$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa File: 2c199e06-0061-3f8d-8062-186a6d89c327.roa (raw, json) Hash identifier: CXAnoxfebknvaOOBPHcCBsCLPbf/FnkAOnD1xv7kPFw= Subject key identifier: A7:78:FD:57:60:ED:CA:2F:61:CA:54:67:E8:07:00:58:A5:E5:BF:42 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584ABD4B8C54535452952F143740 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 17057 IP address blocks: 209.8.5.0/24 maxlen: 24 209.8.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:8c:54:53:54:52:95:2f:14:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=b230b945-1d6e-407e-adf1-58a95c294d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fc:ba:1f:30:ba:b4:5b:45:a5:d5:e0:43:14: 21:8c:db:a4:db:93:0a:dc:79:fa:70:1b:07:75:01: f3:5d:5d:ed:c6:7b:77:14:75:66:76:1b:37:7e:21: f1:9d:05:2e:e5:18:2b:6a:af:95:b6:8a:82:06:b8: da:54:cf:4b:2d:5f:7d:c4:d6:08:be:7a:49:f7:58: 6a:16:5d:e5:41:38:c1:60:33:e7:2e:a9:2a:ba:26: ed:a0:aa:ce:4d:f3:28:85:9d:a3:94:96:40:03:ab: 4b:6d:e2:4f:d6:6e:95:7d:29:75:70:5d:42:f8:eb: ea:36:37:b0:e1:fc:22:21:01:76:cb:37:c5:46:3b: 98:a7:50:27:cf:da:7d:fe:a5:ec:b4:41:29:38:44: 98:78:02:6e:26:2a:b7:3b:10:3b:59:c0:da:0b:33: b7:44:79:cc:fa:75:0b:95:14:cd:ef:00:09:c3:9b: 52:86:b8:9c:ae:e1:34:d9:39:6f:6b:98:69:b1:47: a1:b7:3b:10:bf:1d:9a:ab:95:ce:c6:cf:ad:c7:0a: c9:c8:45:14:39:a0:01:9b:2f:8c:25:a9:40:f3:d7: 71:13:43:4b:cb:06:84:f8:2a:1b:66:9b:7c:06:d8: 62:d7:58:3c:10:82:47:57:41:ec:fe:74:d6:6f:12: 5d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:78:FD:57:60:ED:CA:2F:61:CA:54:67:E8:07:00:58:A5:E5:BF:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.5.0/24 209.8.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:e5:1c:2a:f4:36:4a:44:63:86:2c:c5:ae:e5:e0:ad:97:8d: 98:f3:48:bc:4a:2b:7c:e9:b3:ee:c7:7d:eb:0f:60:75:3a:6c: f5:38:0c:09:fb:fb:72:ed:45:cb:dc:98:ca:a0:05:a9:a4:4b: 99:78:9a:71:6d:21:9e:55:32:e2:78:41:2a:28:e8:ae:e4:2e: 36:51:94:5d:c2:41:a7:5f:2a:da:1a:97:87:69:1d:87:6b:f6: af:ce:7c:f1:8e:62:57:bd:4d:11:b3:28:d2:8c:62:70:96:cb: da:a9:3f:9e:7e:bb:d0:c7:53:83:18:70:29:7c:e1:51:20:ed: 03:c0:be:cd:f8:3d:e3:d3:12:ed:fd:7f:08:36:1d:d2:63:d6: bd:00:86:bc:0f:83:42:8b:a5:31:4b:54:2e:37:36:3d:92:59: c4:9e:29:ab:12:98:04:5a:7e:5a:47:fb:dc:93:06:7d:05:bf: d3:40:dd:ac:70:d6:40:65:24:36:42:a1:db:25:c5:97:e0:28: d3:a8:ca:11:b2:0a:65:7f:53:5f:ea:2b:27:43:c6:65:eb:92: 0b:6b:c7:61:72:f2:53:77:7e:a9:29:4c:19:80:c1:69:23:71: 6f:8f:28:54:dc:88:31:5d:8c:2f:e3:e6:ce:25:b3:c6:0f:0e: dc:f5:34:25 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEq9S4xUU1RSlS8UN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk YjIzMGI5NDUtMWQ2ZS00MDdlLWFkZjEtNThhOTVjMjk0ZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fy6HzC6tFtFpdXgQxQhjNuk25MK3Hn6cBsH dQHzXV3txnt3FHVmdhs3fiHxnQUu5Rgraq+VtoqCBrjaVM9LLV99xNYIvnpJ91hq Fl3lQTjBYDPnLqkquibtoKrOTfMohZ2jlJZAA6tLbeJP1m6VfSl1cF1C+OvqNjew 4fwiIQF2yzfFRjuYp1Anz9p9/qXstEEpOESYeAJuJiq3OxA7WcDaCzO3RHnM+nUL lRTN7wAJw5tShricruE02Tlva5hpsUehtzsQvx2aq5XOxs+txwrJyEUUOaABmy+M JalA89dxE0NLywaE+CobZpt8Bthi11g8EIJHV0Hs/nTWbxJdlQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKd4/Vdg7covYcpUZ+gHAFil5b9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMmMxOTllMDYtMDA2MS0z ZjhkLTgwNjItMTg2YTZkODljMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0QgFAwQA 0QgHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMDlHCr0NkpEY4Ysxa7l4K2XjZjzSLxKK3zps+7HfesPYHU6 bPU4DAn7+3LtRcvcmMqgBamkS5l4mnFtIZ5VMuJ4QSoo6K7kLjZRlF3CQadfKtoa l4dpHYdr9q/OfPGOYle9TRGzKNKMYnCWy9qpP55+u9DHU4MYcCl84VEg7QPAvs34 PePTEu39fwg2HdJj1r0AhrwPg0KLpTFLVC43Nj2SWcSeKasSmARaflpH+9yTBn0F v9NA3axw1kBlJDZCodslxZfgKNOoyhGyCmV/U1/qKydDxmXrkgtrx2Fy8lN3fqkp TBmAwWkjcW+PKFTciDFdjC/j5s4ls8YPDtz1NCU= -----END CERTIFICATE-----Generated at Tue Aug 5 17:12:54 2025 by rpki-client