$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa File: b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa (raw, json) Hash identifier: X0BRQnvsAzMypQNqi9Yzd+7mMey9c1T5c1oV7o6VXV0= Subject key identifier: 13:4A:68:E3:A7:F7:DD:D6:19:0B:BA:58:72:33:EF:8D:D8:E2:13:C2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BC557C182EED138C30C28 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 398576 IP address blocks: 209.51.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:c5:57:c1:82:ee:d1:38:c3:0c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=afdff843-4c4e-4fc4-ba01-74536ed19bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:85:50:8b:6c:1c:a6:25:f8:6c:48:b8:60: 27:91:a6:34:0d:40:33:2d:32:da:1d:d7:96:32:68: b4:1d:0d:55:59:78:c1:10:d4:a5:90:a9:ac:0c:cc: 4a:7a:44:31:71:d3:83:e0:56:b3:71:cf:46:cf:e3: 9b:65:4c:7f:3b:6a:50:f8:00:bd:ab:75:0e:13:24: 08:0b:1e:b1:88:7c:f0:20:6d:c9:63:14:4a:df:a5: f0:55:81:22:59:70:e3:5d:e3:57:b9:44:e4:03:e5: 7f:6d:49:63:a0:cf:8b:87:52:cf:42:b4:c9:40:49: 87:c0:6e:c2:a5:0a:38:8f:c8:02:16:39:3e:38:e5: 79:87:5f:c6:e1:26:1b:ae:20:0b:10:c9:e5:6f:03: 71:01:d0:43:bd:3e:9e:ec:34:76:3a:7f:16:d9:96: d0:47:4a:ee:5e:f0:9f:84:49:42:da:bb:ad:fd:40: 88:24:15:7b:88:bc:6d:80:14:6b:a9:0f:a4:1d:23: bf:80:b9:b0:80:89:f9:b9:29:49:5c:21:ab:4d:48: 37:c9:64:07:61:79:13:31:9c:64:78:f7:ba:ec:8b: 66:ea:fb:de:c9:12:c4:35:a1:6c:9a:60:66:05:5e: 34:89:73:a9:c6:2a:11:97:66:63:27:b7:e2:19:96: 6d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4A:68:E3:A7:F7:DD:D6:19:0B:BA:58:72:33:EF:8D:D8:E2:13:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 209.51.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b2:31:5c:40:c2:94:e0:c0:3f:fc:a3:ed:a7:f3:af:dd:4e: 2a:39:c3:d6:ea:ee:4a:c7:3b:b6:1d:85:5a:9d:0a:6c:3c:dc: b4:58:a6:7e:7a:2a:86:e1:ca:46:ca:59:0d:df:de:11:2e:c2: bb:6b:95:a4:de:4a:54:60:60:d8:3a:d9:4a:1c:ce:19:36:7f: 82:f2:1d:68:c5:c7:97:5c:ca:b5:10:31:7a:08:50:4a:53:51: 83:a2:81:e5:b7:86:1c:cf:71:26:0d:16:20:0f:21:f3:a3:84: 07:35:0c:e4:94:7c:81:45:17:ce:ab:fd:c7:49:9a:22:c0:55: 5f:e5:45:91:6e:73:f5:e1:9c:12:75:82:ed:37:8f:cb:a6:c8: c5:7d:42:c0:62:2d:c6:14:15:25:17:51:4f:dd:99:f9:44:de: 8a:dc:d2:2d:49:ba:36:45:d6:ca:99:78:78:9a:a3:42:be:2d: 84:7a:72:92:01:38:3e:e8:6e:a6:bf:12:64:bb:ce:c9:d1:31: 5d:38:02:3b:16:2b:aa:43:d3:ed:eb:9a:ae:03:2b:90:3a:0a: 86:e2:46:3e:d1:87:c0:06:76:fd:bc:b8:03:68:7a:ba:55:23: 2a:60:5d:d7:f6:ad:58:a8:eb:22:79:26:91:2e:fa:a4:32:b7: 3c:e9:a0:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G8VXwYLu0TjDDCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YWZkZmY4NDMtNGM0ZS00ZmM0LWJhMDEtNzQ1MzZlZDE5YmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqeFUItsHKYl+GxIuGAnkaY0DUAzLTLaHdeW Mmi0HQ1VWXjBENSlkKmsDMxKekQxcdOD4Fazcc9Gz+ObZUx/O2pQ+AC9q3UOEyQI Cx6xiHzwIG3JYxRK36XwVYEiWXDjXeNXuUTkA+V/bUljoM+Lh1LPQrTJQEmHwG7C pQo4j8gCFjk+OOV5h1/G4SYbriALEMnlbwNxAdBDvT6e7DR2On8W2ZbQR0ruXvCf hElC2rut/UCIJBV7iLxtgBRrqQ+kHSO/gLmwgIn5uSlJXCGrTUg3yWQHYXkTMZxk ePe67Itm6vveyRLENaFsmmBmBV40iXOpxioRl2ZjJ7fiGZZtCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNKaOOn993WGQu6WHIz743Y4hPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjViODUzZWYtOWE2Zi0z NzQyLWFiYzUtMzE0NTZlNzNlM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TO7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuyMVxAwpTgwD/8o+2n86/dTio5w9bq7krHO7YdhVqdCmw83LRYpn56 KobhykbKWQ3f3hEuwrtrlaTeSlRgYNg62Uoczhk2f4LyHWjFx5dcyrUQMXoIUEpT UYOigeW3hhzPcSYNFiAPIfOjhAc1DOSUfIFFF86r/cdJmiLAVV/lRZFuc/XhnBJ1 gu03j8umyMV9QsBiLcYUFSUXUU/dmflE3orc0i1JujZF1sqZeHiao0K+LYR6cpIB OD7obqa/EmS7zsnRMV04AjsWK6pD0+3rmq4DK5A6CobiRj7Rh8AGdv28uANoerpV IypgXdf2rVio6yJ5JpEu+qQytzzpoPo= -----END CERTIFICATE-----Generated at Mon Aug 4 07:46:18 2025 by rpki-client