$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5fcf9df-f0f5-33be-ad06-a2f9d8b16253.roa File: c5fcf9df-f0f5-33be-ad06-a2f9d8b16253.roa (raw, json) Hash identifier: 1YxvBTZAFN8ARlQ4kJsUf4flDrrNwLJNhDpU971lQlU= Subject key identifier: 75:BE:3A:3A:58:F4:39:9A:A7:04:8B:B0:B4:A2:98:92:4C:73:6B:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E1C5927A5C965338BAAC03 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5fcf9df-f0f5-33be-ad06-a2f9d8b16253.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 32787 IP address blocks: 209.200.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c5:92:7a:5c:96:53:38:ba:ac:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=854812d3-09f1-4b2b-ba50-84f1a31b8d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:eb:66:7a:37:23:50:bd:86:a4:a3:fc:06:68: 2a:17:78:85:34:3b:8a:91:73:73:97:7f:8a:7e:56: 7f:da:96:f5:bd:2a:51:b0:37:57:41:d9:da:a7:68: b6:e3:ad:ef:7c:92:b5:95:fe:2f:0e:b0:05:f9:17: 44:8f:b7:66:a2:eb:8f:ef:94:2f:d9:e8:93:b8:68: 52:92:b4:cf:e3:d2:c9:c1:e9:44:09:7c:d6:76:68: 4e:9b:16:98:e9:fe:0d:ae:04:2a:62:07:f5:77:e6: f5:7b:8c:14:b1:96:eb:2a:82:fa:0d:19:4f:2c:ab: 61:34:fd:e4:c5:22:52:81:4f:d3:c2:c2:1d:00:b2: cc:6b:28:f6:3d:0b:0a:64:6d:d3:4d:f9:28:b2:17: 7a:62:e2:96:4c:e7:dd:73:fd:7b:1b:30:52:5f:2f: af:9a:36:e6:4a:12:ec:5d:f7:62:4b:bd:b4:d6:1f: 33:d2:77:21:c2:78:3b:97:af:6a:57:4c:52:8a:73: b0:08:0e:0d:01:2c:c6:c7:94:f9:1e:7f:2d:9a:e5: f3:46:14:02:37:02:79:7d:d7:ef:0f:dd:28:e1:d3: 18:04:a4:45:1d:d5:37:5c:53:bb:3c:84:44:6a:4f: c1:68:85:05:00:45:39:d9:13:90:a9:e3:ba:bc:87: d6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BE:3A:3A:58:F4:39:9A:A7:04:8B:B0:B4:A2:98:92:4C:73:6B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5fcf9df-f0f5-33be-ad06-a2f9d8b16253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1f:ba:f0:c6:a5:55:8e:45:f7:de:83:b5:2b:0a:cb:bf:0a: 3d:8f:86:cd:c0:d5:ed:90:55:a9:7e:c3:52:8e:45:29:06:bd: 3c:91:5e:06:9d:87:26:14:bb:f3:8b:24:71:49:5a:30:85:08: 98:dc:1c:20:24:7f:c7:0f:96:63:cb:97:65:25:cb:80:00:a9: 0a:dc:f2:2b:1c:dd:2b:14:92:9d:f0:bd:eb:40:28:2d:4f:15: e9:fb:55:0a:69:f7:a5:ec:d6:78:43:17:28:d2:e9:ac:55:84: cb:b4:cf:c5:48:3b:4c:cc:47:5e:27:09:f1:cc:64:94:54:32: 46:87:7d:b7:77:c4:bc:0b:0a:67:ee:b9:94:dc:e5:e0:07:13: d5:1e:94:78:01:e1:cd:49:91:ba:f3:ac:7c:51:d0:67:a3:d4: 23:89:e4:e0:99:04:94:1b:30:65:88:d4:71:8e:2d:78:df:10: 3f:ab:9a:01:a6:b7:7b:fb:0e:39:3b:53:50:01:04:ea:1a:47: 6e:62:50:f6:62:b8:dd:65:b2:c8:b9:d7:f2:8e:8c:96:2b:6b: 27:5b:fb:3e:d9:29:50:f5:83:5a:38:b4:cc:b8:50:35:9c:56: 8c:01:b6:3e:5a:ad:2a:c8:58:de:f1:96:c2:ee:6a:e9:a8:f1: 90:2f:ec:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cWSelyWUzi6rAMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ODU0ODEyZDMtMDlmMS00YjJiLWJhNTAtODRmMWEzMWI4ZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOtmejcjUL2GpKP8BmgqF3iFNDuKkXNzl3+K flZ/2pb1vSpRsDdXQdnap2i2463vfJK1lf4vDrAF+RdEj7dmouuP75Qv2eiTuGhS krTP49LJwelECXzWdmhOmxaY6f4NrgQqYgf1d+b1e4wUsZbrKoL6DRlPLKthNP3k xSJSgU/TwsIdALLMayj2PQsKZG3TTfkoshd6YuKWTOfdc/17GzBSXy+vmjbmShLs XfdiS7201h8z0nchwng7l69qV0xSinOwCA4NASzGx5T5Hn8tmuXzRhQCNwJ5fdfv D90o4dMYBKRFHdU3XFO7PIREak/BaIUFAEU52ROQqeO6vIfW7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW+OjpY9DmapwSLsLSimJJMc2uQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzVmY2Y5ZGYtZjBmNS0z M2JlLWFkMDYtYTJmOWQ4YjE2MjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYfuvDGpVWORffeg7UrCsu/Cj2Phs3A1e2QVal+w1KORSkGvTyRXgad hyYUu/OLJHFJWjCFCJjcHCAkf8cPlmPLl2Uly4AAqQrc8isc3SsUkp3wvetAKC1P Fen7VQpp96Xs1nhDFyjS6axVhMu0z8VIO0zMR14nCfHMZJRUMkaHfbd3xLwLCmfu uZTc5eAHE9UelHgB4c1JkbrzrHxR0Gej1COJ5OCZBJQbMGWI1HGOLXjfED+rmgGm t3v7Djk7U1ABBOoaR25iUPZiuN1lssi51/KOjJYraydb+z7ZKVD1g1o4tMy4UDWc VowBtj5arSrIWN7xlsLuaumo8ZAv7C8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:23:54 2025 by rpki-client