$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa File: 74295fbe-6636-37e1-8ba4-1835f48000f7.roa (raw, json) Hash identifier: 9Ufjsz4Hg9+ad9f9cjCdOBYi5fZLO/mr68JyU2gUle4= Subject key identifier: 1A:B2:A1:FD:35:E9:F0:C9:58:25:97:26:AB:72:01:57:E6:61:02:67 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584A4C3B0DB0A5629F84C8D20B80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 4760 IP address blocks: 209.9.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0d:b0:a5:62:9f:84:c8:d2:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=db2561de-561a-4608-8f45-02a73029a0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:da:5f:ca:fc:4d:5a:82:ab:3c:fc:e3:48:17: 4b:df:11:da:8f:bd:59:26:ea:bc:a8:ee:79:96:9b: 68:3b:b3:86:bc:70:de:9f:a8:76:0a:a6:0c:d9:8f: d1:d4:94:34:72:48:76:02:d8:d6:97:bb:9a:87:dc: 16:4f:c0:42:b5:37:d5:95:12:16:15:d2:50:be:9a: 25:b8:4f:1d:7b:d4:8f:a7:05:9a:3b:9a:49:9e:45: 10:49:ff:9c:ca:26:a2:09:8f:06:a6:ef:48:9f:86: a1:b1:6f:f6:8c:79:4c:2c:42:1f:a6:30:47:c2:d4: a3:fb:f3:30:eb:66:4f:02:14:f2:ec:b7:6e:62:f1: c3:c6:2b:f2:78:6a:4d:4d:43:90:d6:bf:50:31:8c: 3e:8f:99:ef:f4:3d:21:90:d0:f4:d1:c9:96:11:7c: 1b:e3:09:f4:ef:ae:72:09:da:97:4e:61:6e:02:8d: 69:99:e6:3b:1a:74:e4:d8:c9:a5:55:af:5f:2d:53: c1:a0:6c:26:bd:d8:ad:f3:0d:58:9e:24:e9:3b:7e: c4:6b:2e:1b:c0:39:d9:e4:34:88:33:2c:ca:be:07: 9d:e1:66:75:08:c5:ed:3c:4c:ac:78:8b:e6:e6:d9: 2f:e0:12:67:b7:51:82:42:e6:bf:e9:ab:97:b2:0b: a7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B2:A1:FD:35:E9:F0:C9:58:25:97:26:AB:72:01:57:E6:61:02:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:f8:9c:84:7e:e2:65:15:be:a6:cd:36:fb:e6:3c:0f:b9:a8: d9:76:51:18:10:a6:0c:19:54:06:aa:fc:5d:6b:17:5d:09:15: 99:d7:ec:17:bb:61:bc:2e:02:8e:d3:41:ef:62:7c:8f:a5:16: 1c:cf:ef:a8:13:48:55:8d:dd:d9:68:63:8b:c8:16:fb:b7:48: 22:1e:d2:aa:58:b8:58:af:8b:25:17:39:e0:75:97:20:2c:ba: 6b:59:df:1d:9a:35:ea:00:09:9e:f2:6d:bc:f4:24:46:26:b1: e7:71:dd:e9:9f:51:a4:22:b4:62:19:9e:07:ad:7a:e3:ee:59: 30:8d:c5:fc:5e:2e:69:08:e7:92:35:a3:a1:ae:24:bc:30:4a: 48:23:a2:5d:7f:11:03:a9:ba:cb:cd:90:99:80:9a:87:4a:8b: f3:6c:10:dc:f1:f0:2b:a2:13:a0:22:93:36:5d:72:ef:ee:11: 71:4e:36:ae:ee:69:90:26:73:66:01:5b:49:f0:85:ed:4d:d9: f9:60:5c:fa:49:20:4f:c1:33:39:1e:a6:91:00:10:2a:45:96: 98:9e:33:01:31:0d:cc:43:75:1e:3d:c0:3d:39:47:7d:f1:7b: a0:fe:d6:4d:59:b7:35:20:8a:80:3f:80:7a:97:c4:44:36:50: e5:89:f8:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOw2wpWKfhMjSC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZGIyNTYxZGUtNTYxYS00NjA4LThmNDUtMDJhNzMwMjlhMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdpfyvxNWoKrPPzjSBdL3xHaj71ZJuq8qO55 lptoO7OGvHDen6h2CqYM2Y/R1JQ0ckh2AtjWl7uah9wWT8BCtTfVlRIWFdJQvpol uE8de9SPpwWaO5pJnkUQSf+cyiaiCY8Gpu9In4ahsW/2jHlMLEIfpjBHwtSj+/Mw 62ZPAhTy7LduYvHDxivyeGpNTUOQ1r9QMYw+j5nv9D0hkND00cmWEXwb4wn0765y CdqXTmFuAo1pmeY7GnTk2MmlVa9fLVPBoGwmvdit8w1YniTpO37Eay4bwDnZ5DSI MyzKvged4WZ1CMXtPEyseIvm5tkv4BJnt1GCQua/6auXsgunOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqyof016fDJWCWXJqtyAVfmYQJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNzQyOTVmYmUtNjYzNi0z N2UxLThiYTQtMTgzNWY0ODAwMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKP4nIR+4mUVvqbNNvvmPA+5qNl2URgQpgwZVAaq/F1rF10JFZnX7Be7 YbwuAo7TQe9ifI+lFhzP76gTSFWN3dloY4vIFvu3SCIe0qpYuFiviyUXOeB1lyAs umtZ3x2aNeoACZ7ybbz0JEYmsedx3emfUaQitGIZngeteuPuWTCNxfxeLmkI55I1 o6GuJLwwSkgjol1/EQOpusvNkJmAmodKi/NsENzx8CuiE6AikzZdcu/uEXFONq7u aZAmc2YBW0nwhe1N2flgXPpJIE/BMzkeppEAECpFlpieMwExDcxDdR49wD05R33x e6D+1k1ZtzUgioA/gHqXxEQ2UOWJ+EE= -----END CERTIFICATE-----Generated at Sun Jun 29 13:48:21 2025 by rpki-client