$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa File: e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa (raw, json) Hash identifier: AkQw0qzyKnAnMndnsW7/1Y36+Ky6zhU9YtijpSlG9jI= Subject key identifier: F7:07:64:FA:03:FF:E5:39:56:41:2F:2C:07:CD:B8:BF:26:D3:A3:EA Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849D594E320B226E96AFA8EC660 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 3491 IP address blocks: 209.8.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e3:20:b2:26:e9:6a:fa:8e:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=c7159f0a-2896-4124-a0d0-3d6c3c235b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:04:41:db:21:4d:54:c0:91:09:c4:70:6c:82: b5:01:5e:bc:8e:5a:be:6d:9e:42:30:06:03:dd:17: ad:82:d9:86:41:af:1a:4f:5b:58:32:10:09:b9:b1: 1c:a1:a3:78:6a:52:d3:58:c2:fc:a6:2d:56:ad:ee: 58:eb:a9:e6:2f:8b:87:bf:56:87:0d:81:8a:97:42: 6f:98:7b:0f:de:16:b7:97:e2:0a:12:1b:dc:97:fb: 37:47:e1:5c:bf:06:04:a3:39:59:1a:c8:79:37:b7: 8e:bf:a2:51:c6:c7:d1:72:b2:cb:4e:ab:c4:33:43: 38:b4:da:d2:79:fd:96:fb:a5:11:ea:63:23:64:14: f9:59:dd:32:63:7a:f9:3c:b5:97:fd:e5:28:15:ba: e8:78:d4:52:6f:5f:ff:9f:09:c0:5e:b5:ff:c8:0a: b0:d5:14:0e:0c:aa:95:1a:14:6d:4d:5e:2e:98:ca: 76:1f:39:71:41:fc:84:70:7a:70:ef:c7:bc:34:91: e9:a7:c7:89:c9:0c:f5:78:8a:83:86:9b:44:8b:29: 48:eb:52:ec:06:90:a8:0c:79:f2:0a:ce:13:44:28: 7f:29:84:0c:85:f6:90:6c:19:6c:0c:7c:a3:66:c8: 15:3d:aa:1a:76:2c:64:e7:d9:e1:3e:e8:4f:de:6e: e4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:07:64:FA:03:FF:E5:39:56:41:2F:2C:07:CD:B8:BF:26:D3:A3:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ce:f8:6a:77:3b:36:d5:13:ea:dd:99:46:27:2d:8a:3b:f8: b4:5b:bb:39:75:97:cb:d1:c6:4d:3f:74:74:94:c9:af:e1:d8: 84:77:7d:f1:bf:5b:90:7f:a6:e3:0a:98:60:36:1e:7e:8b:87: ad:18:bf:d4:4d:2e:ac:c0:f5:6c:3c:35:11:d2:f3:ca:26:78: af:c2:2d:bd:ac:7d:54:40:88:07:4d:4b:d3:7c:9b:c6:a5:b1: 98:94:c5:c2:72:76:69:78:39:2b:c2:2d:54:6e:db:0f:88:ba: e7:f2:03:8f:86:dd:9f:02:9c:df:04:ea:e7:0e:0c:ce:0e:7a: 9e:c9:28:c9:b0:bf:c5:54:90:35:44:a7:18:78:28:8f:48:0f: 17:7f:0b:2d:ce:fc:72:3a:5e:c8:78:e4:8e:64:4e:fe:c6:e1: d0:c1:b2:38:53:4e:eb:c9:69:d5:76:7b:f2:e6:87:63:1a:aa: 01:fb:50:3b:e2:32:0b:72:77:80:e1:da:b3:65:d4:c0:97:d0: ba:ab:cb:f6:51:30:25:50:aa:d7:23:0b:f6:35:43:8f:45:ca: 07:5e:f5:c1:38:b0:7d:02:d3:c1:53:3d:8a:65:45:d1:f9:21: ce:60:2a:62:68:c5:36:b4:6e:8a:80:29:30:ae:7e:35:86:41: ae:c2:cf:87 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnVlOMgsibpavqOxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YzcxNTlmMGEtMjg5Ni00MTI0LWEwZDAtM2Q2YzNjMjM1YjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQRB2yFNVMCRCcRwbIK1AV68jlq+bZ5CMAYD 3RetgtmGQa8aT1tYMhAJubEcoaN4alLTWML8pi1Wre5Y66nmL4uHv1aHDYGKl0Jv mHsP3ha3l+IKEhvcl/s3R+FcvwYEozlZGsh5N7eOv6JRxsfRcrLLTqvEM0M4tNrS ef2W+6UR6mMjZBT5Wd0yY3r5PLWX/eUoFbroeNRSb1//nwnAXrX/yAqw1RQODKqV GhRtTV4umMp2HzlxQfyEcHpw78e8NJHpp8eJyQz1eIqDhptEiylI61LsBpCoDHny Cs4TRCh/KYQMhfaQbBlsDHyjZsgVPaoadixk59nhPuhP3m7kKQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPcHZPoD/+U5VkEvLAfNuL8m06PqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZTk1NmFiNDMtOTkxMi0z ZWY1LWJmNzQtMGI0YjQ4NTdkMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0QgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAK874anc7NtUT6t2ZRictijv4tFu7OXWXy9HGTT90dJTJr+HYhHd98b9b kH+m4wqYYDYefouHrRi/1E0urMD1bDw1EdLzyiZ4r8Itvax9VECIB01L03ybxqWx mJTFwnJ2aXg5K8ItVG7bD4i65/IDj4bdnwKc3wTq5w4Mzg56nskoybC/xVSQNUSn GHgoj0gPF38LLc78cjpeyHjkjmRO/sbh0MGyOFNO68lp1XZ78uaHYxqqAftQO+Iy C3J3gOHas2XUwJfQuqvL9lEwJVCq1yML9jVDj0XKB171wTiwfQLTwVM9imVF0fkh zmAqYmjFNrRuioApMK5+NYZBrsLPhw== -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:40 2025 by rpki-client