$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa File: 78e252cc-bd09-3239-a78c-700cc4a2804d.roa (raw, json) Hash identifier: 26WSUu9CIkjVTIlZ8BkOBUrsQTu2l9M4m9Elm2H3j8Q= Subject key identifier: D1:4A:06:0B:B0:E6:AD:E5:45:CB:CD:AE:14:14:33:C6:58:1E:A3:0E Certificate issuer: /CN=5b640257-7947-43c1-997a-0af58a465bdc Certificate serial: 010D0C9F4328584AB220C0E782724740C1B8BC00 Authority key identifier: E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 14618 IP address blocks: 209.209.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:c0:e7:82:72:47:40:c1:b8:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b640257-7947-43c1-997a-0af58a465bdc Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=aec1a90d-599b-46e1-badc-7ba4e8a4f3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:78:6a:a6:ef:51:ee:16:b4:1e:0b:7a:6f: a7:67:c3:91:cd:81:5e:24:45:03:2c:ee:de:b8:00: 06:ab:6d:ea:f0:77:4b:1b:56:eb:a4:49:aa:3a:e7: 08:f3:f7:74:20:6c:6c:fc:b2:db:7d:c4:87:2b:1a: 2f:39:06:d0:a2:48:8f:d8:d0:63:04:c4:70:c6:a1: 47:03:1a:cc:7d:ab:2d:9a:fc:dc:64:4d:6a:52:32: c9:87:61:9b:25:47:fe:c9:cc:2d:7c:a2:c5:d1:f7: f4:fb:62:64:eb:1e:9f:95:19:21:5d:2c:c6:bc:a1: 3a:86:d9:3d:b4:ed:ed:66:49:93:12:68:38:24:da: e8:36:c8:93:5c:b9:ee:49:63:ec:60:0f:9b:30:e7: bf:c8:82:f1:a2:1a:f7:02:ca:e4:ca:de:c7:f5:71: cb:77:2e:c5:39:40:43:37:44:1f:11:6e:78:86:37: ca:9d:fb:4c:dc:9a:ff:f3:a5:5c:b5:0e:dc:4e:bb: 81:78:6c:6d:40:81:ca:c7:d1:ea:b2:db:b1:9c:23: fe:2d:de:61:d5:e3:53:3e:6c:db:86:a3:ad:c9:e9: 12:92:c3:5f:ca:05:13:a2:c0:9d:b6:fb:03:4a:af: 92:b4:10:ee:22:7d:8a:bf:09:ca:2c:70:9d:9d:e6: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4A:06:0B:B0:E6:AD:E5:45:CB:CD:AE:14:14:33:C6:58:1E:A3:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl X509v3 Authority Key Identifier: keyid:E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer sbgp-ipAddrBlock: critical IPv4: 209.209.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:21:31:63:0c:0a:aa:97:10:83:aa:5b:1a:89:55:78:14:46: 97:04:a5:36:f9:6c:3c:6d:ea:b7:cb:f9:63:a9:91:8b:a1:6d: 71:a3:cd:36:32:92:ee:f5:ea:f7:5a:7e:5f:b3:25:4f:f9:f9: 85:34:31:4b:3b:d0:23:80:3b:de:60:2c:91:13:81:3b:46:e4: 2b:5a:88:78:80:68:e9:6e:03:c6:b1:62:c1:7e:1d:0a:37:c3: 7d:93:ce:c4:98:5a:42:a3:98:f1:56:a7:3f:ba:f3:37:38:1c: 3c:17:3b:aa:39:e5:61:57:dd:7c:8c:06:e7:8d:af:4c:21:93: 1e:39:4c:f2:2a:15:59:44:75:1f:fd:d6:f9:54:0d:75:5d:7a: b5:87:71:ee:5f:ed:49:3b:e5:ff:40:e1:01:60:ac:15:02:12: 82:03:3c:85:42:00:30:b4:b6:1c:89:e4:25:83:a4:a6:94:22: 3d:92:71:13:23:58:70:4d:66:18:13:3b:99:40:fd:81:ae:c4: 41:0c:76:d3:21:5f:b9:4d:5f:e6:ad:93:0b:42:76:cd:7f:01: 46:76:35:db:2c:28:9d:c6:b9:bf:8b:37:43:bd:2e:26:1d:4f: 7c:2b:46:1c:48:21:1b:fe:6e:0c:c1:45:58:a0:27:de:ab:7b: a8:63:d1:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMDngnJHQMG4vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI2NDAyNTctNzk0Ny00M2MxLTk5N2EtMGFmNThhNDY1 YmRjMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWVjMWE5MGQtNTk5Yi00NmUxLWJhZGMtN2JhNGU4YTRmM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2B4aqbvUe4WtB4Lem+nZ8ORzYFeJEUDLO7e uAAGq23q8HdLG1brpEmqOucI8/d0IGxs/LLbfcSHKxovOQbQokiP2NBjBMRwxqFH AxrMfastmvzcZE1qUjLJh2GbJUf+ycwtfKLF0ff0+2Jk6x6flRkhXSzGvKE6htk9 tO3tZkmTEmg4JNroNsiTXLnuSWPsYA+bMOe/yILxohr3Asrkyt7H9XHLdy7FOUBD N0QfEW54hjfKnftM3Jr/86VctQ7cTruBeGxtQIHKx9HqstuxnCP+Ld5h1eNTPmzb hqOtyekSksNfygUTosCdtvsDSq+StBDuIn2KvwnKLHCdneZUbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFKBguw5q3lRcvNrhQUM8ZYHqMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0 MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1OGE0NjViZGMvNzhlMjUyY2MtYmQwOS0z MjM5LWE3OGMtNzAwY2M0YTI4MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWI2NDAyNTctNzk0Ny00M2MxLTk5 N2EtMGFmNThhNDY1YmRjLzViNjQwMjU3LTc5NDctNDNjMS05OTdhLTBhZjU4YTQ2 NWJkYy5jcmwwHwYDVR0jBBgwFoAU5TA8mq0PRPce48E8LRscUfUcNMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1 OGE0NjViZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQhMWMMCqqXEIOqWxqJVXgURpcEpTb5bDxt6rfL+WOpkYuhbXGjzTYy ku716vdafl+zJU/5+YU0MUs70COAO95gLJETgTtG5CtaiHiAaOluA8axYsF+HQo3 w32TzsSYWkKjmPFWpz+68zc4HDwXO6o55WFX3XyMBueNr0whkx45TPIqFVlEdR/9 1vlUDXVderWHce5f7Uk75f9A4QFgrBUCEoIDPIVCADC0thyJ5CWDpKaUIj2ScRMj WHBNZhgTO5lA/YGuxEEMdtMhX7lNX+atkwtCds1/AUZ2NdssKJ3Gub+LN0O9LiYd T3wrRhxIIRv+bgzBRVigJ96re6hj0b4= -----END CERTIFICATE-----Generated at Wed Aug 6 16:14:26 2025 by rpki-client