$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa File: 8ac69690-c3b8-3bba-82fc-102f743b397b.roa (raw, json) Hash identifier: XhEaDcsJ0rR04UhQZfhY7eK/6iaKjQOpBnTFwbyQpug= Subject key identifier: EE:7A:1C:17:84:EA:5A:DB:A5:D3:DD:E2:6A:A4:A6:75:31:AA:37:8D Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849D42FA9D60358161B49833E60 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 136448 IP address blocks: 209.9.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a9:d6:03:58:16:1b:49:83:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=cdcb1e19-de3e-4e07-8659-4af3d6269329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:55:70:59:11:0b:19:dc:b3:5b:4b:3d:57: e1:d6:97:63:a6:75:d4:59:2b:4e:ef:7f:68:ba:ae: 4c:3b:f9:41:07:f0:bc:e0:a6:41:87:82:d0:91:33: b7:9e:27:56:87:77:c9:a6:ab:57:f9:91:ed:6d:3d: 27:b5:3b:9c:f3:10:e3:cf:ce:f8:4e:7f:73:bf:97: c9:2f:45:e4:3d:47:ba:a8:9c:e9:72:5f:83:11:bc: d2:63:6c:1a:ad:cc:68:6f:4b:48:c9:dc:c2:ba:5f: b5:96:65:46:ba:8b:7b:53:d3:ce:4b:69:80:e7:09: 45:d2:bd:69:21:e6:aa:ed:11:eb:d6:a0:1b:d7:6d: 44:45:9a:56:3e:1d:f9:8e:d2:be:07:5a:ac:5b:3f: b3:74:6c:c6:80:3e:9e:39:b9:c6:c2:98:b3:c2:39: 32:f5:a3:b0:3e:20:34:96:02:ca:85:7c:be:82:54: ac:82:1b:35:b3:2a:b5:ae:ee:2c:9c:9b:72:19:a0: 60:f5:6d:21:c9:a1:48:b9:16:07:e8:9e:cd:c7:f6: 81:69:e3:83:9e:1c:a2:7e:16:5e:ad:84:9e:ee:cb: 29:fc:d6:3b:8f:5d:41:f6:b6:b6:9e:d5:55:8b:57: 12:7c:d5:09:de:a4:e5:e4:35:0d:eb:5e:d6:72:01: 85:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7A:1C:17:84:EA:5A:DB:A5:D3:DD:E2:6A:A4:A6:75:31:AA:37:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6e:9a:97:5a:9c:c6:0e:0f:01:8b:d8:07:7f:a1:47:22:d5: f3:04:4e:a2:a8:71:75:f9:a4:4e:24:4f:e3:9b:85:ee:11:c8: 0e:40:5a:42:bc:55:90:3a:36:a9:2a:35:83:da:96:44:11:e3: 01:96:92:21:31:11:89:86:75:ee:2a:64:a7:14:49:2b:b9:e6: e8:41:b2:44:9e:12:87:79:35:35:c5:ab:56:c7:1a:3a:63:2e: 48:0b:05:3f:e5:23:20:cb:53:ec:02:4a:52:79:a0:15:62:dc: 1c:77:41:1e:d4:f3:5d:96:6e:80:da:61:b7:dc:40:12:41:eb: 16:8e:b5:19:91:a6:0d:89:b3:dd:ae:37:09:80:49:d1:d3:f1: 63:06:93:b5:61:95:f3:14:b8:8f:91:49:82:5d:5d:b2:1a:2f: 3e:0a:c1:d1:60:57:5a:4b:07:bb:a3:31:97:8f:47:fe:03:f1: 59:f7:b7:84:29:d4:b5:08:d5:47:78:b7:93:df:e8:44:cb:0c: 61:e5:1c:39:37:8a:65:da:b1:21:ca:c7:65:ab:87:19:1f:3e: e8:29:31:bf:5f:24:b8:25:bd:b4:9a:5d:90:b2:7d:b4:a5:d1: e9:05:c1:68:59:32:7b:36:bf:f7:40:71:70:0b:ba:0d:09:73: b0:56:e4:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6nWA1gWG0mDPmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2RjYjFlMTktZGUzZS00ZTA3LTg2NTktNGFmM2Q2MjY5MzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdtVcFkRCxncs1tLPVfh1pdjpnXUWStO739o uq5MO/lBB/C84KZBh4LQkTO3nidWh3fJpqtX+ZHtbT0ntTuc8xDjz874Tn9zv5fJ L0XkPUe6qJzpcl+DEbzSY2warcxob0tIydzCul+1lmVGuot7U9POS2mA5wlF0r1p Ieaq7RHr1qAb121ERZpWPh35jtK+B1qsWz+zdGzGgD6eObnGwpizwjky9aOwPiA0 lgLKhXy+glSsghs1syq1ru4snJtyGaBg9W0hyaFIuRYH6J7Nx/aBaeODnhyifhZe rYSe7ssp/NY7j11B9ra2ntVVi1cSfNUJ3qTl5DUN617WcgGF3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO56HBeE6lrbpdPd4mqkpnUxqjeNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOGFjNjk2OTAtYzNiOC0z YmJhLTgyZmMtMTAyZjc0M2IzOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRumpdanMYODwGL2Ad/oUci1fMETqKocXX5pE4kT+Obhe4RyA5AWkK8 VZA6NqkqNYPalkQR4wGWkiExEYmGde4qZKcUSSu55uhBskSeEod5NTXFq1bHGjpj LkgLBT/lIyDLU+wCSlJ5oBVi3Bx3QR7U812WboDaYbfcQBJB6xaOtRmRpg2Js92u NwmASdHT8WMGk7VhlfMUuI+RSYJdXbIaLz4KwdFgV1pLB7ujMZePR/4D8Vn3t4Qp 1LUI1Ud4t5Pf6ETLDGHlHDk3imXasSHKx2WrhxkfPugpMb9fJLglvbSaXZCyfbSl 0ekFwWhZMns2v/dAcXALug0Jc7BW5H0= -----END CERTIFICATE-----Generated at Sun Jun 29 12:24:59 2025 by rpki-client