$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/059b2a6e-0dc8-3000-8de1-205f552c9f26.roa File: 059b2a6e-0dc8-3000-8de1-205f552c9f26.roa (raw, json) Hash identifier: 0rq8PT70Pj3rD4L1P2Dk1neR8/UA/vP3WsigBnNtO7w= Subject key identifier: B3:06:4B:7E:55:86:6F:F4:B3:8C:46:34:9F:28:AB:69:6A:6C:29:EB Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584AA85B95A532E2C62CAF0AB300 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/059b2a6e-0dc8-3000-8de1-205f552c9f26.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 6079 IP address blocks: 209.250.8.0/23 maxlen: 23 209.250.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:95:a5:32:e2:c6:2c:af:0a:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=9804c494-a849-487a-9bbe-f0db02aca3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a4:1a:f0:93:d2:43:c0:0e:bf:d3:bc:b2:89: 9f:59:10:f8:04:74:73:90:ee:f8:55:38:34:f4:81: a2:d1:c0:20:a6:6a:c8:17:b8:e8:e8:21:f9:9b:c1: 00:9e:04:76:0c:78:82:4e:3d:df:af:9a:2d:5e:d2: 5d:0c:ea:9c:e7:51:73:ce:2a:47:3c:3a:e5:86:b9: c0:dc:ad:5c:9f:24:71:b9:1c:e0:75:56:f3:d2:05: f7:8a:1f:25:f3:e3:eb:64:fc:e0:a6:ca:89:8d:8d: 59:16:97:16:05:2d:51:a5:0c:a0:14:a8:f1:cb:60: 98:a7:8a:c7:7d:64:d8:5a:21:cd:cf:4f:8f:60:77: 5b:2c:4a:f2:de:6e:19:92:f3:57:15:3d:42:6e:f2: d4:e4:65:4c:6f:be:f6:f8:ac:95:92:22:1b:8f:f0: 88:94:27:9f:f5:5b:1b:72:7c:76:9a:13:93:31:9b: de:89:60:20:00:0b:65:b2:a0:f6:6c:01:4c:a3:b5: c0:2b:8d:c2:29:50:37:5e:ba:4d:e7:a1:4f:a5:36: 7b:cf:a7:1c:55:ee:5d:d1:7e:9d:72:78:22:ba:3a: 3d:c9:97:30:4c:65:09:e4:8e:2e:84:4f:ca:cb:ac: 1e:0b:8e:14:27:ea:48:bf:e1:ea:77:67:5a:78:c6: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:06:4B:7E:55:86:6F:F4:B3:8C:46:34:9F:28:AB:69:6A:6C:29:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/059b2a6e-0dc8-3000-8de1-205f552c9f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.8.0/23 209.250.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ae:e2:5e:bf:32:99:9f:5d:45:c0:7b:8f:41:f9:d0:af:54: ff:4b:cb:8f:9f:12:a2:9d:39:c4:7d:74:1f:f9:6c:c3:ca:cd: 45:3b:fe:bd:ce:a0:79:82:b9:1e:73:ff:ca:a9:ac:a8:40:8f: 59:19:91:19:79:48:26:7a:9f:c1:91:ed:fd:57:57:22:ac:e5: 88:19:62:ec:ef:4c:a9:65:20:3b:16:7b:68:b9:75:31:78:8c: 4a:3e:39:a2:41:e8:b7:88:17:dc:fb:97:ee:44:78:59:3b:44: 94:62:9d:45:5a:14:39:64:36:45:51:8f:b2:97:2e:5e:c4:a3: fb:eb:3c:78:9c:07:cb:85:55:59:43:6d:e1:40:7f:8d:cd:67: 01:c9:00:17:fd:29:27:c3:a0:63:a1:58:98:b6:28:9b:bf:23: 7f:4e:a2:90:2e:b7:82:e7:8b:c1:13:75:04:ef:9f:f1:7c:e0: dc:20:2d:f4:88:3e:12:68:9f:7c:41:69:9c:5e:e1:f1:15:35: 03:3b:11:88:30:d1:79:2f:9b:b5:cd:2c:7b:e7:64:c7:d1:c8: a1:e6:07:94:73:4d:0a:c4:72:a3:6d:cf:98:fa:9a:e0:34:65: dc:2f:f8:9a:5d:5d:93:4f:e3:53:87:7f:6b:18:d6:c3:6f:72: 81:d2:84:30 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqoW5WlMuLGLK8KswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk OTgwNGM0OTQtYTg0OS00ODdhLTliYmUtZjBkYjAyYWNhM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KQa8JPSQ8AOv9O8somfWRD4BHRzkO74VTg0 9IGi0cAgpmrIF7jo6CH5m8EAngR2DHiCTj3fr5otXtJdDOqc51FzzipHPDrlhrnA 3K1cnyRxuRzgdVbz0gX3ih8l8+PrZPzgpsqJjY1ZFpcWBS1RpQygFKjxy2CYp4rH fWTYWiHNz0+PYHdbLEry3m4ZkvNXFT1CbvLU5GVMb772+KyVkiIbj/CIlCef9Vsb cnx2mhOTMZveiWAgAAtlsqD2bAFMo7XAK43CKVA3XrpN56FPpTZ7z6ccVe5d0X6d cngiujo9yZcwTGUJ5I4uhE/Ky6weC44UJ+pIv+Hqd2daeMZaSwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLMGS35Vhm/0s4xGNJ8oq2lqbCnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvMDU5YjJhNmUtMGRjOC0z MDAwLThkZTEtMjA1ZjU1MmM5ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0foIAwQB 0foMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACCu4l6/MpmfXUXAe49B+dCvVP9Ly4+fEqKdOcR9dB/5bMPK zUU7/r3OoHmCuR5z/8qprKhAj1kZkRl5SCZ6n8GR7f1XVyKs5YgZYuzvTKllIDsW e2i5dTF4jEo+OaJB6LeIF9z7l+5EeFk7RJRinUVaFDlkNkVRj7KXLl7Eo/vrPHic B8uFVVlDbeFAf43NZwHJABf9KSfDoGOhWJi2KJu/I39OopAut4Lni8ETdQTvn/F8 4NwgLfSIPhJon3xBaZxe4fEVNQM7EYgw0Xkvm7XNLHvnZMfRyKHmB5RzTQrEcqNt z5j6muA0Zdwv+JpdXZNP41OHf2sY1sNvcoHShDA= -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:48 2025 by rpki-client