$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/039887d3-7636-3f02-9ce7-7e6cfd10d1f7.roa File: 039887d3-7636-3f02-9ce7-7e6cfd10d1f7.roa (raw, json) Hash identifier: OOkPai7QUI3X/KKpzND51YufxbP3Zd0bwH0W5q88Ch0= Subject key identifier: 7D:75:25:5A:82:2F:20:C8:A7:65:24:76:C5:2D:17:75:8F:02:12:FD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9D90C2587B4A1AC1AA5D1C8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/039887d3-7636-3f02-9ce7-7e6cfd10d1f7.roa Signing time: Mon 25 Aug 2025 17:34:22 +0000 ROA not before: Mon 25 Aug 2025 17:34:22 +0000 ROA not after: Sun 23 Nov 2025 18:34:22 +0000 asID: 31898 IP address blocks: 209.17.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:d9:0c:25:87:b4:a1:ac:1a:a5:d1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:34:22 2025 GMT Not After : Nov 23 18:34:22 2025 GMT Subject: CN=a912fdde-8c2e-4959-8f38-7c2c368aa1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:c4:cd:86:db:91:2f:b1:46:02:09:2a:31: a0:3d:94:82:7e:00:f0:d9:d3:df:46:c5:f2:92:6a: a8:c4:18:b5:17:5e:01:9f:64:dd:9e:74:22:32:f4: 34:64:3a:b1:cc:77:07:b1:87:20:9c:1c:6a:8d:a0: 63:16:1d:42:9f:10:fe:50:01:f4:d1:ab:8e:d9:2d: 09:6b:ae:f6:9b:6c:f3:c6:cc:fc:8a:21:7d:7d:ce: b9:34:71:7f:97:c3:15:ef:e2:69:ac:92:67:c9:6a: a2:21:23:f9:cb:cb:a0:e5:ed:72:47:9f:f8:cf:f0: 19:86:e4:09:5a:51:4c:73:69:ae:95:ab:d3:32:2b: d5:b0:fd:86:2a:81:1e:b9:73:2a:f8:f2:39:af:89: 00:6c:d0:4a:7f:86:f8:e7:5d:a5:86:ae:d6:39:69: 1e:14:bb:b7:f4:58:9d:6a:e5:0a:c6:bf:0e:db:ac: e2:22:e7:67:b4:21:54:16:8c:bd:76:30:05:80:31: d2:ff:5e:b2:11:6d:24:ae:5b:ec:36:29:69:76:34: b5:36:2c:b0:85:a0:14:be:85:58:b5:73:1d:44:45: 8b:1b:0d:9a:45:e1:9a:51:97:fa:a5:55:56:7c:04: 7f:e7:0b:40:79:6a:53:ec:41:bc:dc:fa:d7:3e:20: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:75:25:5A:82:2F:20:C8:A7:65:24:76:C5:2D:17:75:8F:02:12:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/039887d3-7636-3f02-9ce7-7e6cfd10d1f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 209.17.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:93:ce:04:10:25:bd:e6:a3:75:68:d6:df:5d:d9:c4:b4:38: 28:af:67:23:98:7c:65:1b:94:6d:ae:e2:b7:d8:90:af:67:a6: 5d:38:e1:ee:2e:29:8a:00:22:48:42:00:b4:92:02:9e:16:dc: d6:4c:f0:65:24:a7:82:88:17:18:7b:5f:c8:b8:60:24:00:03: 4d:7c:72:49:4d:46:b8:73:ca:d9:de:e7:6b:0f:a1:71:13:f4: 90:8c:f8:41:ce:f7:62:62:c4:2d:d2:b5:0f:8a:62:ea:db:c9: 6a:3f:f5:2d:f9:94:8f:48:6a:b7:88:1a:c2:9f:af:a2:98:5e: 5b:7c:d1:9e:1f:68:de:26:43:93:9e:bd:18:a8:ad:fa:96:8c: 2f:c2:72:34:dd:0d:86:8c:80:6d:9b:cf:78:f8:4d:67:c7:c3: ce:cd:04:d8:00:64:2f:b8:2f:ef:32:c0:2a:80:c3:ef:7f:02: 7a:0f:ec:b7:ed:11:96:f4:e8:43:f6:ed:a6:e7:da:39:ef:2a: 97:ae:9f:70:94:05:a9:e7:64:97:31:8a:62:63:7f:a2:b1:2e: f5:24:75:eb:a7:70:67:62:a1:85:5a:64:ab:cb:01:26:3e:03: 22:e4:1d:a6:07:c9:ac:e7:c2:6b:ba:df:07:25:4c:c3:c8:dc: df:ef:38:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr52Qwlh7ShrBql0cgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MzQyMloXDTI1MTEyMzE4MzQyMlowLzEtMCsGA1UEAxMk YTkxMmZkZGUtOGMyZS00OTU5LThmMzgtN2MyYzM2OGFhMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/TEzYbbkS+xRgIJKjGgPZSCfgDw2dPfRsXy kmqoxBi1F14Bn2TdnnQiMvQ0ZDqxzHcHsYcgnBxqjaBjFh1CnxD+UAH00auO2S0J a672m2zzxsz8iiF9fc65NHF/l8MV7+JprJJnyWqiISP5y8ug5e1yR5/4z/AZhuQJ WlFMc2mulavTMivVsP2GKoEeuXMq+PI5r4kAbNBKf4b4512lhq7WOWkeFLu39Fid auUKxr8O26ziIudntCFUFoy9djAFgDHS/16yEW0krlvsNilpdjS1NiywhaAUvoVY tXMdREWLGw2aReGaUZf6pVVWfAR/5wtAeWpT7EG83PrXPiDlpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH11JVqCLyDIp2UkdsUtF3WPAhL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDM5ODg3ZDMtNzYzNi0z ZjAyLTljZTctN2U2Y2ZkMTBkMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyTzgQQJb3mo3Vo1t9d2cS0OCivZyOYfGUblG2u4rfYkK9npl044e4u KYoAIkhCALSSAp4W3NZM8GUkp4KIFxh7X8i4YCQAA018cklNRrhzytne52sPoXET 9JCM+EHO92JixC3StQ+KYurbyWo/9S35lI9IareIGsKfr6KYXlt80Z4faN4mQ5Oe vRiorfqWjC/CcjTdDYaMgG2bz3j4TWfHw87NBNgAZC+4L+8ywCqAw+9/AnoP7Lft EZb06EP27abn2jnvKpeun3CUBannZJcximJjf6KxLvUkdeuncGdioYVaZKvLASY+ AyLkHaYHyaznwmu63wclTMPI3N/vOHE= -----END CERTIFICATE-----Generated at Thu Oct 9 00:56:03 2025 by rpki-client