$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/811a86dd-a42d-31ba-ad6d-6c7c1c81bdbf.roa File: 811a86dd-a42d-31ba-ad6d-6c7c1c81bdbf.roa (raw, json) Hash identifier: E4w124omuau6FQpjomk2ONDiBlZ5sAY2zmD1YKEC8sY= Subject key identifier: AF:FB:86:17:9C:9A:56:63:43:A8:33:0D:5E:74:A3:68:5C:8F:25:19 Certificate issuer: /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Certificate serial: 010D0C9F4328584AFF2D1EC56C8B8AD5BD90B710 Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/811a86dd-a42d-31ba-ad6d-6c7c1c81bdbf.roa Signing time: Wed 27 Aug 2025 15:22:48 +0000 ROA not before: Wed 27 Aug 2025 15:22:48 +0000 ROA not after: Tue 25 Nov 2025 16:22:48 +0000 asID: 11588 IP address blocks: 209.20.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:2d:1e:c5:6c:8b:8a:d5:bd:90:b7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Validity Not Before: Aug 27 15:22:48 2025 GMT Not After : Nov 25 16:22:48 2025 GMT Subject: CN=d1facaa4-3b4b-402b-9795-0d8b590e7b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:e6:ed:57:f0:65:a9:d9:55:6d:a9:e7:23: 64:3f:ee:ff:18:5d:25:f3:71:96:5b:bc:57:88:3c: 07:18:f7:be:a5:e1:5d:ba:ec:20:b9:33:7e:f9:89: 9b:6f:e4:88:be:68:f5:a5:42:92:e6:93:2d:d8:9e: db:be:1a:3e:a5:e1:51:ff:5b:27:3a:7a:b1:f0:8e: 48:8b:a8:c1:ed:5b:b6:ea:1d:13:3e:1f:52:c3:ef: 11:51:4b:06:f0:6b:fc:00:3d:3a:2b:23:1f:a7:8c: 2c:96:5b:5c:dc:83:1d:41:8f:c6:b3:2a:e6:3c:a4: ee:04:ba:66:07:6c:6e:70:89:ca:20:ff:76:99:8e: c8:78:ea:d4:ee:ba:a5:e9:90:ae:ec:c5:92:3e:2e: 55:db:39:ce:ff:5e:1e:40:27:2d:3b:c5:e0:98:5f: 9b:e9:3b:ae:4c:dd:61:f6:40:48:06:12:73:b4:83: 29:da:5a:c3:10:6e:8c:3c:f6:a1:c0:1e:9f:f8:f3: b1:85:42:b5:02:8e:1d:f6:69:db:ec:b5:78:c9:31: 43:f1:c7:53:7c:bf:48:46:49:ac:e0:ee:2b:ea:6f: 27:c5:c8:ca:f0:07:a9:06:f4:fe:48:0e:08:4a:6f: 70:2a:c3:b2:af:e4:3e:38:4f:47:df:6b:36:39:03: cc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FB:86:17:9C:9A:56:63:43:A8:33:0D:5E:74:A3:68:5C:8F:25:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/811a86dd-a42d-31ba-ad6d-6c7c1c81bdbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl X509v3 Authority Key Identifier: keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer sbgp-ipAddrBlock: critical IPv4: 209.20.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9f:45:0a:60:ff:4a:d7:12:41:83:44:f6:32:8f:61:ed:15: d7:ab:c1:0f:b3:ac:b9:75:2c:da:0c:2a:c3:27:99:de:22:3a: 4f:fe:96:1a:69:bf:b3:41:ce:34:14:c6:01:f0:25:e3:20:89: bc:6f:6c:67:83:fe:03:63:13:93:68:5a:fe:d0:7f:8f:26:0b: 7b:ea:ca:8b:ac:d9:78:79:66:ae:5f:d4:67:aa:38:de:8a:b6: 5a:b7:fc:45:ae:09:88:a8:67:70:58:f4:9e:4e:61:08:04:1e: f0:12:dc:4a:77:f1:a5:bb:53:b8:fe:03:6a:61:c5:4f:6a:e2: 06:31:01:ac:f7:db:f2:d1:eb:0e:55:8d:57:64:7e:9a:22:71: 18:dd:95:09:4d:bd:9f:be:30:fd:8f:7a:de:dd:b0:e3:09:60: e3:ff:ba:4f:2c:ad:75:b7:9a:75:12:40:d5:39:14:82:01:14: 31:a9:6b:ec:6e:a7:ff:64:b4:41:89:9f:6e:b8:fa:38:35:c4: 9a:0d:33:b4:81:fc:f7:94:2e:2c:0b:fa:73:f6:83:8b:09:f1: 72:d5:f1:1f:6b:49:5e:43:2a:ba:f3:27:22:f5:05:92:ba:59: 95:74:f9:50:67:a4:20:ad:de:a5:38:0e:8b:56:79:85:2e:89: 77:91:d1:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/LR7FbIuK1b2QtxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiMzZhN2ItYmYzYy00YTgxLThjNWItYTQ4ZDFhNTdk MmQ2MB4XDTI1MDgyNzE1MjI0OFoXDTI1MTEyNTE2MjI0OFowLzEtMCsGA1UEAxMk ZDFmYWNhYTQtM2I0Yi00MDJiLTk3OTUtMGQ4YjU5MGU3YjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IXm7VfwZanZVW2p5yNkP+7/GF0l83GWW7xX iDwHGPe+peFduuwguTN++Ymbb+SIvmj1pUKS5pMt2J7bvho+peFR/1snOnqx8I5I i6jB7Vu26h0TPh9Sw+8RUUsG8Gv8AD06KyMfp4wslltc3IMdQY/GsyrmPKTuBLpm B2xucInKIP92mY7IeOrU7rql6ZCu7MWSPi5V2znO/14eQCctO8XgmF+b6TuuTN1h 9kBIBhJztIMp2lrDEG6MPPahwB6f+POxhUK1Ao4d9mnb7LV4yTFD8cdTfL9IRkms 4O4r6m8nxcjK8AepBvT+SA4ISm9wKsOyr+Q+OE9H32s2OQPM4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/7hhecmlZjQ6gzDV50o2hcjyUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iY2Iz NmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhkMWE1N2QyZDYvODExYTg2ZGQtYTQyZC0z MWJhLWFkNmQtNmM3YzFjODFiZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmNiMzZhN2ItYmYzYy00YTgxLThj NWItYTQ4ZDFhNTdkMmQ2L2JjYjM2YTdiLWJmM2MtNGE4MS04YzViLWE0OGQxYTU3 ZDJkNi5jcmwwHwYDVR0jBBgwFoAUfPaBL9QJ/Qs44zusnpOitJm0xiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iY2IzNmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhk MWE1N2QyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmfRQpg/0rXEkGDRPYyj2HtFderwQ+zrLl1LNoMKsMnmd4iOk/+lhpp v7NBzjQUxgHwJeMgibxvbGeD/gNjE5NoWv7Qf48mC3vqyous2Xh5Zq5f1GeqON6K tlq3/EWuCYioZ3BY9J5OYQgEHvAS3Ep38aW7U7j+A2phxU9q4gYxAaz32/LR6w5V jVdkfpoicRjdlQlNvZ++MP2Pet7dsOMJYOP/uk8srXW3mnUSQNU5FIIBFDGpa+xu p/9ktEGJn264+jg1xJoNM7SB/PeULiwL+nP2g4sJ8XLV8R9rSV5DKrrzJyL1BZK6 WZV0+VBnpCCt3qU4DotWeYUuiXeR0dg= -----END CERTIFICATE-----Generated at Thu Nov 6 01:18:50 2025 by rpki-client