$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa File: 59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa (raw, json) Hash identifier: mAanqXo8OGTjfriUOpjj8UvBnLKr/kzosn19XVlnd/Q= Subject key identifier: 05:82:1A:49:97:DF:90:A6:85:BE:DE:61:01:08:A9:E1:01:9D:E6:6F Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584ABBE6360AA535D84E82AA9CA0 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 46450 IP address blocks: 209.20.134.0/24 maxlen: 24 209.20.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:36:0a:a5:35:d8:4e:82:aa:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=92256b5b-f6d5-46bd-9623-0019243412c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:52:ad:6c:25:3b:ac:92:4c:1c:bb:24:03: e8:52:89:ed:2e:5e:24:0e:e7:59:05:81:c5:76:32: 56:8d:81:18:ba:7c:df:49:4e:72:a7:21:10:07:85: d5:c9:1a:9f:7f:5d:46:8a:c5:f1:6f:a0:38:d9:cb: 5b:c7:af:9a:01:45:bf:41:d3:cc:1f:60:f2:60:0c: db:be:3d:75:d5:12:c5:4b:9c:b4:10:0c:1e:03:1d: c6:c0:76:22:69:44:34:98:7d:a3:6f:b5:1f:a8:ab: 4d:fd:94:ff:01:b8:d5:05:e4:ef:73:93:5f:45:52: 26:c6:89:c8:50:1c:ac:62:a8:76:0a:4a:a5:c9:68: a6:f3:b2:8f:75:aa:74:bd:78:1a:b7:d3:fa:25:c4: 40:4f:4e:62:a3:3e:a3:c3:30:b7:74:34:80:80:f6: 0f:85:96:bc:91:33:28:6b:14:73:8c:24:cf:0c:ef: 81:82:a6:d2:7b:36:98:e2:ef:67:c2:a7:d0:dc:b7: e0:ed:d6:5f:1f:fc:38:4c:21:e1:03:b5:1d:3d:e0: 0d:c1:14:6b:e9:bd:62:99:d0:4e:55:9e:ca:96:86: 71:fe:d2:fd:61:c4:f5:3c:6d:33:88:41:a1:f3:a5: 40:c1:bd:20:cd:3e:1a:7a:e2:1c:06:73:6e:d9:5a: b8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:82:1A:49:97:DF:90:A6:85:BE:DE:61:01:08:A9:E1:01:9D:E6:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e9:a1:80:a6:e5:34:07:4a:14:8c:ef:19:2f:09:ca:37:1d: 19:d8:f3:00:05:12:df:0a:53:93:61:26:06:3a:18:04:72:70: 2e:c2:99:c5:f1:b5:8b:32:e2:10:4f:e7:14:93:14:a8:4c:a1: 92:70:29:a1:44:ee:37:75:1a:42:40:53:5b:7f:49:65:57:e9: 0e:70:78:90:a3:d4:cb:e3:2f:5f:ea:8d:98:2b:b1:bf:3f:a5: 72:82:1d:e3:38:96:76:8a:bb:58:51:bb:ba:bd:45:85:d2:ab: 7e:2c:ce:04:0d:32:65:ab:a2:2b:62:48:f2:bd:62:87:0b:67: 06:28:d1:41:be:7a:dd:89:39:aa:46:06:a5:62:53:81:02:20: 71:86:5a:25:83:eb:95:57:d8:6e:68:3f:bf:51:62:21:d8:74: 10:a6:97:30:38:9f:66:2f:bf:4c:88:85:71:15:80:d0:42:bc: 41:4d:f6:3f:07:f9:e8:7a:f6:5d:d4:8b:bd:33:3b:df:35:b7: 73:48:4c:6b:81:a9:6d:bb:e0:ec:ce:71:92:fe:57:62:1a:a1: ff:5e:c9:bf:17:42:4c:ea:37:89:1f:f1:d4:44:d5:5e:9a:a4: 6f:78:9f:da:5b:68:4c:c2:dd:4d:c3:20:a7:ca:37:03:94:ce: 3b:79:57:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq75jYKpTXYToKqnKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk OTIyNTZiNWItZjZkNS00NmJkLTk2MjMtMDAxOTI0MzQxMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfxSrWwlO6ySTBy7JAPoUontLl4kDudZBYHF djJWjYEYunzfSU5ypyEQB4XVyRqff11GisXxb6A42ctbx6+aAUW/QdPMH2DyYAzb vj111RLFS5y0EAweAx3GwHYiaUQ0mH2jb7UfqKtN/ZT/AbjVBeTvc5NfRVImxonI UBysYqh2CkqlyWim87KPdap0vXgat9P6JcRAT05ioz6jwzC3dDSAgPYPhZa8kTMo axRzjCTPDO+BgqbSezaY4u9nwqfQ3Lfg7dZfH/w4TCHhA7UdPeANwRRr6b1imdBO VZ7KloZx/tL9YcT1PG0ziEGh86VAwb0gzT4aeuIcBnNu2Vq4jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWCGkmX35Cmhb7eYQEIqeEBneZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTljMjYzMjgtZGRkNi0z NjIzLTk3NTktM2FhMWIyMWNiYWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RSGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDpoYCm5TQHShSM7xkvCco3HRnY8wAFEt8KU5NhJgY6GARycC7CmcXx tYsy4hBP5xSTFKhMoZJwKaFE7jd1GkJAU1t/SWVX6Q5weJCj1MvjL1/qjZgrsb8/ pXKCHeM4lnaKu1hRu7q9RYXSq34szgQNMmWroitiSPK9YocLZwYo0UG+et2JOapG BqViU4ECIHGGWiWD65VX2G5oP79RYiHYdBCmlzA4n2Yvv0yIhXEVgNBCvEFN9j8H +eh69l3Ui70zO981t3NITGuBqW274OzOcZL+V2Iaof9eyb8XQkzqN4kf8dRE1V6a pG94n9pbaEzC3U3DIKfKNwOUzjt5V3M= -----END CERTIFICATE-----Generated at Wed Aug 6 14:15:38 2025 by rpki-client