$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65910edb-80cd-3071-9139-e49075a1b6ba.roa File: 65910edb-80cd-3071-9139-e49075a1b6ba.roa (raw, json) Hash identifier: M37THOv8TKQzTBwMtwDXBi63mEeoTafcJ3C41Nc+A7Y= Subject key identifier: 7A:AC:9D:2D:D8:33:F8:36:E8:4F:46:7E:1A:24:A2:D2:72:AE:21:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E1C52FDA0990093EA32900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65910edb-80cd-3071-9139-e49075a1b6ba.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 32787 IP address blocks: 209.200.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c5:2f:da:09:90:09:3e:a3:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=0b4a0f09-82d9-4f91-b220-2f64d146e41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:09:9d:3a:0c:af:1d:03:b4:df:42:19:7b:eb: 38:1f:03:dd:2e:49:8b:9e:1f:6a:91:b7:b6:07:a4: f6:a0:04:f9:21:38:4d:ea:a7:3f:1a:4d:a9:b8:67: a6:47:c7:a3:3e:30:57:e8:8e:51:c4:09:56:ea:28: a3:fc:b5:75:e8:db:81:58:a3:48:94:79:1a:20:5d: 27:8f:d0:73:7b:58:5c:9f:e6:12:cd:28:45:52:1d: 77:ff:51:f0:b1:21:d0:dc:21:99:3b:3e:0b:ce:82: 60:e6:02:8f:40:67:0a:61:58:33:3f:fb:36:05:8f: 23:4b:ae:7c:5e:d1:76:2c:f1:fb:e9:ed:34:af:94: 78:eb:d0:99:70:7a:ea:69:c5:62:85:e4:a0:a7:70: da:37:93:dd:a5:01:98:56:6a:5b:c7:2d:04:40:23: e9:e1:29:0c:4a:01:cf:84:d4:71:3c:3d:34:b7:16: 30:ea:2c:31:49:0f:dd:a8:4a:39:89:e2:53:e2:71: 2b:ef:ab:81:3b:54:b0:9b:40:fd:48:d7:e1:85:a7: aa:2e:22:b0:44:57:df:16:e6:31:41:77:45:fa:ed: dd:e0:be:81:06:a9:bd:49:b2:c2:be:d7:6c:8d:02: e4:5b:85:4c:6f:d6:de:af:5f:d5:7a:2f:a0:04:37: 11:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AC:9D:2D:D8:33:F8:36:E8:4F:46:7E:1A:24:A2:D2:72:AE:21:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65910edb-80cd-3071-9139-e49075a1b6ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b7:1f:31:62:9c:5a:e1:30:2d:fa:7c:2f:a0:40:47:1a:86: 1f:1c:6d:af:5b:3f:fd:bc:28:37:44:93:07:32:70:05:94:30: ba:47:2f:55:e0:81:16:4c:74:ef:89:80:71:55:9d:ae:69:50: 43:63:e9:7f:07:b4:87:3d:0f:55:fe:48:8f:dc:e9:01:50:e4: 90:f7:8e:7f:67:1c:47:0a:ca:9e:06:9c:03:ac:9e:69:cd:88: 32:b1:0b:a0:7b:33:94:13:a7:4b:26:18:36:9c:50:65:44:f4: ef:a7:aa:90:a5:d3:63:0e:af:62:c7:ae:08:3e:8c:f2:73:4a: 4d:a4:5d:39:57:3b:7e:69:fc:74:5f:c8:c5:ec:83:2e:99:5c: 0a:27:8b:03:85:16:17:43:20:ee:75:6f:6f:fc:c2:e3:2e:4f: ea:83:62:2e:e3:c2:98:e8:23:d0:c5:ea:73:da:59:7b:59:26: 45:24:9b:93:dd:66:7e:98:35:0c:97:78:58:f0:d7:87:22:64: ff:a1:9f:11:e2:6c:3d:e5:b0:7a:b3:3e:1e:27:06:ca:e9:6d: c5:cc:97:1f:d9:f9:5e:88:b2:03:cc:ee:67:4c:45:eb:b9:10: 22:7f:da:72:02:38:4a:14:05:43:65:38:96:3f:fb:4b:ed:a5: 76:67:25:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cUv2gmQCT6jKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MGI0YTBmMDktODJkOS00ZjkxLWIyMjAtMmY2NGQxNDZlNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgmdOgyvHQO030IZe+s4HwPdLkmLnh9qkbe2 B6T2oAT5IThN6qc/Gk2puGemR8ejPjBX6I5RxAlW6iij/LV16NuBWKNIlHkaIF0n j9Bze1hcn+YSzShFUh13/1HwsSHQ3CGZOz4LzoJg5gKPQGcKYVgzP/s2BY8jS658 XtF2LPH76e00r5R469CZcHrqacViheSgp3DaN5PdpQGYVmpbxy0EQCPp4SkMSgHP hNRxPD00txYw6iwxSQ/dqEo5ieJT4nEr76uBO1Swm0D9SNfhhaeqLiKwRFffFuYx QXdF+u3d4L6BBqm9SbLCvtdsjQLkW4VMb9ber1/Vei+gBDcRuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqsnS3YM/g26E9GfhokotJyriFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjU5MTBlZGItODBjZC0z MDcxLTkxMzktZTQ5MDc1YTFiNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm3HzFinFrhMC36fC+gQEcahh8cba9bP/28KDdEkwcycAWUMLpHL1Xg gRZMdO+JgHFVna5pUENj6X8HtIc9D1X+SI/c6QFQ5JD3jn9nHEcKyp4GnAOsnmnN iDKxC6B7M5QTp0smGDacUGVE9O+nqpCl02MOr2LHrgg+jPJzSk2kXTlXO35p/HRf yMXsgy6ZXAoniwOFFhdDIO51b2/8wuMuT+qDYi7jwpjoI9DF6nPaWXtZJkUkm5Pd Zn6YNQyXeFjw14ciZP+hnxHibD3lsHqzPh4nBsrpbcXMlx/Z+V6IsgPM7mdMReu5 ECJ/2nICOEoUBUNlOJY/+0vtpXZnJZo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:28 2025 by rpki-client