$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa File: ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa (raw, json) Hash identifier: x4npFGwGi5V893BKgQ/TDtLuEF2e8QrxhfSgYycfhtc= Subject key identifier: E5:30:65:93:17:57:84:D5:CD:13:6A:E8:A6:55:4C:1D:46:58:79:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A331ADD83719C4095C07FDD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 32787 IP address blocks: 209.200.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:dd:83:71:9c:40:95:c0:7f:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=de2f0d59-dc27-49f8-bb24-5be5b07d47d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a3:fb:3b:d1:af:75:5a:5d:b7:3a:b5:95:7f: 38:5b:30:6e:2b:84:2f:3b:b7:2c:eb:c2:c8:3c:d6: 16:44:42:7b:bf:85:2d:24:8e:15:4f:92:9a:11:1a: 33:33:16:c7:a6:60:6a:2f:9f:f1:b8:f4:2a:df:d3: 8e:3e:64:e0:66:b0:f7:4c:96:b2:bd:1d:d0:83:ff: 85:21:23:d6:6b:c5:19:b0:04:2e:8c:b9:b6:e2:e9: 64:52:79:05:37:06:db:45:cf:60:d1:f4:3a:da:5b: d6:0d:09:60:05:25:f8:f7:f7:66:3c:2a:b8:c4:56: eb:00:d9:7c:82:54:48:ea:d8:c2:e2:47:01:68:7d: fa:75:de:50:34:df:75:b2:77:a2:e2:b3:48:88:0e: c0:f7:4a:ef:bf:78:f6:4e:9e:14:b9:65:c3:2c:c8: fa:b3:21:2a:ae:ba:5c:74:33:73:6d:b6:23:c3:c0: 23:d9:94:6d:35:a1:78:fe:2c:a6:c4:a1:65:76:35: 1b:27:fa:85:77:97:fa:4f:48:fc:cd:0b:52:17:55: 50:60:47:5d:09:3b:65:ca:61:5e:f6:02:46:c9:39: 9f:2a:05:41:67:03:96:d0:63:f5:bb:81:a5:d3:4b: 74:3e:ad:20:4a:12:f4:de:85:56:64:d6:5c:1a:ee: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:30:65:93:17:57:84:D5:CD:13:6A:E8:A6:55:4C:1D:46:58:79:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:86:31:2a:22:8e:63:10:20:c9:fe:9a:bd:b2:35:99:e1:b0: 0e:25:66:3f:12:21:93:f8:df:0c:09:34:f2:4b:81:3e:58:c6: 47:17:55:95:ee:bf:f7:16:03:4b:ca:1d:7c:3d:43:b5:1a:ec: 85:fc:9b:75:88:bf:be:c7:ff:df:9c:e5:78:98:60:28:da:20: 81:ec:fe:64:9b:17:da:2d:2a:6f:b2:89:af:94:df:cd:ca:df: 01:11:ef:5c:05:5b:44:13:16:78:dd:52:dd:8a:84:39:56:13: 87:84:38:7e:46:e2:30:46:e6:5b:33:cf:a0:40:73:d6:04:32: 0a:b4:63:9d:e3:95:64:18:42:b2:3b:d2:84:47:30:40:a9:16: df:d5:56:9e:ff:24:c1:d4:be:5d:f1:04:3a:65:5e:7b:d4:40: e3:e3:49:82:6e:0f:7e:16:94:c3:a5:67:9b:00:72:12:68:8e: b1:0c:55:22:c3:99:1f:8b:4a:68:3e:b3:71:81:48:fc:f3:49: fc:79:90:f1:70:26:9f:1e:09:40:ff:36:1f:4d:56:0a:7c:95: 68:a1:af:bf:36:25:f8:10:01:33:85:32:09:8c:0c:33:7f:ca: 15:ef:32:30:a8:10:f4:37:59:67:a5:24:f4:9c:ae:4b:81:a2: 76:fa:b1:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGt2DcZxAlcB/3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ZGUyZjBkNTktZGMyNy00OWY4LWJiMjQtNWJlNWIwN2Q0N2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKP7O9GvdVpdtzq1lX84WzBuK4QvO7cs68LI PNYWREJ7v4UtJI4VT5KaERozMxbHpmBqL5/xuPQq39OOPmTgZrD3TJayvR3Qg/+F ISPWa8UZsAQujLm24ulkUnkFNwbbRc9g0fQ62lvWDQlgBSX49/dmPCq4xFbrANl8 glRI6tjC4kcBaH36dd5QNN91snei4rNIiA7A90rvv3j2Tp4UuWXDLMj6syEqrrpc dDNzbbYjw8Aj2ZRtNaF4/iymxKFldjUbJ/qFd5f6T0j8zQtSF1VQYEddCTtlymFe 9gJGyTmfKgVBZwOW0GP1u4Gl00t0Pq0gShL03oVWZNZcGu5FdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUwZZMXV4TVzRNq6KZVTB1GWHljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM3ODljOTQtYWFmMy0z YmNjLTk5YzItYjA4OTY4NGY1OWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ci9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaGMSoijmMQIMn+mr2yNZnhsA4lZj8SIZP43wwJNPJLgT5YxkcXVZXu v/cWA0vKHXw9Q7Ua7IX8m3WIv77H/9+c5XiYYCjaIIHs/mSbF9otKm+yia+U383K 3wER71wFW0QTFnjdUt2KhDlWE4eEOH5G4jBG5lszz6BAc9YEMgq0Y53jlWQYQrI7 0oRHMECpFt/VVp7/JMHUvl3xBDplXnvUQOPjSYJuD34WlMOlZ5sAchJojrEMVSLD mR+LSmg+s3GBSPzzSfx5kPFwJp8eCUD/Nh9NVgp8lWihr782JfgQATOFMgmMDDN/ yhXvMjCoEPQ3WWelJPScrkuBonb6saU= -----END CERTIFICATE-----Generated at Sun Jun 15 19:40:12 2025 by rpki-client