$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa File: e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa (raw, json) Hash identifier: M0wvUgPagGEAHFEinalaWJRX079K/pprVW7E6Qxc3D0= Subject key identifier: 97:1B:9D:37:BC:F8:00:A4:84:6C:E2:99:33:5E:93:CF:C8:7B:70:83 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584AB650E57D7CFC972C404B5300 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 3491 IP address blocks: 209.8.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:e5:7d:7c:fc:97:2c:40:4b:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=1308d9a7-7b22-4130-8bb5-f86df9f9c671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f1:d2:c1:c5:63:ee:28:98:51:76:61:f0:8c: 1c:b4:e0:6b:74:d1:cd:36:0f:63:08:19:df:f8:71: e8:47:27:e8:a0:90:db:f8:8d:62:5d:e4:10:c2:09: d8:78:94:a3:2b:df:bd:89:83:37:f2:8b:b2:96:8b: 19:d2:96:85:c0:f8:b6:60:e0:8a:07:73:13:e6:93: 72:2f:7d:8a:1d:e2:89:26:f7:54:8a:67:4b:74:38: 02:da:e3:74:64:34:af:f5:28:f7:98:6c:92:b3:9c: a7:c0:04:44:6b:78:74:ae:a8:f8:e4:9e:28:a1:08: 9d:7e:7f:78:87:19:b2:4a:4d:1b:5c:d2:12:e8:bb: 66:08:22:52:33:bc:b0:7d:6f:1a:b7:7e:96:3e:a4: ca:98:26:68:ab:72:d3:91:3f:db:55:78:0b:4f:a1: f8:84:dd:36:ab:a7:ce:5a:9e:3b:cb:67:b0:0a:df: 8c:d8:8e:45:d6:f9:06:28:0c:1a:1f:80:95:16:8b: d8:6e:60:ec:4b:fd:fd:72:7b:83:88:a3:c6:40:ab: 5d:ab:7c:19:d4:2d:a0:49:82:39:5b:20:08:af:b9: 19:84:d8:92:13:9d:df:7c:de:ea:83:ac:77:b8:22: ec:83:05:98:dd:b3:4e:c0:5b:81:f7:0c:67:56:78: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1B:9D:37:BC:F8:00:A4:84:6C:E2:99:33:5E:93:CF:C8:7B:70:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:59:99:c7:36:37:82:f0:57:ba:a4:27:b7:6b:75:dc:91:5c: 40:9d:7c:1c:3a:23:45:c8:40:4c:21:cb:aa:44:d1:29:90:d5: a2:bd:e2:8c:7b:d1:a4:da:17:88:c6:46:15:4b:94:d9:30:c7: 40:81:7c:9f:87:f0:68:88:56:6a:6c:a0:d9:44:c4:e2:84:7a: c5:f2:eb:b1:94:42:f3:eb:25:65:ec:c6:d3:60:b0:8c:82:df: 8a:f3:8c:c1:91:53:43:be:81:7c:22:f7:e0:0c:38:08:0d:ff: f6:a9:ce:8b:8f:be:e2:af:1e:f3:79:ae:2b:73:a2:49:64:0a: 2b:f1:c0:93:7d:fd:6f:b2:49:fa:4a:eb:d7:ff:65:e9:7a:b6: 11:24:dc:02:43:3c:18:5a:07:fb:b6:7b:d5:3a:62:ee:69:26: 6b:1e:20:eb:d4:03:20:d0:46:e0:99:d5:5b:38:a6:bb:da:7d: 48:a8:6b:5f:29:d2:87:1e:72:d2:d7:73:a9:76:a0:45:24:cc: 74:86:85:7a:56:3f:8a:10:7f:ab:e1:d8:b4:48:2a:1b:74:ed: 5b:96:1f:19:60:e1:10:34:f6:b6:94:cb:ec:31:be:61:a3:b7: fe:37:e7:40:54:ca:87:3b:2d:0b:90:8b:a0:92:74:72:a1:1a: a3:93:6c:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEq2UOV9fPyXLEBLUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MTMwOGQ5YTctN2IyMi00MTMwLThiYjUtZjg2ZGY5ZjljNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPHSwcVj7iiYUXZh8IwctOBrdNHNNg9jCBnf +HHoRyfooJDb+I1iXeQQwgnYeJSjK9+9iYM38ouylosZ0paFwPi2YOCKB3MT5pNy L32KHeKJJvdUimdLdDgC2uN0ZDSv9Sj3mGySs5ynwAREa3h0rqj45J4ooQidfn94 hxmySk0bXNIS6LtmCCJSM7ywfW8at36WPqTKmCZoq3LTkT/bVXgLT6H4hN02q6fO Wp47y2ewCt+M2I5F1vkGKAwaH4CVFovYbmDsS/39cnuDiKPGQKtdq3wZ1C2gSYI5 WyAIr7kZhNiSE53ffN7qg6x3uCLsgwWY3bNOwFuB9wxnVnhsSwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJcbnTe8+ACkhGzimTNek8/Ie3CDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZTk1NmFiNDMtOTkxMi0z ZWY1LWJmNzQtMGI0YjQ4NTdkMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0QgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAslmZxzY3gvBXuqQnt2t13JFcQJ18HDojRchATCHLqkTRKZDVor3ijHvR pNoXiMZGFUuU2TDHQIF8n4fwaIhWamyg2UTE4oR6xfLrsZRC8+slZezG02CwjILf ivOMwZFTQ76BfCL34Aw4CA3/9qnOi4++4q8e83muK3OiSWQKK/HAk339b7JJ+krr 1/9l6Xq2ESTcAkM8GFoH+7Z71Tpi7mkmax4g69QDINBG4JnVWzimu9p9SKhrXynS hx5y0tdzqXagRSTMdIaFelY/ihB/q+HYtEgqG3TtW5YfGWDhEDT2tpTL7DG+YaO3 /jfnQFTKhzstC5CLoJJ0cqEao5NstQ== -----END CERTIFICATE-----Generated at Mon Aug 4 14:08:20 2025 by rpki-client