$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa File: 05224f4f-29f9-328d-ad4a-db204fafa300.roa (raw, json) Hash identifier: VBOZz3aQjNlfvr+FOHpyFHwDJMzzLB8j62R/gmnCIQg= Subject key identifier: 99:15:D8:8E:E3:CE:89:3D:47:74:02:13:0A:1D:28:11:44:4F:4D:E0 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F43285849CE9A53029433B1FE56959BB0 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7782 IP address blocks: 209.112.128.0/18 maxlen: 18 209.112.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:53:02:94:33:b1:fe:56:95:9b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=790c2197-cf67-4290-b360-a57f7b53143a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c3:f4:fd:2e:bc:de:e2:4f:5c:fe:66:a8:6c: 6c:3b:07:39:45:bb:28:51:b7:6c:94:2a:62:d6:1a: 9f:15:19:2e:fc:79:69:40:c6:e4:3d:a4:2e:a3:62: 07:6a:2f:21:ff:5b:d1:ca:9b:bb:26:ea:1b:7f:30: 5e:ad:36:b1:9d:95:4b:03:6a:78:86:5a:b6:9d:6b: 0b:4d:05:0a:dd:c5:bb:17:fe:7b:8c:05:c9:78:a0: e5:c2:8e:21:ff:ff:54:3d:12:f6:2f:be:a3:49:e6: 47:a9:1b:cd:2e:e0:54:10:11:46:33:88:12:ae:e1: ca:0c:7a:8a:8d:cd:47:1a:36:33:3d:5d:93:93:a6: 29:b7:19:12:cd:36:8d:3f:d0:3f:cc:c3:62:40:bf: 87:66:6e:66:e4:ff:f5:f3:e0:ff:1e:93:66:c8:60: 53:ac:d8:52:e7:5f:a1:0b:82:a3:c9:6a:de:4b:06: f7:88:f5:59:c7:6a:24:41:75:fa:da:51:39:b7:3c: e0:52:18:aa:71:81:15:ee:ca:a6:37:87:68:5a:6a: d1:74:ac:f6:66:90:57:c0:9e:f1:4b:ae:f6:ab:67: 21:c7:7c:bf:92:fc:a0:73:52:52:c6:04:fe:cf:06: 9d:e0:77:1a:e3:ed:96:88:ee:07:dc:7b:1a:aa:31: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:15:D8:8E:E3:CE:89:3D:47:74:02:13:0A:1D:28:11:44:4F:4D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 209.112.128.0-209.112.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1a:0f:d5:ac:3f:fd:79:30:ef:1d:e2:39:f2:44:b1:76:fb: f4:88:d1:81:30:e9:33:95:0e:94:97:5f:ce:29:3f:bf:19:a1: a1:ce:42:e4:72:19:af:65:57:e8:1c:48:a7:52:f8:34:f0:9b: 5e:69:77:91:f8:cf:7b:e8:8d:0c:a2:9e:16:fb:eb:74:29:8c: b0:7f:f2:9c:2b:70:48:b1:6a:1b:14:8a:f4:1f:e3:88:b2:f8: 5a:93:f5:fc:ca:d2:96:d8:49:97:1e:ee:bf:06:91:6d:b1:fe: 57:a7:ad:63:fe:30:6d:06:1d:54:54:a2:0e:d3:da:87:e4:9e: 0f:ab:8a:5a:2c:55:4a:60:1d:73:8e:a6:91:1b:1e:c5:5e:1c: 4a:3d:5e:3a:95:a0:1e:31:9f:87:91:6a:cd:6c:d3:cb:82:60: 21:04:4d:30:d9:71:cd:21:07:38:34:67:cf:67:8a:82:37:a7: 4a:a7:6e:71:eb:60:c8:bf:66:e6:77:73:a7:1f:de:e8:6b:76: 6e:83:b6:3b:7c:fd:9e:8a:73:49:5f:07:b2:e3:23:f5:4e:58: 50:ab:d5:aa:b8:cf:73:0c:7a:13:d5:5e:39:7c:1a:11:c7:37: 5d:ed:ed:b5:92:e5:5a:47:de:91:75:eb:63:74:ab:54:4b:17: 74:f2:0a:ee -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEnOmlMClDOx/laVm7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NzkwYzIxOTctY2Y2Ny00MjkwLWIzNjAtYTU3ZjdiNTMxNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8P0/S683uJPXP5mqGxsOwc5RbsoUbdslCpi 1hqfFRku/HlpQMbkPaQuo2IHai8h/1vRypu7JuobfzBerTaxnZVLA2p4hlq2nWsL TQUK3cW7F/57jAXJeKDlwo4h//9UPRL2L76jSeZHqRvNLuBUEBFGM4gSruHKDHqK jc1HGjYzPV2Tk6YptxkSzTaNP9A/zMNiQL+HZm5m5P/18+D/HpNmyGBTrNhS51+h C4KjyWreSwb3iPVZx2okQXX62lE5tzzgUhiqcYEV7sqmN4doWmrRdKz2ZpBXwJ7x S672q2chx3y/kvygc1JSxgT+zwad4Hca4+2WiO4H3HsaqjHnEwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJkV2I7jzok9R3QCEwodKBFET03gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvMDUyMjRmNGYtMjlmOS0z MjhkLWFkNGEtZGIyMDRmYWZhMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAfRcIAD BAXRcMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAQRoP1aw//Xkw7x3iOfJEsXb79IjRgTDpM5UOlJdfzik/ vxmhoc5C5HIZr2VX6BxIp1L4NPCbXml3kfjPe+iNDKKeFvvrdCmMsH/ynCtwSLFq GxSK9B/jiLL4WpP1/MrSlthJlx7uvwaRbbH+V6etY/4wbQYdVFSiDtPah+SeD6uK WixVSmAdc46mkRsexV4cSj1eOpWgHjGfh5FqzWzTy4JgIQRNMNlxzSEHODRnz2eK gjenSqducetgyL9m5ndzpx/e6Gt2boO2O3z9nopzSV8HsuMj9U5YUKvVqrjPcwx6 E9VeOXwaEcc3Xe3ttZLlWkfekXXrY3SrVEsXdPIK7g== -----END CERTIFICATE-----Generated at Sun Jun 15 15:31:42 2025 by rpki-client