$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa File: 0475b828-a277-3eeb-8b05-22e0f1e69824.roa (raw, json) Hash identifier: TSPFp++OjJtptL9xDyM5AQtu8nhcuOQBWhQfj7H6wOg= Subject key identifier: 4E:5B:F2:37:B6:8A:69:13:AA:7A:3D:35:CB:7F:93:DF:7E:BF:15:75 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584A7D15F779283FCC15BDD38D80 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 8100 IP address blocks: 209.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f7:79:28:3f:cc:15:bd:d3:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=10ab0a1d-fa0b-4574-9241-d9fc3bda8bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:46:a6:9f:02:77:b0:aa:fc:9b:45:f5:a2: f8:0c:65:3d:8b:28:b6:53:cf:95:d7:5e:89:2c:7e: 0a:e4:2a:30:82:bb:dc:ed:84:c2:ee:9f:35:34:6f: 44:6c:83:a8:d0:b5:b0:11:09:14:0d:89:f3:d7:e7: ed:89:19:f0:fd:72:3f:1b:83:e2:27:1a:0a:27:8d: 4f:33:dd:ff:9d:7a:39:e1:d0:5a:ce:de:71:d4:89: 79:cd:30:a2:08:1d:58:98:df:aa:56:0a:1f:dd:8e: 3d:24:67:30:96:63:0c:02:ef:c8:e6:9e:f2:1a:36: 57:f6:2d:14:2d:d3:da:53:9c:6d:79:36:e1:5e:34: 98:92:ce:1d:c0:ad:e9:c2:a2:93:47:45:c7:d0:6a: 44:8d:bd:b9:ec:12:df:d2:0d:3a:6a:90:29:2f:86: 50:b7:07:8a:db:6a:bc:dd:5f:1f:82:8b:63:e2:88: fe:59:5b:7a:5c:4c:13:e6:0f:17:26:21:3a:70:a5: da:55:4f:12:ef:77:53:7f:61:07:7b:e8:af:34:b1: 2d:e1:1a:7f:02:b8:d6:d3:1f:42:b4:2e:43:7e:7b: e4:2b:03:d8:4b:85:01:2d:39:32:bc:da:80:24:96: 50:79:45:5c:e7:e8:83:a3:a8:e0:30:76:7c:31:fd: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5B:F2:37:B6:8A:69:13:AA:7A:3D:35:CB:7F:93:DF:7E:BF:15:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:88:9a:e4:ed:b5:62:41:b8:36:02:ee:37:db:31:bf:e1:ae: a3:9d:35:21:20:4c:12:e6:54:9d:6c:ac:2b:cc:b3:b1:5c:7b: ca:f3:3d:93:02:21:f3:76:33:2e:f6:9b:3c:d0:0f:ab:29:8b: ac:37:70:9b:1a:f5:df:cf:d1:6a:39:86:74:ff:bc:0c:8b:03: 6b:fd:93:28:55:04:71:65:4a:3c:78:60:08:27:3a:ee:a8:54: 50:63:0a:1b:f8:16:ed:16:f4:3a:17:d4:90:0c:46:03:87:84: 48:25:3c:39:8b:79:3a:e1:24:e6:3e:91:8c:81:03:4c:fb:9a: 1d:a6:21:9c:d1:5c:8b:11:15:b8:38:3a:d2:6d:02:6a:b5:4e: 7a:cb:ac:8f:48:6f:00:fe:5a:28:e8:0f:f0:20:a4:7a:39:42: 1f:7b:f2:9f:e2:6d:7f:63:3a:79:3e:c7:85:b7:11:77:45:86: 02:95:37:66:40:2f:5d:a7:23:2c:02:b8:d5:7f:fc:1d:79:17: 59:1e:ff:12:0e:14:e4:7a:53:26:b1:9f:c6:b4:9e:f1:e4:b3: 31:d4:05:b3:19:a9:ae:88:55:25:c7:39:ea:52:ca:0e:1f:20: 4a:b4:72:31:bf:12:6c:ea:bc:41:9b:b4:c4:c4:0f:e3:89:fb: c2:fe:79:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Ffd5KD/MFb3TjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MTBhYjBhMWQtZmEwYi00NTc0LTkyNDEtZDlmYzNiZGE4YmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUVGpp8Cd7Cq/JtF9aL4DGU9iyi2U8+V116J LH4K5Cowgrvc7YTC7p81NG9EbIOo0LWwEQkUDYnz1+ftiRnw/XI/G4PiJxoKJ41P M93/nXo54dBazt5x1Il5zTCiCB1YmN+qVgof3Y49JGcwlmMMAu/I5p7yGjZX9i0U LdPaU5xteTbhXjSYks4dwK3pwqKTR0XH0GpEjb257BLf0g06apApL4ZQtweK22q8 3V8fgotj4oj+WVt6XEwT5g8XJiE6cKXaVU8S73dTf2EHe+ivNLEt4Rp/ArjW0x9C tC5DfnvkKwPYS4UBLTkyvNqAJJZQeUVc5+iDo6jgMHZ8Mf24VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5b8je2imkTqno9Nct/k99+vxV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMDQ3NWI4MjgtYTI3Ny0z ZWViLThiMDUtMjJlMGYxZTY5ODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuImuTttWJBuDYC7jfbMb/hrqOdNSEgTBLmVJ1srCvMs7Fce8rzPZMC IfN2My72mzzQD6spi6w3cJsa9d/P0Wo5hnT/vAyLA2v9kyhVBHFlSjx4YAgnOu6o VFBjChv4Fu0W9DoX1JAMRgOHhEglPDmLeTrhJOY+kYyBA0z7mh2mIZzRXIsRFbg4 OtJtAmq1TnrLrI9IbwD+WijoD/AgpHo5Qh978p/ibX9jOnk+x4W3EXdFhgKVN2ZA L12nIywCuNV//B15F1ke/xIOFOR6Uyaxn8a0nvHkszHUBbMZqa6IVSXHOepSyg4f IEq0cjG/EmzqvEGbtMTED+OJ+8L+efM= -----END CERTIFICATE-----Generated at Wed Aug 6 04:08:51 2025 by rpki-client