$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/6da04232-bc6a-3f75-944a-efbb5e45997f.roa File: 6da04232-bc6a-3f75-944a-efbb5e45997f.roa (raw, json) Hash identifier: dNDXHT2KwLq3FHkf6tF1RMYaGxhMfyZ/YUjTdwS8+Xc= Subject key identifier: D0:EE:F2:D9:AA:D7:7F:80:8E:24:05:18:65:0F:E8:5E:1A:7A:FF:A5 Certificate issuer: /CN=ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb Certificate serial: 010D0C9F4328584AB6BA7D3104E367B5D8EF1D80 Authority key identifier: 64:4F:BA:EE:40:FE:B8:48:4A:BC:6E:97:CA:DE:BC:DA:F4:09:9F:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/6da04232-bc6a-3f75-944a-efbb5e45997f.roa Signing time: Fri 01 Aug 2025 16:33:38 +0000 ROA not before: Fri 01 Aug 2025 16:33:38 +0000 ROA not after: Thu 30 Oct 2025 16:33:38 +0000 asID: 26911 IP address blocks: 209.135.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:ba:7d:31:04:e3:67:b5:d8:ef:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb Validity Not Before: Aug 1 16:33:38 2025 GMT Not After : Oct 30 16:33:38 2025 GMT Subject: CN=1a157248-e447-4c6a-a932-621e09f552c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:0b:01:5e:78:b4:4a:98:63:19:0b:49:b4: 1a:ad:ab:ce:b2:7c:0e:7f:d1:5d:14:de:20:de:4d: a1:3e:90:50:f5:dd:ec:5f:b9:58:ed:4f:58:db:58: 64:60:d4:ba:6e:93:83:05:55:60:a5:af:2a:32:70: 60:d7:52:8f:54:52:d4:bc:49:73:f7:96:21:a2:fc: 47:fa:de:39:7e:1c:dd:20:8a:4c:5b:aa:52:7c:82: a5:aa:0c:c2:0f:5a:2a:bd:9b:2c:c7:00:e9:cf:26: c4:d4:f2:7c:6c:e3:33:87:8a:68:2b:36:18:9e:f6: ab:54:e9:e7:1d:da:a4:c6:e9:88:c2:03:c8:c7:a5: 6f:42:26:18:57:a5:d3:35:a0:ce:88:45:66:c3:20: c4:28:13:1f:73:82:0f:b4:7b:f4:93:5d:20:a7:0d: 9f:59:34:d3:c0:61:14:f1:06:a8:30:95:06:84:9a: 84:4b:a5:a8:95:29:13:3f:67:ab:77:10:b8:a1:2f: 8d:39:6b:6b:14:8b:4b:87:c1:28:51:a3:d1:a6:6d: 4e:10:5f:cf:8d:d7:63:86:b3:a0:26:71:31:0d:30: ea:7c:34:70:a4:97:19:2d:a3:a0:c1:a2:89:d5:46: 9c:46:b8:85:be:ff:a0:46:86:ce:f2:0e:4b:1d:c9: 38:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EE:F2:D9:AA:D7:7F:80:8E:24:05:18:65:0F:E8:5E:1A:7A:FF:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/6da04232-bc6a-3f75-944a-efbb5e45997f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.crl X509v3 Authority Key Identifier: keyid:64:4F:BA:EE:40:FE:B8:48:4A:BC:6E:97:CA:DE:BC:DA:F4:09:9F:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.cer sbgp-ipAddrBlock: critical IPv4: 209.135.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:de:52:fc:b3:a0:fa:2b:58:78:15:d7:99:8c:5c:4d:3e:fc: 1d:7b:85:14:79:ae:0d:93:aa:be:e7:c1:b0:48:48:34:26:e9: c8:7c:87:5d:40:6c:0c:84:f4:37:37:86:5b:53:2c:81:ee:d5: c0:39:ed:c6:34:cc:33:9f:d5:60:bd:3e:71:29:ae:69:26:d9: 95:d4:a4:2b:9d:50:71:49:89:46:bc:53:18:45:97:06:a6:58: e8:84:ec:5f:7b:07:6c:ea:9e:42:25:d4:bc:a8:a4:3b:71:46: 08:3d:44:66:14:77:4e:a5:dd:05:70:78:7b:10:7f:ba:b4:42: e6:43:ac:6d:87:9b:61:73:f6:e5:b5:0e:a1:e7:ac:37:0c:0f: ca:c5:d1:92:0b:0a:e0:27:69:fa:65:04:89:fe:31:69:b5:89: 8b:c9:f2:91:e5:7a:78:ee:2f:06:77:f6:79:c1:a7:88:e1:bc: 8f:ad:bc:a8:59:9f:29:1a:b2:bc:06:ca:7b:92:eb:32:e8:ff: 4f:8e:bb:0b:a2:27:67:26:c8:2e:a4:3a:65:ef:ff:d2:f3:28: ee:3c:c6:95:fe:7f:22:c8:9c:ab:02:3f:21:19:e9:e3:bd:07: 17:5f:f9:68:76:2d:f5:23:3f:8d:83:59:97:34:87:a1:9e:c0: e6:aa:15:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2un0xBONntdjvHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWEzNWUwYjgtMTUxZi00YzMzLTllYjItZjFjMjVmZDRj NGViMB4XDTI1MDgwMTE2MzMzOFoXDTI1MTAzMDE2MzMzOFowLzEtMCsGA1UEAxMk MWExNTcyNDgtZTQ0Ny00YzZhLWE5MzItNjIxZTA5ZjU1MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0YLAV54tEqYYxkLSbQaravOsnwOf9FdFN4g 3k2hPpBQ9d3sX7lY7U9Y21hkYNS6bpODBVVgpa8qMnBg11KPVFLUvElz95YhovxH +t45fhzdIIpMW6pSfIKlqgzCD1oqvZssxwDpzybE1PJ8bOMzh4poKzYYnvarVOnn HdqkxumIwgPIx6VvQiYYV6XTNaDOiEVmwyDEKBMfc4IPtHv0k10gpw2fWTTTwGEU 8QaoMJUGhJqES6WolSkTP2erdxC4oS+NOWtrFItLh8EoUaPRpm1OEF/PjddjhrOg JnExDTDqfDRwpJcZLaOgwaKJ1UacRriFvv+gRobO8g5LHck4RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDu8tmq13+AjiQFGGUP6F4aev+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lYTM1 ZTBiOC0xNTFmLTRjMzMtOWViMi1mMWMyNWZkNGM0ZWIvNmRhMDQyMzItYmM2YS0z Zjc1LTk0NGEtZWZiYjVlNDU5OTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWEzNWUwYjgtMTUxZi00YzMzLTll YjItZjFjMjVmZDRjNGViL2VhMzVlMGI4LTE1MWYtNGMzMy05ZWIyLWYxYzI1ZmQ0 YzRlYi5jcmwwHwYDVR0jBBgwFoAUZE+67kD+uEhKvG6Xyt682vQJn28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lYTM1ZTBiOC0xNTFmLTRjMzMtOWViMi1mMWMy NWZkNGM0ZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ye9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLeUvyzoPorWHgV15mMXE0+/B17hRR5rg2Tqr7nwbBISDQm6ch8h11A bAyE9Dc3hltTLIHu1cA57cY0zDOf1WC9PnEprmkm2ZXUpCudUHFJiUa8UxhFlwam WOiE7F97B2zqnkIl1LyopDtxRgg9RGYUd06l3QVweHsQf7q0QuZDrG2Hm2Fz9uW1 DqHnrDcMD8rF0ZILCuAnafplBIn+MWm1iYvJ8pHlenjuLwZ39nnBp4jhvI+tvKhZ nykasrwGynuS6zLo/0+OuwuiJ2cmyC6kOmXv/9LzKO48xpX+fyLInKsCPyEZ6eO9 Bxdf+Wh2LfUjP42DWZc0h6GewOaqFTE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:05:42 2025 by rpki-client