$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/059b2a6e-0dc8-3000-8de1-205f552c9f26.roa File: 059b2a6e-0dc8-3000-8de1-205f552c9f26.roa (raw, json) Hash identifier: mlyeLOXb0O7Hg7Nvg0K9qim1mY4BGL3uZ/B+jHeveb4= Subject key identifier: 90:11:0F:DA:41:A3:19:4B:65:6E:56:BF:0C:7A:40:09:F7:98:9D:F1 Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F43285849C813ED31C63B2E2C68FB9000 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/059b2a6e-0dc8-3000-8de1-205f552c9f26.roa Signing time: Thu 08 May 2025 04:55:39 +0000 ROA not before: Thu 08 May 2025 04:55:39 +0000 ROA not after: Wed 06 Aug 2025 04:55:39 +0000 asID: 6079 IP address blocks: 209.250.8.0/23 maxlen: 23 209.250.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c8:13:ed:31:c6:3b:2e:2c:68:fb:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: May 8 04:55:39 2025 GMT Not After : Aug 6 04:55:39 2025 GMT Subject: CN=883d7141-6a25-48f1-86bc-228da04ce4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:11:34:e7:79:2f:0c:37:02:1a:08:f0:2b: 7c:41:cf:9d:0f:6a:94:60:cf:0d:e7:da:63:8f:e7: 07:ff:b2:81:53:41:47:4d:0d:7e:6d:ec:6e:c9:d1: d0:aa:b4:65:d8:0d:d3:16:b7:6f:29:84:df:2b:e9: ea:a2:0e:41:b2:40:2f:e8:c8:34:ab:7e:2c:79:d1: 56:e6:08:4c:d8:cd:c9:e8:78:cc:9a:0b:42:9e:c0: 80:1b:53:2a:67:2f:0b:81:a8:27:44:4c:3d:db:05: f0:b1:51:d5:8b:c2:11:63:a2:03:38:a8:83:61:cf: c3:3a:c4:ca:3d:94:da:4c:1d:77:79:dc:13:41:2d: 55:c1:fa:b1:22:28:a0:1f:28:dd:6c:48:86:43:fd: b0:d2:3e:a1:f5:e9:ea:aa:5a:66:70:f5:84:26:6e: 72:ef:e8:b3:ce:82:85:e7:4a:a6:26:10:90:bc:fa: d8:f5:86:d9:aa:0b:f4:1b:83:e8:54:27:33:b2:ef: 39:2d:91:60:52:a7:f2:ab:c7:87:a9:2f:64:50:67: af:4e:17:22:16:83:33:f6:2f:51:9a:24:10:54:33: 12:e7:64:30:c0:22:99:45:0e:31:09:ff:64:90:8e: d7:9f:17:5b:f2:8f:8d:27:18:b5:ea:99:04:53:ad: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:11:0F:DA:41:A3:19:4B:65:6E:56:BF:0C:7A:40:09:F7:98:9D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/059b2a6e-0dc8-3000-8de1-205f552c9f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.8.0/23 209.250.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a7:5f:53:69:b5:25:e0:37:5e:23:ad:ce:8b:1b:37:85:de: ac:c5:40:a7:f3:06:d6:3f:a4:14:09:91:3b:58:c0:a3:5e:93: 60:8c:48:f1:f0:81:f5:62:e8:a6:f8:3c:7c:f7:36:40:a6:21: 3c:41:8e:00:d3:e2:04:79:2f:97:cd:17:0b:f0:da:92:2b:17: 81:ed:99:86:40:2e:7d:d4:06:89:81:91:af:a0:65:43:fa:8f: 5a:8b:7c:21:7b:de:2e:80:c7:43:32:f2:24:f2:83:78:0a:81: be:7f:dc:04:bf:14:78:6a:dc:4c:d2:6f:76:df:54:91:ff:61: 8b:bf:ed:f3:ab:fe:2c:5b:40:bd:22:74:be:57:13:d7:d2:a1: 1e:ce:2d:10:8e:4a:96:f6:06:56:32:41:ed:60:27:d2:dd:d6: cb:74:61:ba:16:96:5b:58:3a:9f:78:c3:80:bd:72:86:07:9b: e3:7e:da:ce:71:d4:75:80:3c:9c:d3:1f:7d:03:cf:dd:80:2a: 1f:1f:c2:d0:c1:d8:41:9e:95:1f:05:d1:20:bb:35:54:ba:53: 8d:d3:bc:b7:de:ff:39:fe:64:19:c4:b8:16:44:f1:5f:5a:44: d4:c0:4c:6e:72:e9:63:2f:e7:36:54:c4:b3:de:6d:0e:92:c6: 51:78:83:41 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnIE+0xxjsuLGj7kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MDUwODA0NTUzOVoXDTI1MDgwNjA0NTUzOVowLzEtMCsGA1UEAxMk ODgzZDcxNDEtNmEyNS00OGYxLTg2YmMtMjI4ZGEwNGNlNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2sRNOd5Lww3AhoI8Ct8Qc+dD2qUYM8N59pj j+cH/7KBU0FHTQ1+bexuydHQqrRl2A3TFrdvKYTfK+nqog5BskAv6Mg0q34sedFW 5ghM2M3J6HjMmgtCnsCAG1MqZy8LgagnREw92wXwsVHVi8IRY6IDOKiDYc/DOsTK PZTaTB13edwTQS1VwfqxIiigHyjdbEiGQ/2w0j6h9enqqlpmcPWEJm5y7+izzoKF 50qmJhCQvPrY9YbZqgv0G4PoVCczsu85LZFgUqfyq8eHqS9kUGevThciFoMz9i9R miQQVDMS52QwwCKZRQ4xCf9kkI7Xnxdb8o+NJxi16pkEU63AiQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJARD9pBoxlLZW5Wvwx6QAn3mJ3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvMDU5YjJhNmUtMGRjOC0z MDAwLThkZTEtMjA1ZjU1MmM5ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0foIAwQB 0foMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADSnX1NptSXgN14jrc6LGzeF3qzFQKfzBtY/pBQJkTtYwKNe k2CMSPHwgfVi6Kb4PHz3NkCmITxBjgDT4gR5L5fNFwvw2pIrF4HtmYZALn3UBomB ka+gZUP6j1qLfCF73i6Ax0My8iTyg3gKgb5/3AS/FHhq3EzSb3bfVJH/YYu/7fOr /ixbQL0idL5XE9fSoR7OLRCOSpb2BlYyQe1gJ9Ld1st0YboWlltYOp94w4C9coYH m+N+2s5x1HWAPJzTH30Dz92AKh8fwtDB2EGelR8F0SC7NVS6U43TvLfe/zn+ZBnE uBZE8V9aRNTATG5y6WMv5zZUxLPebQ6SxlF4g0E= -----END CERTIFICATE-----Generated at Mon May 12 00:22:14 2025 by rpki-client