$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa File: ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa (raw, json) Hash identifier: DKM1yUwK8pKc2SFg73bcvVyxWZ16O9kA52q4VZeL11I= Subject key identifier: 37:B6:0C:9F:7B:23:5F:1B:F4:85:0F:F3:0A:B8:82:36:A9:8A:6B:68 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584B28C6E6922489064E9FBB29C0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 2153 IP address blocks: 209.129.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:e6:92:24:89:06:4e:9f:bb:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=4c528c2e-f68b-4bee-a9a6-beddf9c06bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d0:8a:51:bc:b9:87:59:d2:2e:8a:d3:d6:cc: 78:98:ea:e0:70:f7:d6:e0:08:d7:73:35:bc:66:4b: 36:81:d9:ea:12:dc:24:7a:d2:25:ff:a3:66:b9:86: dd:09:cd:37:37:12:07:a1:d4:0f:ff:85:03:17:2f: 4d:2e:4f:08:da:a3:a8:1a:78:cc:ec:90:f8:04:3d: c6:0c:33:72:98:65:73:54:f0:58:f5:0c:23:98:f3: 67:e0:bc:43:3e:0f:ee:10:ec:a8:c1:fa:c3:29:0c: 28:e4:b7:05:2e:9e:b9:77:b0:bf:36:a5:cf:a6:8f: 43:d8:b0:e1:ba:b2:c6:32:a8:a4:bb:cd:11:34:ef: d6:50:82:c6:95:7f:67:ba:6c:c8:50:a6:66:2e:71: b2:61:7c:01:28:95:b2:6c:22:56:4f:b5:f8:be:1e: 61:26:f4:e9:4e:72:f2:d3:fa:b8:b1:60:28:f8:2c: 45:f9:58:0e:10:2a:da:82:0c:23:9f:18:66:ac:39: af:e2:cc:a4:30:89:67:9b:35:ed:10:5d:62:d8:d3: 50:0a:44:00:45:a0:3d:af:cb:5b:16:bd:a8:b0:da: 3d:26:91:e2:90:fe:32:cf:64:33:16:c2:da:e4:7b: ee:58:89:70:5b:e5:62:26:47:97:48:99:5e:9b:e9: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B6:0C:9F:7B:23:5F:1B:F4:85:0F:F3:0A:B8:82:36:A9:8A:6B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 209.129.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:bb:12:76:db:ec:ed:4e:db:22:14:a3:e2:47:4c:29:ca:d5: cc:56:2e:5d:b6:36:7b:b9:f4:f5:86:2d:09:7a:d6:b7:16:ff: 6a:ce:cf:2c:c9:83:9b:7c:ca:e9:a7:46:d5:ae:30:5d:8b:df: e8:b1:66:b8:f1:a1:ca:17:ed:b9:f9:2a:ef:40:46:cc:e6:46: 06:0f:a0:b0:71:15:d9:f0:3f:ef:19:6c:a7:73:5c:78:d4:3d: 76:9a:54:6a:33:04:42:c0:9a:06:92:74:d2:bb:5b:9b:dd:a6: b7:85:9b:f4:0d:d1:4e:7b:ff:9a:cd:9b:61:49:32:17:82:74: 1b:63:ae:95:66:ff:60:ae:ea:55:11:7d:3b:34:0c:a7:f4:67: 8f:8c:9a:5f:cd:ed:18:6f:36:78:f9:d6:ac:67:da:44:23:78: e9:19:f0:ed:ca:8e:89:49:49:0e:3c:d0:0e:e9:da:b7:39:c0: 02:c2:b3:15:74:76:ba:a4:1f:0d:2b:2f:c5:b5:80:e5:0d:41: 84:d2:fc:2f:3a:72:b2:48:2b:b6:dc:0f:2b:64:8b:95:80:ac: 18:89:e7:d2:5b:0e:4d:9b:0b:5c:d1:dd:62:53:4b:77:c2:cb: 6d:20:4d:9d:8d:46:5a:ba:77:15:69:e7:60:38:85:15:ec:b7: 08:67:33:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuaSJIkGTp+7KcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk NGM1MjhjMmUtZjY4Yi00YmVlLWE5YTYtYmVkZGY5YzA2YmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNCKUby5h1nSLorT1sx4mOrgcPfW4AjXczW8 Zks2gdnqEtwketIl/6NmuYbdCc03NxIHodQP/4UDFy9NLk8I2qOoGnjM7JD4BD3G DDNymGVzVPBY9QwjmPNn4LxDPg/uEOyowfrDKQwo5LcFLp65d7C/NqXPpo9D2LDh urLGMqiku80RNO/WUILGlX9numzIUKZmLnGyYXwBKJWybCJWT7X4vh5hJvTpTnLy 0/q4sWAo+CxF+VgOECraggwjnxhmrDmv4sykMIlnmzXtEF1i2NNQCkQARaA9r8tb Fr2osNo9JpHikP4yz2QzFsLa5HvuWIlwW+ViJkeXSJlem+nZXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe2DJ97I18b9IUP8wq4gjapimtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZGRiYWYzZDEtNmYxMy0z ZmIwLWFkMjUtOGZmZmI5NDU3Y2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu7Enbb7O1O2yIUo+JHTCnK1cxWLl22Nnu59PWGLQl61rcW/2rOzyzJ g5t8yumnRtWuMF2L3+ixZrjxocoX7bn5Ku9ARszmRgYPoLBxFdnwP+8ZbKdzXHjU PXaaVGozBELAmgaSdNK7W5vdpreFm/QN0U57/5rNm2FJMheCdBtjrpVm/2Cu6lUR fTs0DKf0Z4+Mml/N7RhvNnj51qxn2kQjeOkZ8O3KjolJSQ480A7p2rc5wALCsxV0 drqkHw0rL8W1gOUNQYTS/C86crJIK7bcDytki5WArBiJ59JbDk2bC1zR3WJTS3fC y20gTZ2NRlq6dxVp52A4hRXstwhnMz8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:54 2025 by rpki-client