$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa File: afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa (raw, json) Hash identifier: fDfnaGshY8amV9b2dLMgDnMHH4poDYli6AXhhpNAK3A= Subject key identifier: 8A:02:DB:AA:A1:6E:BD:28:9A:F4:96:E5:5D:D7:80:B9:60:D6:5C:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E1C56A613ACC5D359B7880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 32787 IP address blocks: 209.200.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c5:6a:61:3a:cc:5d:35:9b:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=4671a3be-955d-4319-b874-6a5146ba1779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:0e:4a:ea:53:36:77:5a:31:f4:e1:cb:9b: 8f:07:af:a9:ab:0c:6c:b0:ef:bc:3a:a0:71:11:8b: 79:a8:c7:cf:b2:ff:b6:3f:de:fa:51:e7:81:47:57: a2:15:2c:49:ff:e4:9f:20:ea:a3:c8:d0:45:f7:03: 1c:7d:8d:30:82:b6:da:a9:86:b2:88:ff:a8:5a:ac: 06:b3:13:96:de:ba:a2:44:ae:6d:8b:02:1c:28:aa: 73:8f:29:d2:24:6a:97:8e:7d:bf:c2:bf:5a:87:4b: f3:dc:24:3d:e2:85:5e:fc:08:33:9b:de:cb:fa:bb: 23:aa:02:d5:ec:39:ee:25:ec:ee:00:c3:dd:26:b7: a1:9a:c3:9d:57:fe:b1:e7:da:f8:72:26:b2:c3:75: 73:ac:02:43:fd:a5:72:b7:88:df:ec:a1:1e:da:23: ac:41:49:49:7e:82:19:5c:43:28:f1:fb:2f:71:10: a4:6e:24:45:c4:ef:3a:02:0e:5a:b7:de:f3:1a:04: 90:fb:11:09:0f:20:0b:38:1d:d3:30:c9:ab:be:c1: 08:48:49:8b:18:df:72:db:80:5b:03:87:43:8d:21: d6:ae:a6:d0:20:14:e8:03:f7:eb:95:84:ac:a2:39: 10:e6:fb:ef:51:25:88:58:12:86:4c:d3:9b:02:64: 48:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:02:DB:AA:A1:6E:BD:28:9A:F4:96:E5:5D:D7:80:B9:60:D6:5C:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2b:46:c3:2c:ad:73:ca:3b:75:c0:4d:b1:36:91:93:03:1a: 30:e0:55:b2:37:d7:9f:24:90:ed:7c:98:0b:ab:93:dc:6e:54: ee:42:92:1a:3f:a2:72:bb:2d:b1:98:de:ca:7a:7a:2e:e2:f1: fc:82:de:3a:4c:75:1c:be:76:ba:24:4d:1a:a2:50:2c:b2:56: e5:90:e8:50:a6:24:dc:00:16:f9:06:a8:36:7c:c3:a6:38:67: 47:bc:f4:31:68:13:a1:a4:7f:e7:61:26:67:0a:54:47:60:f3: 3a:25:6c:ca:a8:f8:06:d1:34:c5:05:1e:55:36:49:e5:47:da: e9:fc:80:b1:77:ec:c6:74:e4:45:56:e7:cb:36:be:68:e9:a3: dd:ca:32:5a:2f:6e:72:68:27:d1:2c:fd:f8:da:e1:5f:6b:32: 98:46:9c:8c:b1:96:8e:03:f4:1b:f8:20:d6:d2:30:d2:f7:03: a8:c9:8d:f7:ed:03:e5:4f:9a:8a:fc:7a:c9:a2:c5:69:ec:1d: 7b:bb:ac:ae:72:5d:ee:0d:45:57:5d:91:1b:3a:e6:76:6c:ff: dc:65:5f:f5:22:91:b4:8b:2e:ea:73:74:11:48:86:ad:b2:a9: 2d:27:42:b7:fe:4a:99:f2:04:d5:95:49:9c:af:cb:54:f3:a4: 46:22:2a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cVqYTrMXTWbeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NDY3MWEzYmUtOTU1ZC00MzE5LWI4NzQtNmE1MTQ2YmExNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBgOSupTNndaMfThy5uPB6+pqwxssO+8OqBx EYt5qMfPsv+2P976UeeBR1eiFSxJ/+SfIOqjyNBF9wMcfY0wgrbaqYayiP+oWqwG sxOW3rqiRK5tiwIcKKpzjynSJGqXjn2/wr9ah0vz3CQ94oVe/Agzm97L+rsjqgLV 7DnuJezuAMPdJrehmsOdV/6x59r4ciayw3VzrAJD/aVyt4jf7KEe2iOsQUlJfoIZ XEMo8fsvcRCkbiRFxO86Ag5at97zGgSQ+xEJDyALOB3TMMmrvsEISEmLGN9y24Bb A4dDjSHWrqbQIBToA/frlYSsojkQ5vvvUSWIWBKGTNObAmRIZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoC26qhbr0omvSW5V3XgLlg1lyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZkYWVlN2MtM2Y0Zi0z MWY2LWEyYzctYzliNmIwYmIzODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0rRsMsrXPKO3XATbE2kZMDGjDgVbI3158kkO18mAurk9xuVO5Ckho/ onK7LbGY3sp6ei7i8fyC3jpMdRy+drokTRqiUCyyVuWQ6FCmJNwAFvkGqDZ8w6Y4 Z0e89DFoE6Gkf+dhJmcKVEdg8zolbMqo+AbRNMUFHlU2SeVH2un8gLF37MZ05EVW 58s2vmjpo93KMlovbnJoJ9Es/fja4V9rMphGnIyxlo4D9Bv4INbSMNL3A6jJjfft A+VPmor8esmixWnsHXu7rK5yXe4NRVddkRs65nZs/9xlX/UikbSLLupzdBFIhq2y qS0nQrf+SpnyBNWVSZyvy1TzpEYiKqs= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:38 2025 by rpki-client