$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5a4f2fc8-2623-3e82-93b9-837f08f94b18.roa File: 5a4f2fc8-2623-3e82-93b9-837f08f94b18.roa (raw, json) Hash identifier: V0ng0LOMB/kH0A06UBmLXuxmJZlSbOERrL4DWs52nQE= Subject key identifier: 23:E0:00:4A:85:CF:4F:23:A5:CC:62:05:6F:AE:90:06:B9:59:39:25 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849CBCF9C25C4D67D36937AFE80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5a4f2fc8-2623-3e82-93b9-837f08f94b18.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 17984 IP address blocks: 205.252.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9c:25:c4:d6:7d:36:93:7a:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=b76ba0b3-c2b7-4f7b-a90b-f244bcba17e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:39:2d:c3:d0:db:93:20:ae:58:1f:0e:f9: 97:e5:01:10:03:e6:46:d6:f9:c6:5d:ae:cc:23:9f: 41:9a:3d:c0:54:69:ac:ac:f5:79:79:22:11:b9:10: ce:35:67:07:c7:df:ff:ed:63:df:d1:97:5b:bf:81: 3d:00:03:a3:d2:12:79:5b:49:f3:6f:49:da:77:95: bc:db:b9:d8:04:0a:01:10:0c:ef:f3:d2:6a:ac:a4: 4e:62:ad:52:0b:9f:4c:c6:fc:d9:25:4d:2b:70:6e: e5:50:a6:f4:67:f8:7e:04:a6:0a:cc:1b:a3:00:ef: 45:28:ef:90:e3:80:11:51:38:39:58:3a:8f:95:6d: 80:6c:68:c8:06:b4:1c:84:5e:ca:f7:06:fd:8d:43: f3:88:91:31:de:fd:29:f5:10:7f:4c:a5:24:79:54: 60:4e:0b:7e:7d:3b:34:6e:7a:86:66:bd:15:8d:d5: 0a:05:61:fd:c8:81:bf:72:89:d6:fd:0d:da:7f:36: 37:55:5c:41:c3:10:32:04:1e:44:e2:1a:78:67:dc: 9d:80:89:0b:cb:d1:89:c0:20:7b:32:5e:42:ec:2f: f9:d1:06:87:46:ce:c2:34:10:fa:0c:6a:88:6a:c1: 41:fa:15:e0:ad:0b:07:18:67:8d:07:fe:3f:05:60: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E0:00:4A:85:CF:4F:23:A5:CC:62:05:6F:AE:90:06:B9:59:39:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5a4f2fc8-2623-3e82-93b9-837f08f94b18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 205.252.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:00:14:28:88:2b:f0:66:b4:fd:26:50:96:77:85:4f:0a:72: c2:b4:f3:c6:02:53:3b:04:2b:6a:02:31:82:96:9a:8a:a5:70: 30:9a:76:43:96:06:fe:02:12:4a:e5:f4:b0:2a:d7:cc:4c:ae: dc:64:08:05:98:63:90:ff:d9:91:1a:09:3d:1f:2d:20:27:a4: 60:7f:bc:5b:70:20:c5:da:6e:b4:d1:a1:87:84:86:0a:51:a6: d4:cf:78:2b:05:9f:a4:bb:a7:b8:ea:e3:0a:05:f8:a5:eb:48: 20:0b:f2:da:33:d2:86:65:e9:17:95:29:2c:b8:09:af:6e:e4: 6e:07:8a:44:e8:83:b0:2e:e8:25:93:22:b5:86:bb:84:f2:e8: 0e:e6:ef:03:a7:a4:f8:7c:59:54:f0:8c:b2:1b:8d:8b:8c:a9: c1:d2:60:5e:e1:61:1e:55:8c:1e:df:87:2e:bf:a6:b0:b3:a6: d2:17:13:5c:f6:2c:0a:f6:4a:7a:f0:35:bf:15:23:a6:23:78: bd:19:9e:9e:ec:92:68:e0:14:06:71:5b:fb:a2:3e:7c:66:90: f4:96:53:4d:c5:37:45:ce:3b:15:93:dc:68:5a:24:92:d7:cd: 64:f2:00:bf:3d:b1:e7:79:5d:8d:64:64:12:c6:ec:60:36:d2: 9c:4b:aa:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5wlxNZ9NpN6/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk Yjc2YmEwYjMtYzJiNy00ZjdiLWE5MGItZjI0NGJjYmExN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF45LcPQ25MgrlgfDvmX5QEQA+ZG1vnGXa7M I59Bmj3AVGmsrPV5eSIRuRDONWcHx9//7WPf0Zdbv4E9AAOj0hJ5W0nzb0nad5W8 27nYBAoBEAzv89JqrKROYq1SC59MxvzZJU0rcG7lUKb0Z/h+BKYKzBujAO9FKO+Q 44ARUTg5WDqPlW2AbGjIBrQchF7K9wb9jUPziJEx3v0p9RB/TKUkeVRgTgt+fTs0 bnqGZr0VjdUKBWH9yIG/conW/Q3afzY3VVxBwxAyBB5E4hp4Z9ydgIkLy9GJwCB7 Ml5C7C/50QaHRs7CNBD6DGqIasFB+hXgrQsHGGeNB/4/BWDmXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPgAEqFz08jpcxiBW+ukAa5WTklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNWE0ZjJmYzgtMjYyMy0z ZTgyLTkzYjktODM3ZjA4Zjk0YjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzfzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4AFCiIK/BmtP0mUJZ3hU8KcsK088YCUzsEK2oCMYKWmoqlcDCadkOW Bv4CEkrl9LAq18xMrtxkCAWYY5D/2ZEaCT0fLSAnpGB/vFtwIMXabrTRoYeEhgpR ptTPeCsFn6S7p7jq4woF+KXrSCAL8toz0oZl6ReVKSy4Ca9u5G4HikTog7Au6CWT IrWGu4Ty6A7m7wOnpPh8WVTwjLIbjYuMqcHSYF7hYR5VjB7fhy6/prCzptIXE1z2 LAr2SnrwNb8VI6YjeL0Znp7skmjgFAZxW/uiPnxmkPSWU03FN0XOOxWT3GhaJJLX zWTyAL89sed5XY1kZBLG7GA20pxLqvY= -----END CERTIFICATE-----Generated at Sun Jun 29 12:25:29 2025 by rpki-client