$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd58c7a5-8ca5-3833-b9b8-ff1bc49b00d6.roa File: bd58c7a5-8ca5-3833-b9b8-ff1bc49b00d6.roa (raw, json) Hash identifier: 6n7imbzxsXLuCGnNPstT5ke5RLAcaAdQxoNyGeGEnOA= Subject key identifier: E8:78:6D:69:A4:5C:24:02:28:6D:44:07:2A:2E:C0:36:1C:C3:A0:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4D11DBFA8D71ABB98631E7C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd58c7a5-8ca5-3833-b9b8-ff1bc49b00d6.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 32787 IP address blocks: 209.200.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:db:fa:8d:71:ab:b9:86:31:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=9de5b7b6-42e9-4342-8c92-39090f8be6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:09:c8:18:b0:05:cc:27:f4:b3:a4:18:f8: 2f:d4:3f:c1:7f:14:31:6a:9c:a0:45:5c:dc:11:58: 65:dc:64:23:91:97:0e:3c:62:b7:25:87:8f:07:f0: 8c:ff:2c:f9:3e:2e:d7:7e:9c:68:73:76:c8:12:54: 0f:21:2c:e3:0d:17:a6:de:81:aa:9e:71:1e:84:62: 55:ed:21:39:bc:6a:29:37:8f:3c:49:00:ee:8a:5d: b6:21:4d:75:ef:e2:e1:0a:0c:d7:f2:0b:9f:13:af: dc:a0:d2:96:18:2a:3c:a1:60:2f:ca:bd:97:20:c5: 7a:e4:8f:b9:2e:08:4e:bc:ef:cd:2b:b4:a5:a8:e6: a6:60:a0:8d:64:d3:23:27:3d:32:37:65:fe:b6:08: 5e:30:0c:c8:10:11:f9:75:ef:97:ff:b7:15:88:07: db:95:88:f7:63:d2:32:ff:57:2e:67:d8:db:53:3a: 26:95:24:35:65:84:ac:46:c4:91:8a:ea:21:c2:ea: d2:af:42:81:ab:13:61:04:ae:8c:0b:d5:9d:18:39: 8f:16:25:ac:4a:50:04:37:a3:c0:1b:3b:4b:d7:b8: 00:b5:f1:c1:89:57:ff:7d:21:00:31:d0:4f:be:bd: 4e:a1:22:30:03:71:3d:d7:f8:a7:34:2c:4c:ff:61: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:78:6D:69:A4:5C:24:02:28:6D:44:07:2A:2E:C0:36:1C:C3:A0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd58c7a5-8ca5-3833-b9b8-ff1bc49b00d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e8:f5:e4:53:25:be:13:65:2c:9a:96:e2:5c:4d:ab:c2:1e: 82:aa:29:69:e9:7a:70:a8:1c:8e:71:9d:8d:6f:f5:1a:16:0d: b0:12:1a:34:14:1b:ff:47:cd:7a:b8:0b:02:f5:ba:d5:20:63: 6e:dc:d6:c7:72:8f:6a:38:ff:58:68:b1:29:49:1d:29:7b:8e: b0:59:db:d5:76:a4:f0:fd:4d:d5:fb:cc:1f:5e:03:7d:42:c2: 62:e8:96:fa:e4:ee:85:eb:7e:46:17:1c:9a:5f:cf:4c:3e:1d: 50:9f:43:52:fd:4f:f0:da:61:fb:84:9a:b9:ac:29:7a:2c:58: f3:06:6c:27:00:60:0e:b9:cc:cd:67:ff:8b:2e:6a:7d:73:e2: d5:ec:dd:49:33:5b:19:ce:8a:90:c5:e6:5c:47:86:24:5f:36: 7b:fe:dd:5d:c6:f5:23:86:cd:a4:9a:57:ce:25:2b:bb:77:c9: 79:53:fd:52:a3:8f:72:44:da:9c:3f:61:74:99:a9:34:37:c2: 65:57:7f:83:d8:f0:3f:e5:f0:26:17:58:51:ee:9a:6a:82:bc: 1f:6c:90:b2:f7:0c:c3:3d:25:2e:f4:54:d3:a5:94:71:47:a8: d8:bc:23:99:ef:d2:80:8c:d5:5c:cb:11:d4:93:ce:b4:45:96: 9d:6e:f5:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdv6jXGruYYx58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk OWRlNWI3YjYtNDJlOS00MzQyLThjOTItMzkwOTBmOGJlNmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWYJyBiwBcwn9LOkGPgv1D/BfxQxapygRVzc EVhl3GQjkZcOPGK3JYePB/CM/yz5Pi7Xfpxoc3bIElQPISzjDRem3oGqnnEehGJV 7SE5vGopN488SQDuil22IU117+LhCgzX8gufE6/coNKWGCo8oWAvyr2XIMV65I+5 LghOvO/NK7SlqOamYKCNZNMjJz0yN2X+tgheMAzIEBH5de+X/7cViAfblYj3Y9Iy /1cuZ9jbUzomlSQ1ZYSsRsSRiuohwurSr0KBqxNhBK6MC9WdGDmPFiWsSlAEN6PA GztL17gAtfHBiVf/fSEAMdBPvr1OoSIwA3E91/inNCxM/2HcvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOh4bWmkXCQCKG1EByouwDYcw6BfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmQ1OGM3YTUtOGNhNS0z ODMzLWI5YjgtZmYxYmM0OWIwMGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0citMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILo9eRTJb4TZSyaluJcTavCHoKqKWnpenCoHI5xnY1v9RoWDbASGjQU G/9HzXq4CwL1utUgY27c1sdyj2o4/1hosSlJHSl7jrBZ29V2pPD9TdX7zB9eA31C wmLolvrk7oXrfkYXHJpfz0w+HVCfQ1L9T/DaYfuEmrmsKXosWPMGbCcAYA65zM1n /4suan1z4tXs3UkzWxnOipDF5lxHhiRfNnv+3V3G9SOGzaSaV84lK7t3yXlT/VKj j3JE2pw/YXSZqTQ3wmVXf4PY8D/l8CYXWFHummqCvB9skLL3DMM9JS70VNOllHFH qNi8I5nv0oCM1VzLEdSTzrRFlp1u9as= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:36 2025 by rpki-client