$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa File: d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa (raw, json) Hash identifier: 9zpr1cxb9Gp8rUDco5xS9v+rx5t/oZRnq6hGce/3kq4= Subject key identifier: 38:B9:62:13:C3:9B:06:8C:64:C4:47:B9:AB:E8:A0:FD:84:7C:2F:D5 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849DC8FBA045D712B5D71095CA0 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 198148 IP address blocks: 209.8.144.0/22 maxlen: 24 209.9.2.0/23 maxlen: 24 209.9.72.0/22 maxlen: 24 209.9.104.0/21 maxlen: 24 209.9.112.0/21 maxlen: 24 209.9.128.0/21 maxlen: 24 209.9.208.0/21 maxlen: 24 209.9.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:ba:04:5d:71:2b:5d:71:09:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=544c42f8-6358-4222-9208-7148da9de2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:6e:77:37:48:54:1f:a7:35:2d:d7:64:27: 41:01:19:cf:2f:2f:a6:d4:5f:fd:b9:57:7b:f6:9b: 49:64:c0:f6:10:8d:be:15:e5:c8:af:d8:5e:de:ed: 54:2a:fa:90:bc:75:89:01:37:13:e3:c9:97:ff:61: 78:42:57:33:1d:a3:18:dd:7f:94:d4:ff:84:16:2d: ef:b4:af:e3:33:f5:0c:07:7d:ca:cd:f0:32:19:ad: a2:0a:4b:81:e9:19:81:09:5a:f0:3f:96:93:c0:c1: e5:e3:79:42:2d:e9:ea:29:8a:da:dc:a9:92:60:14: c1:31:50:35:3f:d8:98:e0:1d:5e:74:21:09:8f:0d: 26:f3:34:3d:e6:d3:6d:30:71:31:58:a2:ab:22:f7: 1b:85:3e:fb:4b:77:16:da:31:ea:e8:63:35:00:d0: bb:65:b1:ec:61:e8:7f:25:b2:61:f1:81:1d:e9:54: b6:fe:5e:23:3e:a4:52:5d:6e:84:59:b7:7b:0e:a1: d7:71:08:fd:0b:c1:8b:b0:6b:68:33:7a:27:cd:cf: bf:38:41:ea:d4:6a:73:8c:da:94:6b:27:cd:7b:2b: 1e:77:df:92:a0:98:81:12:10:8f:97:2a:be:e7:47: 00:0a:0c:f9:61:e4:6a:24:40:a2:9a:90:65:f4:0b: 51:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B9:62:13:C3:9B:06:8C:64:C4:47:B9:AB:E8:A0:FD:84:7C:2F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.144.0/22 209.9.2.0/23 209.9.72.0/22 209.9.104.0-209.9.119.255 209.9.128.0/21 209.9.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:4c:67:56:b2:fc:09:56:23:93:34:e1:3d:ad:ea:f6:7a:8e: 84:0e:19:9e:b0:d7:c4:c9:14:bf:33:71:d4:24:41:fc:da:7b: 5c:76:96:72:b1:7b:b4:60:7f:23:fe:56:df:35:4c:17:14:d9: cd:58:13:8e:e3:ca:7c:9f:97:8e:e2:e4:b7:f7:82:6e:87:5c: f7:fe:d3:d1:4a:20:85:2c:f6:84:c6:9b:a7:07:ba:8a:ad:e5: eb:04:63:ef:5d:76:e4:e2:97:13:61:e5:f1:29:96:1a:71:70: b0:80:9c:79:26:d6:1e:b4:1a:12:79:a3:1e:ef:70:e3:2e:8b: ee:4f:19:a5:ba:b0:92:ca:28:96:78:46:33:3a:1e:21:7d:d9: e8:be:b8:1e:7b:95:93:0e:2d:dd:40:87:dc:4f:37:da:79:63: 49:88:7e:78:47:c0:e7:1c:2f:e0:13:f2:e8:66:b2:f7:f7:e3: a6:50:3c:ea:5b:de:7c:f2:ab:8d:b0:e6:15:ee:64:20:49:d6: 79:f1:31:12:0a:0b:83:2a:2c:50:eb:2f:26:84:d8:76:ee:43: d0:ff:a4:aa:34:05:bc:dc:c5:9c:b2:70:f7:85:15:60:04:fd: 42:de:d8:7b:4d:89:57:2c:fc:ae:f5:1d:b4:e8:4f:49:bd:f5: 24:68:27:8f -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEncj7oEXXErXXEJXKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk NTQ0YzQyZjgtNjM1OC00MjIyLTkyMDgtNzE0OGRhOWRlMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig1udzdIVB+nNS3XZCdBARnPLy+m1F/9uVd7 9ptJZMD2EI2+FeXIr9he3u1UKvqQvHWJATcT48mX/2F4QlczHaMY3X+U1P+EFi3v tK/jM/UMB33KzfAyGa2iCkuB6RmBCVrwP5aTwMHl43lCLenqKYra3KmSYBTBMVA1 P9iY4B1edCEJjw0m8zQ95tNtMHExWKKrIvcbhT77S3cW2jHq6GM1ANC7ZbHsYeh/ JbJh8YEd6VS2/l4jPqRSXW6EWbd7DqHXcQj9C8GLsGtoM3onzc+/OEHq1GpzjNqU ayfNeysed9+SoJiBEhCPlyq+50cACgz5YeRqJECimpBl9AtRkwIDAQABo4IDezCC A3cwHQYDVR0OBBYEFDi5YhPDmwaMZMRHuavooP2EfC/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZDU3ZWQ0ZDYtOTk1My0z ZWU5LTljZTEtNWRjMDZkNzAyYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQC0QiQAwQB 0QkCAwQC0QlIMAwDBAPRCWgDBAPRCXADBAPRCYADBATRCdAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAs0xn VrL8CVYjkzThPa3q9nqOhA4ZnrDXxMkUvzNx1CRB/Np7XHaWcrF7tGB/I/5W3zVM FxTZzVgTjuPKfJ+XjuLkt/eCbodc9/7T0UoghSz2hMabpwe6iq3l6wRj71125OKX E2Hl8SmWGnFwsICceSbWHrQaEnmjHu9w4y6L7k8ZpbqwksoolnhGMzoeIX3Z6L64 HnuVkw4t3UCH3E832nljSYh+eEfA5xwv4BPy6Gay9/fjplA86lvefPKrjbDmFe5k IEnWefExEgoLgyosUOsvJoTYdu5D0P+kqjQFvNzFnLJw94UVYAT9Qt7Ye02JVyz8 rvUdtOhPSb31JGgnjw== -----END CERTIFICATE-----Generated at Mon Jun 30 01:00:53 2025 by rpki-client