$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa File: 1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa (raw, json) Hash identifier: uIG2Eb5TWSKP4VgH1AdE0s5cuGd3Vqb2wTShld3NL8k= Subject key identifier: ED:D5:6A:E1:83:AE:32:C6:09:CC:77:5C:78:6C:5A:F5:0A:CD:75:50 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584AB4EB74A89387815FE620A380 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 20940 IP address blocks: 209.8.112.0/24 maxlen: 24 209.8.115.0/24 maxlen: 24 209.8.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:74:a8:93:87:81:5f:e6:20:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=60a8751d-8cdb-4cd3-aa48-058ff726d374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:33:9e:d4:ab:e3:83:6a:be:38:06:10:85:c7: fb:9a:6c:4d:2a:00:24:28:00:34:57:1e:62:cf:c2: 41:fc:10:fb:eb:c1:ae:04:95:2d:d2:4a:15:25:bc: 7c:02:d4:ad:30:7d:01:d6:fe:b7:38:52:da:d7:28: cb:fb:e8:b8:d1:8c:06:8d:83:52:6a:93:6d:11:a3: 86:a1:8f:20:76:6a:35:a8:e8:02:e1:43:cd:d8:cf: a4:46:37:e9:17:f1:22:0d:70:50:9d:d2:c2:8b:26: fa:7f:15:e7:f3:6c:45:3b:8f:0e:a3:d8:0c:66:27: f2:4e:5c:0e:8b:0a:63:f8:46:cd:ba:37:6d:03:1c: 94:bb:bc:bd:f4:8b:51:aa:6c:3d:70:73:5f:f4:51: ce:63:47:ec:a0:b7:e2:eb:5e:5c:a4:08:07:64:ab: 08:09:9d:fe:7b:31:7b:5b:e8:3d:99:f3:45:b0:73: 3e:05:66:4c:bf:10:ba:6d:d9:c0:ff:17:2c:c0:2b: 6a:bc:a1:31:7e:75:cf:ea:5c:c1:fe:40:a6:b8:7d: ab:74:5f:9e:8a:db:6f:ea:ef:14:dd:66:8c:34:c8: 46:f6:30:a2:b2:7a:7c:b2:4b:cd:2f:a3:88:c9:1a: 1e:fc:64:1b:2e:35:d9:50:28:7e:97:a3:5d:f1:b3: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D5:6A:E1:83:AE:32:C6:09:CC:77:5C:78:6C:5A:F5:0A:CD:75:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.112.0/24 209.8.115.0/24 209.8.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:aa:1d:cc:52:1c:a5:29:21:16:b9:e6:84:28:39:4a:64:80: 45:8b:e1:f8:ca:f4:14:53:e4:56:34:86:94:0d:01:38:3c:14: 6f:5b:e6:8f:bd:71:89:76:a1:95:33:b9:7c:76:cf:31:0e:2c: d7:5b:86:77:89:8a:e1:78:67:0f:a7:d6:f0:74:85:6e:d8:17: 72:5e:be:3f:5d:51:43:3b:d8:ee:99:18:ab:46:04:74:ca:ff: ae:84:7d:e9:76:66:07:65:8a:19:46:cb:ac:f3:8b:8f:a9:fc: 55:09:2f:bf:5f:39:d8:13:3d:eb:2b:b3:7a:f2:6e:bf:8a:e3: bd:b1:29:a0:f5:80:8d:83:07:37:d2:31:c4:00:7a:56:a8:0c: 07:24:d5:04:68:f9:9d:c7:52:23:b4:85:a7:6c:ab:80:88:57: d2:a4:c5:58:0d:eb:24:fc:18:f0:f1:25:ad:be:cb:52:c6:75: cd:7b:06:ac:70:c4:b0:77:aa:63:10:2d:86:53:cf:32:c0:ee: 19:98:69:a3:7c:e4:8d:c2:b3:f7:1a:ac:a8:d8:d4:6c:1c:36: 0c:39:b7:4a:e0:0f:fe:02:d8:cc:4e:10:d6:b0:83:94:27:bf: 24:a3:6a:9e:3d:02:07:25:0f:0f:47:61:79:56:cf:e3:8d:80: e8:ce:67:5d -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEq063Sok4eBX+Ygo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NjBhODc1MWQtOGNkYi00Y2QzLWFhNDgtMDU4ZmY3MjZkMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjOe1Kvjg2q+OAYQhcf7mmxNKgAkKAA0Vx5i z8JB/BD768GuBJUt0koVJbx8AtStMH0B1v63OFLa1yjL++i40YwGjYNSapNtEaOG oY8gdmo1qOgC4UPN2M+kRjfpF/EiDXBQndLCiyb6fxXn82xFO48Oo9gMZifyTlwO iwpj+EbNujdtAxyUu7y99ItRqmw9cHNf9FHOY0fsoLfi615cpAgHZKsICZ3+ezF7 W+g9mfNFsHM+BWZMvxC6bdnA/xcswCtqvKExfnXP6lzB/kCmuH2rdF+eittv6u8U 3WaMNMhG9jCisnp8skvNL6OIyRoe/GQbLjXZUCh+l6Nd8bM6LwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFO3VauGDrjLGCcx3XHhsWvUKzXVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMWQ3NmEwMGItNTcyNi0z ZGQ0LTkxMzItOWFiYWNmYTJmZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA0QhwAwQA 0QhzAwQA0Qh2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGKqHcxSHKUpIRa55oQoOUpkgEWL4fjK9BRT5FY0 hpQNATg8FG9b5o+9cYl2oZUzuXx2zzEOLNdbhneJiuF4Zw+n1vB0hW7YF3Jevj9d UUM72O6ZGKtGBHTK/66Efel2ZgdlihlGy6zzi4+p/FUJL79fOdgTPesrs3rybr+K 472xKaD1gI2DBzfSMcQAelaoDAck1QRo+Z3HUiO0hadsq4CIV9KkxVgN6yT8GPDx Ja2+y1LGdc17BqxwxLB3qmMQLYZTzzLA7hmYaaN85I3Cs/carKjY1GwcNgw5t0rg D/4C2MxOENawg5QnvySjap49AgclDw9HYXlWz+ONgOjOZ10= -----END CERTIFICATE-----Generated at Mon Aug 4 14:05:33 2025 by rpki-client