$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa File: 05224f4f-29f9-328d-ad4a-db204fafa300.roa (raw, json) Hash identifier: IyCmSWbQ9RWxNXD/nqOutNeTBTbIxgsq3WoVTZp0HNQ= Subject key identifier: F0:75:45:CD:9C:12:A9:80:33:7C:C8:0B:10:B6:F0:48:E7:F0:7A:13 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584AADF10EA028E8E02E49127370 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7782 IP address blocks: 209.112.128.0/18 maxlen: 18 209.112.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:0e:a0:28:e8:e0:2e:49:12:73:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=7e8b02ca-d35e-4015-970e-4ed1b484b985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:2a:bc:aa:b8:cd:3c:25:97:35:8a:2c:25: bf:fb:42:5d:87:23:b0:c6:d9:26:45:3e:40:e5:dc: 74:26:af:35:35:73:95:1d:e0:38:0c:7c:d2:a0:9a: 7d:e4:62:e7:20:39:78:4f:cb:f4:78:39:e5:6e:82: 7b:27:26:f0:54:f0:e1:bf:7e:2e:e6:12:7c:36:87: 58:51:e0:12:c3:23:f8:c2:d7:ee:06:7e:72:e9:ce: bd:ce:02:ab:0d:58:c1:c3:9e:97:7b:36:4d:ef:8f: 2a:b4:f6:4d:56:b0:8d:1e:be:04:9d:c2:62:a4:28: 08:6d:47:ea:c5:7b:6e:60:d3:b6:89:7c:2d:a8:25: 32:74:f2:ab:6a:84:f3:13:c2:f4:06:9a:e3:61:fb: 18:ca:b1:12:47:bf:b1:ff:fa:ce:b7:13:b2:6d:e6: 2d:a9:db:18:1c:0c:92:4c:1e:f1:a0:94:76:af:cc: 03:15:7c:e4:9b:a3:9d:54:c3:1e:2e:75:c6:e0:97: 99:c7:39:84:1e:fc:e6:81:ce:cf:28:2f:7d:b9:84: f1:81:99:8d:90:d7:e6:ca:88:26:0e:3d:97:61:2e: 5b:61:6b:e3:54:ea:bd:ca:21:9b:2a:80:54:85:ea: d2:63:d3:e6:8a:d9:bf:ad:a3:a5:21:f0:a6:13:5d: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:75:45:CD:9C:12:A9:80:33:7C:C8:0B:10:B6:F0:48:E7:F0:7A:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 209.112.128.0-209.112.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f6:1b:ea:47:02:d3:97:a9:56:97:e8:c8:c9:69:64:89:c8: 03:8a:c3:6a:e9:e1:c3:96:7e:b0:65:dc:75:e1:83:66:27:c8: 91:14:69:77:27:86:77:84:27:85:53:68:dc:1c:0a:12:00:cd: ad:95:5b:97:3a:44:97:b6:9d:94:f9:0d:09:4d:6d:f4:df:01: ca:ea:9e:d5:a2:ae:04:80:60:9e:46:38:7d:7c:e7:df:e0:56: 5c:32:27:df:aa:0c:70:14:77:8a:1c:74:6b:80:57:fb:03:be: b0:f4:76:2e:84:f6:c5:0b:31:19:13:85:7d:97:b1:73:66:85: b2:45:ec:25:08:67:8e:7b:27:b5:08:59:cd:2e:53:30:de:3c: 7f:88:7e:23:60:66:5d:3b:36:0f:8f:95:5f:5b:7d:2c:09:17: 35:9a:2a:e2:12:ff:34:96:2d:e8:78:23:a3:c6:34:94:4a:d7: c2:58:cd:fd:b2:4e:87:b0:ec:95:de:69:c7:11:9d:fc:42:5c: 4e:94:cb:99:cf:25:f3:cd:95:f3:84:37:20:87:e5:04:fa:fd: 8f:95:02:b3:b5:90:37:51:1f:13:30:42:ec:eb:6d:57:ad:1a: 0b:21:94:df:b0:d0:e5:80:52:bd:ba:30:29:1e:f3:6f:5e:f2: 86:95:3a:2e -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEqt8Q6gKOjgLkkSc3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk N2U4YjAyY2EtZDM1ZS00MDE1LTk3MGUtNGVkMWI0ODRiOTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC8qvKq4zTwllzWKLCW/+0JdhyOwxtkmRT5A 5dx0Jq81NXOVHeA4DHzSoJp95GLnIDl4T8v0eDnlboJ7JybwVPDhv34u5hJ8NodY UeASwyP4wtfuBn5y6c69zgKrDVjBw56XezZN748qtPZNVrCNHr4EncJipCgIbUfq xXtuYNO2iXwtqCUydPKraoTzE8L0BprjYfsYyrESR7+x//rOtxOybeYtqdsYHAyS TB7xoJR2r8wDFXzkm6OdVMMeLnXG4JeZxzmEHvzmgc7PKC99uYTxgZmNkNfmyogm Dj2XYS5bYWvjVOq9yiGbKoBUherSY9Pmitm/raOlIfCmE13oHwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPB1Rc2cEqmAM3zICxC28Ejn8HoTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvMDUyMjRmNGYtMjlmOS0z MjhkLWFkNGEtZGIyMDRmYWZhMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAfRcIAD BAXRcMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAj/Yb6kcC05epVpfoyMlpZInIA4rDaunhw5Z+sGXcdeGD ZifIkRRpdyeGd4QnhVNo3BwKEgDNrZVblzpEl7adlPkNCU1t9N8Byuqe1aKuBIBg nkY4fXzn3+BWXDIn36oMcBR3ihx0a4BX+wO+sPR2LoT2xQsxGROFfZexc2aFskXs JQhnjnsntQhZzS5TMN48f4h+I2BmXTs2D4+VX1t9LAkXNZoq4hL/NJYt6Hgjo8Y0 lErXwljN/bJOh7Dsld5pxxGd/EJcTpTLmc8l882V84Q3IIflBPr9j5UCs7WQN1Ef EzBC7OttV60aCyGU37DQ5YBSvbowKR7zb17yhpU6Lg== -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:23 2025 by rpki-client