$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5b48c8d-733c-3543-97f2-a1ef88d0bc3d.roa File: d5b48c8d-733c-3543-97f2-a1ef88d0bc3d.roa (raw, json) Hash identifier: NA30JRdoi7cfdMgexzEsKpoUWmwH39tbNOHKd2AxIhk= Subject key identifier: 0E:83:00:BB:19:B5:79:5A:55:01:E0:7C:16:14:CB:91:22:4C:BA:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A24D5CFD70D97E5B5A591BB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5b48c8d-733c-3543-97f2-a1ef88d0bc3d.roa Signing time: Tue 10 Jun 2025 10:20:40 +0000 ROA not before: Tue 10 Jun 2025 10:20:40 +0000 ROA not after: Mon 08 Sep 2025 10:20:40 +0000 asID: 213120 IP address blocks: 209.200.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:24:d5:cf:d7:0d:97:e5:b5:a5:91:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 10 10:20:40 2025 GMT Not After : Sep 8 10:20:40 2025 GMT Subject: CN=3ba25719-8750-4cce-a63f-64e960a2ccbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9e:d2:66:53:1e:d3:f4:8c:b3:cc:34:25:ae: f7:16:8e:20:41:1e:0d:b0:18:26:bb:5b:2d:ec:9e: c7:3e:1d:34:b8:45:df:6a:ed:34:85:16:7e:56:40: 47:3f:cd:82:7e:bb:4f:08:08:87:ea:50:16:f4:e1: a1:e2:a2:7a:c8:36:39:86:b0:2e:b9:5e:b5:48:30: c5:35:d9:cf:e3:9f:df:4c:88:02:c0:e7:da:2f:d4: bf:b8:75:5e:ed:0f:79:13:9c:47:84:c7:4c:8d:c2: 82:9f:f2:b5:02:42:08:36:a4:87:47:65:c2:ae:e1: 00:b5:ce:e1:73:13:17:aa:87:04:85:ab:46:c3:a8: 8f:6b:9d:a4:f3:d5:ae:d3:31:c8:34:69:ea:8a:b8: bc:10:69:9d:90:20:cc:8a:76:49:cb:ac:66:ac:ab: f2:f7:53:95:aa:11:1a:01:f7:5e:fb:38:83:11:a7: c4:14:d4:bb:51:ed:f7:cf:38:a5:3d:bc:43:2b:24: 50:17:8f:4d:89:75:fd:3c:4f:aa:b1:1b:19:03:70: dc:2c:4e:82:8f:bc:3a:98:dc:4e:10:50:46:4c:8f: ab:ac:38:f7:d9:8b:18:cc:cc:0e:67:e6:05:ef:c7: 0a:eb:1c:17:57:aa:12:6f:43:5d:bf:ad:14:7d:16: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:83:00:BB:19:B5:79:5A:55:01:E0:7C:16:14:CB:91:22:4C:BA:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5b48c8d-733c-3543-97f2-a1ef88d0bc3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:65:ea:19:0a:69:f1:97:eb:64:4d:c1:b9:f8:2c:8f:cd:cc: 71:b5:86:a3:5c:6b:e4:f2:38:42:cf:e2:86:69:10:bc:9c:1b: fe:3f:5e:96:a1:90:72:66:a5:db:19:1d:06:37:de:31:ce:82: 55:b5:52:e4:63:ba:6c:f7:80:90:60:ed:36:13:e4:51:ca:e3: d9:1b:e8:91:4e:43:86:35:9f:b3:78:44:b9:00:76:85:82:e3: 2f:34:8e:8d:ba:cf:24:ba:70:64:41:f2:b7:37:ee:8c:6f:b1: 48:35:d9:75:ea:3f:dd:05:91:f0:93:76:51:53:03:23:d7:dd: 6f:67:cb:2d:61:93:55:2b:20:fe:99:3f:2d:93:dc:2c:57:3d: db:62:a4:a9:d4:b2:59:4d:9c:16:b7:b5:5a:70:0e:f2:0b:18: 12:8d:38:c7:70:8e:e3:eb:1f:3a:65:f1:5f:05:25:bf:f1:71: 37:cc:93:25:3a:a6:b7:79:81:5c:a2:1d:5e:40:a0:ea:70:bc: 31:be:e9:bb:93:6c:dc:15:e0:7c:1f:48:a2:b9:e4:2e:92:40: 36:78:db:9f:b0:6b:28:c8:cd:66:6c:ea:47:90:90:ac:07:0a: c8:84:51:0f:63:31:2e:6b:42:56:4d:1d:9b:38:28:58:62:8e: e9:0d:0a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEok1c/XDZfltaWRu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMDEwMjA0MFoXDTI1MDkwODEwMjA0MFowLzEtMCsGA1UEAxMk M2JhMjU3MTktODc1MC00Y2NlLWE2M2YtNjRlOTYwYTJjY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg57SZlMe0/SMs8w0Ja73Fo4gQR4NsBgmu1st 7J7HPh00uEXfau00hRZ+VkBHP82CfrtPCAiH6lAW9OGh4qJ6yDY5hrAuuV61SDDF NdnP45/fTIgCwOfaL9S/uHVe7Q95E5xHhMdMjcKCn/K1AkIINqSHR2XCruEAtc7h cxMXqocEhatGw6iPa52k89Wu0zHINGnqiri8EGmdkCDMinZJy6xmrKvy91OVqhEa Afde+ziDEafEFNS7Ue33zzilPbxDKyRQF49NiXX9PE+qsRsZA3DcLE6Cj7w6mNxO EFBGTI+rrDj32YsYzMwOZ+YF78cK6xwXV6oSb0Ndv60UfRaXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6DALsZtXlaVQHgfBYUy5EiTLofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDViNDhjOGQtNzMzYy0z NTQzLTk3ZjItYTFlZjg4ZDBiYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJl6hkKafGX62RNwbn4LI/NzHG1hqNca+TyOELP4oZpELycG/4/Xpah kHJmpdsZHQY33jHOglW1UuRjumz3gJBg7TYT5FHK49kb6JFOQ4Y1n7N4RLkAdoWC 4y80jo26zyS6cGRB8rc37oxvsUg12XXqP90FkfCTdlFTAyPX3W9nyy1hk1UrIP6Z Py2T3CxXPdtipKnUsllNnBa3tVpwDvILGBKNOMdwjuPrHzpl8V8FJb/xcTfMkyU6 prd5gVyiHV5AoOpwvDG+6buTbNwV4HwfSKK55C6SQDZ425+wayjIzWZs6keQkKwH CsiEUQ9jMS5rQlZNHZs4KFhijukNCnk= -----END CERTIFICATE-----Generated at Sun Jun 29 18:55:44 2025 by rpki-client