97:b0:7a:c2:e8:3a:05:c7:5d:3f:c0:44: f8:98:55:dd:37:3f:e4:f7:e4:7b:a1:77:60:68:b5: 18:a6:df:30:c3:69:05:1a:8f:36:44:79:54:19:fd: 01:3f:57:92:9e:b9:92:f7:d7:b4:da:f7:4d:c5:d4: 0b:1d:2e:1c:1b:b6:bb:a4:48:ff:ce:43:f6:dd:7e: 54:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4A:EA:39:8A:D7:A8:B1:75:07:89:5C:7C:4F:6D:CB:14:CA:F7:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b52eeb7-fa30-3c05-ad07-51c08499bff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f2:bf:10:6a:1d:6b:bf:0d:fb:2c:01:2c:cd:0e:3b:71:59: 8b:ff:87:2c:c6:1f:7a:63:b7:44:1f:70:0f:3e:47:ea:0d:16: 7a:9f:d1:87:94:94:48:4e:1f:2a:05:b9:91:f1:43:f6:e1:c2: c9:f1:d8:22:4c:73:d2:1b:91:94:73:f2:6c:9d:a7:c0:95:0e: 64:65:91:1a:26:ff:2e:0f:b1:09:29:3b:aa:a4:f4:af:61:0c: 3c:4a:83:64:a5:bf:12:84:82:08:9d:a3:17:a9:a0:d4:34:2d: 3e:5e:9f:8e:7f:ed:e9:a3:e7:4e:20:94:af:52:56:a5:dc:6a: 86:2b:0a:4e:54:c5:95:7f:3e:68:60:76:7b:5a:cd:0f:94:05: 10:94:71:2d:e1:3c:45:59:68:41:1c:1a:f2:9f:94:62:d4:23: 35:62:86:0c:62:e9:1e:94:e2:5c:9e:a3:f8:0a:63:82:69:b3: 07:94:41:6f:01:53:7d:c6:6e:e0:a5:f9:98:4f:59:16:65:c2: 6c:3c:6d:ab:88:35:e5:c7:54:96:c0:3f:d6:29:bb:67:9e:38: e1:fe:f5:fd:5c:df:82:97:1a:af:67:13:a9:b8:ae:2c:7f:1b: 2a:02:16:24:e0:e5:d9:9a:8d:87:47:db:78:b0:29:6c:e5:88: 0b:80:52:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLLcxpS0uvJVh7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTNiYTQ4NzAtYThjNC00MDVjLTgyNWItZmE0NzAyYTI1YjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbhM44ouEy2qWfKVi0VqvVVI9ORsHQiHNOnw V/CBXYLIOGP6yQY7hMyCwM05RXQKL1MZcvx7x6yxSs1Qp8dDWHh5z8o/5UuqsDT/ H4N0r7XbUffEeDJMTcSfNQ84cH14awTZgnV8vnoaG4ZBVRKTy5nkv47UZEdhThji 7okRJoIH6/NdKip2OeCSIGRu3LvvPspY+hl83PYM1FjdmekajrDnX3HHbJRboVN0 1/gEXpZ2xbjJyqSXsHrC6DoFx10/wET4mFXdNz/k9+R7oXdgaLUYpt8ww2kFGo82 RHlUGf0BP1eSnrmS99e02vdNxdQLHS4cG7a7pEj/zkP23X5UWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNK6jmK16ixdQeJXHxPbcsUyvcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWI1MmVlYjctZmEzMC0z YzA1LWFkMDctNTFjMDg0OTliZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnyvxBqHWu/DfssASzNDjtxWYv/hyzGH3pjt0QfcA8+R+oNFnqf0YeU lEhOHyoFuZHxQ/bhwsnx2CJMc9IbkZRz8mydp8CVDmRlkRom/y4PsQkpO6qk9K9h DDxKg2SlvxKEggidoxepoNQ0LT5en45/7emj504glK9SVqXcaoYrCk5UxZV/Pmhg dntazQ+UBRCUcS3hPEVZaEEcGvKflGLUIzVihgxi6R6U4lyeo/gKY4JpsweUQW8B U33GbuCl+ZhPWRZlwmw8bauINeXHVJbAP9Ypu2eeOOH+9f1c34KXGq9nE6m4rix/ GyoCFiTg5dmajYdH23iwKWzliAuAUiA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:42 2025 by rpki-client