$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa File: cbac2488-f4b2-3b9a-80e2-176f1395516e.roa (raw, json) Hash identifier: 8x9KJZLpW9+Jm/9EYbQoS36kGRzBn2rKWIfxOruE2JU= Subject key identifier: A6:F4:51:BE:7A:55:3E:2A:60:58:C9:8A:20:99:B4:5E:40:93:A1:FD Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584AB650E75490DA83B0691A0800 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 3491 IP address blocks: 65.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:e7:54:90:da:83:b0:69:1a:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=e9bd96b4-d56c-46f9-9f2b-778e7a8a0474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:52:78:2a:dc:91:86:72:57:81:2d:a9:9f:3c: 17:a8:e6:eb:67:1d:a7:e1:92:de:19:24:de:b6:62: 37:8f:5e:53:6a:b1:9a:b3:23:6b:65:3d:23:2a:df: cf:1e:95:4d:d7:0d:8f:58:a4:5e:07:97:01:7c:fe: 34:fd:37:96:71:8e:2b:23:6f:33:f5:59:f0:5a:16: 9e:b7:92:56:78:80:3a:11:34:a9:61:f4:ff:bf:8f: e5:b1:de:d9:5d:61:4e:af:31:8c:b8:cd:1b:73:f4: db:7b:8a:db:3a:64:cd:a3:d5:c2:f6:47:20:2f:1c: 07:b8:81:d0:b4:d5:16:14:3f:73:c7:90:6b:f6:74: 14:be:a5:3a:6c:61:20:2a:ce:bb:ac:21:fa:95:42: 53:72:81:63:ae:ea:4c:13:cc:63:34:f4:7b:89:ab: e4:87:8a:db:68:1b:f9:e5:1a:cd:99:30:66:b2:c8: 2f:c0:fb:5a:a3:71:f7:69:32:6f:a8:e3:b5:35:04: c2:04:0b:dc:07:67:74:e6:b6:8b:c6:58:ca:98:44: b0:22:f2:a0:b8:cb:c4:11:ee:5e:3b:f0:56:9e:a6: 8c:94:18:72:bb:c1:d4:73:55:37:89:f5:d3:a7:1e: 73:0e:83:e4:31:45:f4:da:29:4d:79:dd:f8:0b:22: 6e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F4:51:BE:7A:55:3E:2A:60:58:C9:8A:20:99:B4:5E:40:93:A1:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 65.72.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:da:94:40:99:e9:32:32:65:cb:4a:49:09:15:3e:af:fc:40: 24:55:dd:3a:47:c6:8a:15:32:6f:d9:68:2d:22:84:89:fb:88: 10:c0:e6:0e:ad:ec:90:0c:09:61:40:2d:a5:cc:26:54:81:05: 55:a4:f1:f1:c7:3d:e7:9d:34:28:91:cc:33:b6:6d:cd:0e:98: 6d:b9:47:8b:b7:24:29:0a:3d:3d:4b:02:16:7a:47:ab:fe:67: 6d:3a:61:50:6f:57:62:8f:9a:f7:2f:14:fb:e5:e2:8d:0a:2c: 38:16:f6:ac:9a:b6:30:92:fc:1e:82:ae:ad:8c:63:1b:21:71: 32:f0:19:dc:32:cb:c5:cd:ae:ec:38:00:ab:41:a7:c4:bf:df: bd:c4:dd:91:a3:01:c4:69:92:f4:30:12:49:79:8e:50:da:bb: 27:8b:75:ea:98:06:5b:52:c1:c6:3f:a8:97:63:a4:b1:5f:11: fe:3a:db:fa:26:a7:e8:85:4c:bc:97:7c:a3:60:89:ef:62:56: b8:25:c1:61:b8:c4:95:ca:76:f4:12:00:43:c0:4a:f3:59:dc: ee:da:5d:ae:cf:74:74:66:f4:9d:d8:0b:39:00:c6:29:eb:7f: 21:af:96:32:cc:e9:5c:8f:ac:fd:d1:d2:66:74:dc:1b:54:7f: 58:6d:32:9a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEq2UOdUkNqDsGkaCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZTliZDk2YjQtZDU2Yy00NmY5LTlmMmItNzc4ZTdhOGEwNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFJ4KtyRhnJXgS2pnzwXqObrZx2n4ZLeGSTe tmI3j15TarGasyNrZT0jKt/PHpVN1w2PWKReB5cBfP40/TeWcY4rI28z9VnwWhae t5JWeIA6ETSpYfT/v4/lsd7ZXWFOrzGMuM0bc/Tbe4rbOmTNo9XC9kcgLxwHuIHQ tNUWFD9zx5Br9nQUvqU6bGEgKs67rCH6lUJTcoFjrupME8xjNPR7iavkh4rbaBv5 5RrNmTBmssgvwPtao3H3aTJvqOO1NQTCBAvcB2d05raLxljKmESwIvKguMvEEe5e O/BWnqaMlBhyu8HUc1U3ifXTpx5zDoPkMUX02ilNed34CyJuTwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKb0Ub56VT4qYFjJiiCZtF5Ak6H9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvY2JhYzI0ODgtZjRiMi0z YjlhLTgwZTItMTc2ZjEzOTU1MTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQUgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYdqUQJnpMjJly0pJCRU+r/xAJFXdOkfGihUyb9loLSKEifuIEMDmDq3s kAwJYUAtpcwmVIEFVaTx8cc95500KJHMM7ZtzQ6YbblHi7ckKQo9PUsCFnpHq/5n bTphUG9XYo+a9y8U++XijQosOBb2rJq2MJL8HoKurYxjGyFxMvAZ3DLLxc2u7DgA q0GnxL/fvcTdkaMBxGmS9DASSXmOUNq7J4t16pgGW1LBxj+ol2OksV8R/jrb+ian 6IVMvJd8o2CJ72JWuCXBYbjElcp29BIAQ8BK81nc7tpdrs90dGb0ndgLOQDGKet/ Ia+WMszpXI+s/dHSZnTcG1R/WG0ymg== -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:09 2025 by rpki-client