$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa File: 7675d262-4d44-3834-ab36-7be25716a0e4.roa (raw, json) Hash identifier: BNS1vjHpxZv8lLHPaGVvGmTxi3GQ7nnPQvn9twdOT3M= Subject key identifier: 0C:99:2E:FB:73:E1:67:27:93:50:08:CA:D8:9A:79:1E:80:EA:0F:39 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584AB4EB726CA83D9D70705B96C0 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 54994 IP address blocks: 209.9.208.0/24 maxlen: 24 209.9.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:72:6c:a8:3d:9d:70:70:5b:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=3a6a062c-51f8-4933-8de3-1255eb6c32fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:4e:fd:dd:69:39:69:ba:cc:9b:62:8a:f3: 2b:c2:e2:79:c2:83:53:9b:b9:8e:ec:52:b8:7d:0b: 7a:58:c1:63:83:74:b7:47:9a:8e:4f:bb:74:eb:88: 28:24:60:3e:ad:7d:43:1c:d8:6a:df:dc:4c:30:62: 7c:f8:59:c3:ae:83:18:05:16:aa:2b:19:4b:fd:a5: 48:26:a3:a0:12:f5:84:00:4e:d9:1e:b2:3c:22:df: b8:48:26:11:2c:e9:8f:85:f7:ae:f7:e8:c7:cb:57: 7f:50:0f:5d:38:57:db:f9:03:5b:44:69:fb:b0:30: d7:6b:2d:4b:cf:8a:a9:9e:41:8b:3f:7a:98:01:54: b0:a2:fc:6e:fd:83:4f:dc:f6:92:bd:5b:d2:c3:c8: d0:94:48:80:81:78:da:5e:d0:67:2e:45:1d:5a:2d: f5:6e:49:17:cb:09:f8:88:b1:b9:75:16:f1:cf:a8: 27:54:0b:0c:a3:41:fe:82:19:50:78:f6:9e:c7:5e: 0e:2b:3b:e9:34:35:31:fd:c5:25:c9:b8:84:a5:84: a8:ba:40:62:a3:b3:7b:ca:eb:31:69:35:2f:7c:ea: 4e:b3:6c:97:f9:1a:ef:12:66:08:bd:8c:aa:74:ee: d9:c5:14:35:ac:1a:21:62:26:9f:b4:4f:fb:1c:1e: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:99:2E:FB:73:E1:67:27:93:50:08:CA:D8:9A:79:1E:80:EA:0F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:0a:17:34:b8:60:82:e0:67:55:0e:8e:2d:2b:2b:bb:ab:8e: ec:48:63:5e:22:c9:79:1b:f3:6d:b5:82:24:98:bc:2d:3c:4c: 56:dd:7d:41:e5:05:f7:a2:ec:41:a2:19:9b:53:12:ac:84:ee: 23:d9:50:ac:7a:4e:8e:95:1d:72:96:e4:1b:22:e8:39:52:b5: cf:ae:4c:9d:f3:65:87:85:ab:a5:dd:d5:77:b2:2c:90:9a:28: be:a7:44:df:09:e4:05:1f:b8:9f:f9:74:a8:ee:e6:fe:2e:7c: 47:a0:28:57:e6:23:da:6d:9a:45:13:cd:3b:d5:7c:7f:cb:7b: 1b:5f:cb:16:71:e4:71:7f:6c:89:bb:2c:30:fa:f0:bf:e9:61: fe:cd:74:97:4f:fb:ae:ae:45:f8:4c:38:e2:f5:2a:30:c2:ee: f5:ec:81:a4:b2:dd:d0:76:ca:93:5d:9f:a2:4c:da:0e:44:65: 34:2f:a4:cd:f5:2a:54:42:d0:95:65:98:b2:a5:2e:64:a0:9b: 58:1c:c5:0e:7b:7c:3a:cc:05:c2:1a:99:01:b7:72:32:cc:06: 2a:45:2e:29:dd:75:aa:96:4d:ab:65:8c:12:6b:e8:6a:cc:43: e2:f7:6b:bc:a9:98:be:99:69:16:dd:34:01:50:0e:cd:78:4d: ac:b1:74:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063JsqD2dcHBblsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk M2E2YTA2MmMtNTFmOC00OTMzLThkZTMtMTI1NWViNmMzMmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjflO/d1pOWm6zJtiivMrwuJ5woNTm7mO7FK4 fQt6WMFjg3S3R5qOT7t064goJGA+rX1DHNhq39xMMGJ8+FnDroMYBRaqKxlL/aVI JqOgEvWEAE7ZHrI8It+4SCYRLOmPhfeu9+jHy1d/UA9dOFfb+QNbRGn7sDDXay1L z4qpnkGLP3qYAVSwovxu/YNP3PaSvVvSw8jQlEiAgXjaXtBnLkUdWi31bkkXywn4 iLG5dRbxz6gnVAsMo0H+ghlQePaex14OKzvpNDUx/cUlybiEpYSoukBio7N7yusx aTUvfOpOs2yX+RrvEmYIvYyqdO7ZxRQ1rBohYiaftE/7HB5HsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyZLvtz4Wcnk1AIytiaeR6A6g85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNzY3NWQyNjItNGQ0NC0z ODM0LWFiMzYtN2JlMjU3MTZhMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMMKFzS4YILgZ1UOji0rK7urjuxIY14iyXkb8221giSYvC08TFbdfUHl Bfei7EGiGZtTEqyE7iPZUKx6To6VHXKW5Bsi6DlStc+uTJ3zZYeFq6Xd1XeyLJCa KL6nRN8J5AUfuJ/5dKju5v4ufEegKFfmI9ptmkUTzTvVfH/LextfyxZx5HF/bIm7 LDD68L/pYf7NdJdP+66uRfhMOOL1KjDC7vXsgaSy3dB2ypNdn6JM2g5EZTQvpM31 KlRC0JVlmLKlLmSgm1gcxQ57fDrMBcIamQG3cjLMBipFLinddaqWTatljBJr6GrM Q+L3a7ypmL6ZaRbdNAFQDs14TayxdJE= -----END CERTIFICATE-----Generated at Tue Aug 5 16:49:09 2025 by rpki-client