$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/169c0037-98fc-3c09-912d-dcf3a51a09f2.roa File: 169c0037-98fc-3c09-912d-dcf3a51a09f2.roa (raw, json) Hash identifier: P6GVV+r+DtGNYryOv7yZY19aKFANVMWvHgjhKoZRIvg= Subject key identifier: 0D:A4:B3:28:A0:C1:E2:64:27:6B:66:89:C4:96:A8:A2:30:B0:87:AE Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584AA1621C775AAAB21FE77F3840 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/169c0037-98fc-3c09-912d-dcf3a51a09f2.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 55569 IP address blocks: 209.8.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:62:1c:77:5a:aa:b2:1f:e7:7f:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=596c8df8-cce6-4f92-8394-aeb49033ad9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:d8:de:85:5a:e3:18:d2:41:00:d9:8b:ce: 43:ae:4c:55:fc:52:a4:bb:43:34:9f:ce:2d:42:1d: 95:01:1c:9e:76:57:1b:77:59:68:c4:65:f7:85:3d: 47:70:97:1a:1d:5a:27:f2:48:49:25:5e:73:4d:84: f3:99:96:cd:66:7c:b9:2f:c8:cf:9f:12:a1:bd:2f: 72:7d:f2:b8:cb:df:f8:1a:2a:2e:ed:38:07:ae:af: 78:b3:f4:db:d4:cf:01:8d:26:a5:ed:c1:1f:60:a1: 87:68:c2:dc:17:ba:58:71:f2:62:09:5d:ee:1d:22: 0f:cc:67:3e:07:da:7c:0b:13:73:07:d9:e7:ec:34: ab:25:d3:33:e1:9e:42:47:1c:94:1d:05:e8:d0:eb: 2f:36:90:3b:84:ed:d8:16:af:b5:f5:23:c6:d5:45: dc:3b:1a:f7:b5:cf:49:d6:d8:30:3b:89:7b:51:76: e5:29:fe:9c:11:0a:95:bd:55:79:14:52:82:29:56: 0b:64:55:7c:d6:3c:6b:35:cb:f1:28:5f:63:62:58: f0:c3:d2:8e:42:59:7b:f4:ae:10:b8:38:9e:23:50: 77:88:5d:dd:b4:7f:37:63:f1:5c:86:e2:54:39:b3: fb:90:10:2f:d9:ae:85:18:68:6d:11:ca:24:c5:4f: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A4:B3:28:A0:C1:E2:64:27:6B:66:89:C4:96:A8:A2:30:B0:87:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/169c0037-98fc-3c09-912d-dcf3a51a09f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:fc:55:51:06:bc:ec:70:50:54:e5:40:57:cd:93:cf:d9:87: cc:bf:43:c8:d9:d5:33:7a:64:1d:a0:55:34:b7:2b:a8:e9:63: ec:d9:4c:67:ee:34:2d:11:ff:16:85:17:b8:7a:c1:7d:71:6b: 4a:c1:2c:f2:8e:40:b5:f1:2d:06:a9:11:71:fd:b7:cd:07:19: 7b:de:c0:89:c5:b9:d0:8e:6a:99:2e:db:36:e3:5f:7b:66:ca: 2f:8e:14:00:d3:c5:71:d4:09:1e:41:6a:c0:80:b0:95:25:23: d7:7c:05:9e:09:fa:c5:fd:53:0d:79:60:e4:6a:80:30:dc:f4: 0a:db:2b:16:96:27:0c:25:9a:00:0f:e0:27:98:68:40:f1:c7: a4:f6:a0:b8:6c:cd:af:21:56:18:47:33:1a:34:f6:2b:3b:bf: a2:01:0a:1c:7a:e4:3c:be:df:18:7c:c1:10:76:da:09:9a:4e: 09:06:26:90:a6:af:88:bc:4c:4a:f9:43:36:83:91:ed:d3:e5: c8:67:7e:ed:84:0d:04:3c:d3:cb:3c:c8:40:1a:8b:42:d1:46: be:31:4f:a5:0b:d4:ab:a1:20:98:47:dd:6a:ee:76:ad:07:52: b4:05:a4:83:d4:2e:08:0f:15:35:fc:62:8e:9b:3e:65:06:f7: 3b:35:00:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYhx3WqqyH+d/OEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NTk2YzhkZjgtY2NlNi00ZjkyLTgzOTQtYWViNDkwMzNhZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdvY3oVa4xjSQQDZi85DrkxV/FKku0M0n84t Qh2VARyedlcbd1loxGX3hT1HcJcaHVon8khJJV5zTYTzmZbNZny5L8jPnxKhvS9y ffK4y9/4Giou7TgHrq94s/Tb1M8BjSal7cEfYKGHaMLcF7pYcfJiCV3uHSIPzGc+ B9p8CxNzB9nn7DSrJdMz4Z5CRxyUHQXo0OsvNpA7hO3YFq+19SPG1UXcOxr3tc9J 1tgwO4l7UXblKf6cEQqVvVV5FFKCKVYLZFV81jxrNcvxKF9jYljww9KOQll79K4Q uDieI1B3iF3dtH83Y/FchuJUObP7kBAv2a6FGGhtEcokxU+PNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2ksyigweJkJ2tmicSWqKIwsIeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMTY5YzAwMzctOThmYy0z YzA5LTkxMmQtZGNmM2E1MWEwOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJb8VVEGvOxwUFTlQFfNk8/Zh8y/Q8jZ1TN6ZB2gVTS3K6jpY+zZTGfu NC0R/xaFF7h6wX1xa0rBLPKOQLXxLQapEXH9t80HGXvewInFudCOapku2zbjX3tm yi+OFADTxXHUCR5BasCAsJUlI9d8BZ4J+sX9Uw15YORqgDDc9ArbKxaWJwwlmgAP 4CeYaEDxx6T2oLhsza8hVhhHMxo09is7v6IBChx65Dy+3xh8wRB22gmaTgkGJpCm r4i8TEr5QzaDke3T5chnfu2EDQQ808s8yEAai0LRRr4xT6UL1KuhIJhH3Wrudq0H UrQFpIPULggPFTX8Yo6bPmUG9zs1AMg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:31:49 2025 by rpki-client