$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/35e13aed-2cf4-360c-a349-f1543d28e72a.roa File: 35e13aed-2cf4-360c-a349-f1543d28e72a.roa (raw, json) Hash identifier: mqRWig1xeiIVQnTSN8u++fDlR0RZkJOkOSSy9XCB+Ag= Subject key identifier: 29:0C:23:61:74:F3:7A:C0:15:95:60:BC:F5:61:47:47:0B:BD:10:99 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584A5FC5D48C4B63C5A4CB708680 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/35e13aed-2cf4-360c-a349-f1543d28e72a.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 134963 IP address blocks: 209.9.216.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:d4:8c:4b:63:c5:a4:cb:70:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=bb0a36a3-647e-43b5-8a9a-bd4db744fb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:e2:26:6c:f8:7c:d8:3f:59:bd:ec:49:e5: 6e:ac:bb:b9:3c:68:ba:ad:20:73:3c:5c:6d:f0:bb: 52:31:11:2d:f3:05:4d:18:cb:53:ac:8e:e7:eb:4d: c9:99:65:5b:a4:a8:7c:b3:1b:0c:0f:11:21:77:2e: 9b:46:d5:b0:a7:94:ee:08:d4:9a:7e:df:03:18:d3: 54:62:09:0c:6f:df:e1:e7:2c:b4:7e:37:9b:41:be: 0c:c0:8d:23:29:93:d6:c4:73:95:9f:d9:fe:43:b4: 97:6f:b8:4f:95:fd:73:90:3d:03:81:1d:3c:e3:eb: 95:bc:b8:01:bb:30:09:f8:a6:fc:f5:68:ca:14:1a: 1b:53:d7:73:b3:29:f3:cc:e6:ff:68:76:30:30:dd: 96:11:6f:1a:51:df:b2:32:f2:ee:7c:65:67:49:8f: 3b:fd:5c:24:5a:16:30:bb:08:63:c1:bd:bb:9a:a0: 89:d8:58:fe:2f:e6:00:8a:df:f7:d4:d5:dc:fa:60: b6:f2:59:d1:48:c0:c4:d7:fc:cb:4f:14:e6:96:16: 34:e9:19:d8:02:2e:a6:6d:7b:94:9b:9b:98:b5:e1: 57:74:43:25:7a:7e:69:df:6e:a2:b1:bc:6a:3a:b9: 27:d3:c2:1d:d3:50:5f:61:ba:a0:f9:0f:43:94:b8: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0C:23:61:74:F3:7A:C0:15:95:60:BC:F5:61:47:47:0B:BD:10:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/35e13aed-2cf4-360c-a349-f1543d28e72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:80:a8:5c:da:b6:7b:b7:78:b1:66:1a:b8:fc:3a:5f:df:23: c5:ea:6a:ef:25:60:4d:80:b8:0d:67:7e:59:48:09:03:ef:34: c1:ad:f6:d0:f1:ca:e4:3b:3f:9c:ee:64:3e:c2:68:ff:22:da: 99:08:fc:7e:15:69:de:d1:73:20:49:7c:bc:09:f4:f0:0f:92: aa:d4:6d:7c:af:15:42:80:6a:cb:cd:3b:ba:f7:ea:c6:48:50: 5d:61:d6:35:1b:9c:43:38:76:42:f9:21:cf:31:11:63:9f:6e: 31:3c:16:39:b8:e5:55:b2:7c:4a:46:df:4c:bd:5c:40:6e:9f: aa:70:f5:b3:a4:e2:69:4b:68:60:c7:c1:25:8a:08:74:15:b2: 70:6f:ac:11:1a:bb:f2:36:ea:13:3b:ff:63:12:70:90:c1:99: 3c:5d:2a:71:9c:f2:ed:28:90:58:fa:43:69:3d:dd:a8:90:89: 3e:9e:1d:00:76:fd:bc:13:2d:7a:c5:60:2e:7b:a6:fc:0e:e7: 63:a3:02:8c:91:46:6a:f5:1e:da:9b:0b:a0:98:7d:44:24:2a: df:92:38:53:b1:81:6c:db:66:d9:b0:de:88:45:0f:d2:cf:12: b5:ca:67:02:14:e4:8d:ae:c2:d8:db:66:98:cb:27:54:93:d8: 0b:ea:3b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdSMS2PFpMtwhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YmIwYTM2YTMtNjQ3ZS00M2I1LThhOWEtYmQ0ZGI3NDRmYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdviJmz4fNg/Wb3sSeVurLu5PGi6rSBzPFxt 8LtSMREt8wVNGMtTrI7n603JmWVbpKh8sxsMDxEhdy6bRtWwp5TuCNSaft8DGNNU YgkMb9/h5yy0fjebQb4MwI0jKZPWxHOVn9n+Q7SXb7hPlf1zkD0DgR084+uVvLgB uzAJ+Kb89WjKFBobU9dzsynzzOb/aHYwMN2WEW8aUd+yMvLufGVnSY87/VwkWhYw uwhjwb27mqCJ2Fj+L+YAit/31NXc+mC28lnRSMDE1/zLTxTmlhY06RnYAi6mbXuU m5uYteFXdEMlen5p326isbxqOrkn08Id01BfYbqg+Q9DlLj9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkMI2F083rAFZVgvPVhR0cLvRCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMzVlMTNhZWQtMmNmNC0z NjBjLWEzNDktZjE1NDNkMjhlNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOAqFzatnu3eLFmGrj8Ol/fI8Xqau8lYE2AuA1nfllICQPvNMGt9tDx yuQ7P5zuZD7CaP8i2pkI/H4Vad7RcyBJfLwJ9PAPkqrUbXyvFUKAasvNO7r36sZI UF1h1jUbnEM4dkL5Ic8xEWOfbjE8Fjm45VWyfEpG30y9XEBun6pw9bOk4mlLaGDH wSWKCHQVsnBvrBEau/I26hM7/2MScJDBmTxdKnGc8u0okFj6Q2k93aiQiT6eHQB2 /bwTLXrFYC57pvwO52OjAoyRRmr1HtqbC6CYfUQkKt+SOFOxgWzbZtmw3ohFD9LP ErXKZwIU5I2uwtjbZpjLJ1ST2AvqO/Y= -----END CERTIFICATE-----Generated at Mon Aug 4 18:15:40 2025 by rpki-client