$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa File: 78b046ad-708c-347f-a46d-fd7dd43f4f00.roa (raw, json) Hash identifier: +J7QHmiSL6ESZ2me8YHtjHLS48FBUwp2rtFMuJC8KMo= Subject key identifier: B8:1D:F3:9E:59:12:F9:29:0A:C1:4D:5E:F6:82:6C:31:5E:00:A4:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E1C509E2AD53C128401580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 32787 IP address blocks: 209.200.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c5:09:e2:ad:53:c1:28:40:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=230690b2-4c08-4562-96e5-956a037e309b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7d:86:1a:0c:f0:22:73:41:98:fa:80:84:73: f0:7e:57:35:c3:17:49:ea:8a:89:0c:9b:9d:09:02: 02:29:29:9c:e9:cd:91:a2:93:af:70:ca:95:4c:b5: ef:9c:13:fa:49:2a:72:21:ff:79:02:39:ca:f6:d5: 0f:15:81:12:8f:51:a8:b8:2d:34:0c:03:7d:ce:be: ac:a6:01:ad:91:e2:6e:fa:0e:51:79:9f:7c:bb:4b: 51:ab:33:33:ca:c0:94:02:ed:22:31:fe:3f:5f:6a: a1:81:e0:9c:43:a2:47:4f:54:fc:03:80:b4:86:3a: 18:c2:19:6a:9d:ac:c0:2f:ba:a2:0a:f5:cf:1e:2e: e9:d6:de:8c:4c:e7:16:89:8d:fe:bb:a1:50:06:aa: 5b:39:88:5f:2a:47:17:ba:56:51:e9:a5:68:8d:94: b7:6b:0e:2e:a0:b2:58:ff:48:54:44:c8:9f:5e:b8: e2:7f:ec:1b:61:b2:ef:8b:74:f2:b8:36:ea:51:ad: 8e:39:26:f6:b3:61:f7:87:42:9c:12:23:2a:76:55: 1c:02:39:ce:da:3c:fe:2e:5b:0b:78:d8:d0:0f:82: cd:6e:f0:b0:c4:aa:c1:17:87:20:90:d1:86:f8:50: e8:7e:90:52:fb:da:d5:34:b1:00:d1:a0:1b:b6:92: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1D:F3:9E:59:12:F9:29:0A:C1:4D:5E:F6:82:6C:31:5E:00:A4:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:cf:4b:2a:d6:18:24:f0:68:b5:b8:cb:57:ec:0f:e6:20:74: 52:41:8e:06:b9:72:3c:39:b1:da:02:4c:70:19:d5:4f:74:38: 5e:b3:78:25:b2:2f:59:d9:2b:19:aa:23:d9:39:d9:e8:0b:2d: 50:14:01:09:c6:c5:b5:48:00:3c:a0:1e:00:8f:2f:18:c8:a6: 6b:b7:a6:12:a9:c8:e7:72:34:d0:f4:d4:e1:87:7b:b1:ef:de: b3:d6:8d:c5:70:10:58:8b:98:c7:ee:bc:37:3d:84:44:ae:3e: 05:d2:f6:0c:7a:bf:8a:e8:4f:6a:51:77:f9:b5:d6:be:bd:90: 44:3f:13:6e:ef:46:a3:4c:f3:0d:da:3f:57:6d:df:1a:b2:75: 21:af:e4:8b:56:36:b2:f3:d9:53:17:f8:14:01:5a:cc:55:1c: 8e:ea:69:22:1f:1a:a5:29:63:f4:e8:49:aa:47:bc:4d:4d:a5: 3e:ba:4f:aa:bd:49:19:26:c6:6c:4d:d3:6f:c0:69:2b:35:dc: a4:2c:3b:81:fd:72:80:9b:57:1e:82:cb:0e:e0:13:6a:02:4c: 6c:88:0e:e1:ce:b1:7e:a0:24:9e:4d:e6:36:e8:d4:d4:0c:0f: c5:ce:67:0d:3e:91:64:d4:86:ef:7a:20:94:35:b6:63:18:31: 28:6b:2a:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cUJ4q1TwShAFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjMwNjkwYjItNGMwOC00NTYyLTk2ZTUtOTU2YTAzN2UzMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX2GGgzwInNBmPqAhHPwflc1wxdJ6oqJDJud CQICKSmc6c2RopOvcMqVTLXvnBP6SSpyIf95AjnK9tUPFYESj1GouC00DAN9zr6s pgGtkeJu+g5ReZ98u0tRqzMzysCUAu0iMf4/X2qhgeCcQ6JHT1T8A4C0hjoYwhlq nazAL7qiCvXPHi7p1t6MTOcWiY3+u6FQBqpbOYhfKkcXulZR6aVojZS3aw4uoLJY /0hURMifXrjif+wbYbLvi3TyuDbqUa2OOSb2s2H3h0KcEiMqdlUcAjnO2jz+LlsL eNjQD4LNbvCwxKrBF4cgkNGG+FDofpBS+9rVNLEA0aAbtpKwzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgd855ZEvkpCsFNXvaCbDFeAKSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzhiMDQ2YWQtNzA4Yy0z NDdmLWE0NmQtZmQ3ZGQ0M2Y0ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7PSyrWGCTwaLW4y1fsD+YgdFJBjga5cjw5sdoCTHAZ1U90OF6zeCWy L1nZKxmqI9k52egLLVAUAQnGxbVIADygHgCPLxjIpmu3phKpyOdyNND01OGHe7Hv 3rPWjcVwEFiLmMfuvDc9hESuPgXS9gx6v4roT2pRd/m11r69kEQ/E27vRqNM8w3a P1dt3xqydSGv5ItWNrLz2VMX+BQBWsxVHI7qaSIfGqUpY/ToSapHvE1NpT66T6q9 SRkmxmxN02/AaSs13KQsO4H9coCbVx6Cyw7gE2oCTGyIDuHOsX6gJJ5N5jbo1NQM D8XOZw0+kWTUhu96IJQ1tmMYMShrKto= -----END CERTIFICATE-----Generated at Mon Oct 20 04:29:41 2025 by rpki-client