$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/80e52123-939a-321b-9214-9cc8d4826f88.roa File: 80e52123-939a-321b-9214-9cc8d4826f88.roa (raw, json) Hash identifier: lgvgu+6UF5MAn0CLfN8+TckfIcXHSWmutE6Iz0j72RE= Subject key identifier: DB:B8:01:7C:2C:19:31:68:E3:B1:5A:94:B9:97:03:34:B2:D2:7E:99 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849DC8FBB972381A66E9197E6C0 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/80e52123-939a-321b-9214-9cc8d4826f88.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 7262 IP address blocks: 209.9.216.0/24 maxlen: 24 209.9.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:bb:97:23:81:a6:6e:91:97:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=25de719b-1dfd-4c4d-97af-b9d3f7f1901a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:91:74:20:c2:70:2b:c9:a2:80:00:e3:72:01: 31:5f:ce:f7:8e:2c:e7:2f:f0:fc:c6:5d:1c:6c:2c: 65:4d:51:ce:45:06:ee:56:aa:f0:4c:33:12:6c:d5: 96:0e:34:3a:46:1c:5a:d2:d2:0a:37:6e:46:d4:39: 8f:a7:c4:e6:0e:9c:e1:9f:94:1e:63:4c:37:34:9e: 1d:14:29:43:3c:b5:c1:0b:24:24:18:d2:d5:32:5f: 78:db:64:f5:a1:52:dd:99:32:33:4f:17:ef:6f:8b: cf:4d:b7:ac:3b:02:e0:8a:03:67:7c:9c:aa:b1:d5: e3:f6:a0:45:22:fe:a0:47:f1:2b:b5:66:20:c5:05: 9d:3d:88:19:c9:ae:7b:2c:58:0e:4d:06:6f:62:3c: f6:ec:76:c9:65:83:ce:39:ff:07:85:6e:ba:1d:86: 40:de:ab:9e:5f:cb:6b:21:f8:12:6e:4b:af:46:99: 08:96:a1:8b:54:1b:15:c7:0a:4e:9b:b3:f8:16:ab: c8:05:c9:6d:4c:85:ff:05:af:1c:08:04:f7:ae:f3: 56:06:ed:cc:28:3e:7a:d9:20:ab:5a:c8:d9:f5:38: 26:eb:2d:76:f5:70:54:5d:f5:66:96:7a:f4:50:ef: 6b:17:04:9b:ae:f5:6e:70:79:37:16:1f:ee:3e:f8: 2b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B8:01:7C:2C:19:31:68:E3:B1:5A:94:B9:97:03:34:B2:D2:7E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/80e52123-939a-321b-9214-9cc8d4826f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:57:f5:e9:ac:78:bb:d5:8a:5a:d2:ac:6b:aa:55:52:ee:08: f4:64:12:3d:bc:e7:00:f7:87:58:88:9a:e4:65:d4:c6:10:da: 75:60:8e:6a:6b:4d:ce:30:67:71:e2:e7:e9:91:69:8a:9e:e2: 44:55:94:e9:6a:4f:2d:d2:ff:40:0e:38:23:3c:e4:79:62:39: cd:fa:b7:1b:bb:a4:ae:b6:27:01:0d:5f:25:dd:e5:88:0d:a0: 7a:17:f6:30:7f:f0:15:dc:50:0a:5f:53:35:c2:44:f3:4d:bb: b8:2a:72:3c:44:be:25:e1:cc:4c:9c:0a:b7:76:58:f4:8e:85: 24:94:fa:7d:0c:bb:de:fe:05:a9:c2:04:39:d1:b6:06:e6:4a: bc:17:23:12:44:ea:ea:a9:30:38:6c:8c:26:43:6e:6f:06:e9: b7:4a:31:8e:5b:c9:00:31:68:1c:d5:f7:00:9e:57:94:ac:d7: b5:d3:cb:c3:a1:4a:d8:c2:45:3d:52:9e:ad:0c:dd:a5:c4:84: 7d:24:b8:ba:b4:28:d8:5a:0d:fb:25:d8:1a:c0:48:b3:0d:93: f9:9a:f8:62:c4:c0:c1:48:91:ad:7f:ae:0d:25:30:5a:61:87: ef:f5:a7:b0:20:51:82:97:5d:cd:4e:84:d4:65:42:5b:28:fa: ed:2c:78:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7uXI4GmbpGX5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MjVkZTcxOWItMWRmZC00YzRkLTk3YWYtYjlkM2Y3ZjE5MDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZF0IMJwK8migADjcgExX873jiznL/D8xl0c bCxlTVHORQbuVqrwTDMSbNWWDjQ6Rhxa0tIKN25G1DmPp8TmDpzhn5QeY0w3NJ4d FClDPLXBCyQkGNLVMl9422T1oVLdmTIzTxfvb4vPTbesOwLgigNnfJyqsdXj9qBF Iv6gR/ErtWYgxQWdPYgZya57LFgOTQZvYjz27HbJZYPOOf8HhW66HYZA3queX8tr IfgSbkuvRpkIlqGLVBsVxwpOm7P4FqvIBcltTIX/Ba8cCAT3rvNWBu3MKD562SCr WsjZ9Tgm6y129XBUXfVmlnr0UO9rFwSbrvVucHk3Fh/uPvgrmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu4AXwsGTFo47FalLmXAzSy0n6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvODBlNTIxMjMtOTM5YS0z MjFiLTkyMTQtOWNjOGQ0ODI2Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJX9emseLvVilrSrGuqVVLuCPRkEj285wD3h1iImuRl1MYQ2nVgjmpr Tc4wZ3Hi5+mRaYqe4kRVlOlqTy3S/0AOOCM85HliOc36txu7pK62JwENXyXd5YgN oHoX9jB/8BXcUApfUzXCRPNNu7gqcjxEviXhzEycCrd2WPSOhSSU+n0Mu97+BanC BDnRtgbmSrwXIxJE6uqpMDhsjCZDbm8G6bdKMY5byQAxaBzV9wCeV5Ss17XTy8Oh StjCRT1Snq0M3aXEhH0kuLq0KNhaDfsl2BrASLMNk/ma+GLEwMFIka1/rg0lMFph h+/1p7AgUYKXXc1OhNRlQlso+u0seG0= -----END CERTIFICATE-----Generated at Sun Jun 8 03:49:34 2025 by rpki-client