$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa File: 9996e972-6eae-3d44-ad69-6a057d20eca9.roa (raw, json) Hash identifier: 7kwfPUgsHls13VC4lWksO33bFe0IuO9i3Mx0E6gjF8o= Subject key identifier: B2:4C:28:76:85:94:E3:A6:E7:D2:EE:2B:0A:2C:F3:DF:79:9C:A6:1B Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584AF0F1360C92DE4290921B3E00 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 18258 IP address blocks: 209.8.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:36:0c:92:de:42:90:92:1b:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=dce29600-673d-44eb-87b0-adb9bbe1f352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:95:5f:6e:09:1f:11:19:ab:1f:b0:2f:52: c8:5e:34:e9:25:75:57:b1:82:6d:4e:6f:90:2a:71: 79:d7:e8:d3:91:36:39:f2:ef:88:58:0d:20:e4:57: 95:93:6f:42:eb:8e:85:d1:c9:05:47:42:e3:1c:57: eb:2a:1a:7e:8f:a9:15:9b:8c:5c:f2:90:1b:8e:61: 8d:f1:07:86:85:4e:57:9f:a3:fa:1b:a2:aa:90:01: 54:9e:48:55:f0:c8:5f:8c:7a:12:8f:01:0f:c2:8c: 76:98:3c:c6:86:6e:55:da:ed:5c:cd:04:d2:12:59: 26:9f:d2:53:11:6d:85:a8:3b:20:a3:c4:84:e0:b8: 9b:a9:82:4c:be:22:d2:23:9d:d5:18:65:3e:bc:6b: 8a:8d:27:2a:88:d2:1c:a6:6d:91:92:75:81:b4:24: f9:6b:95:fd:b8:0c:df:c4:34:bf:4e:95:5f:a9:71: 7a:0d:6a:b7:d8:e2:e0:f4:76:92:15:b1:e1:22:57: 80:48:b3:c6:44:b9:12:6b:ae:32:a9:9a:a8:fb:6b: b8:bf:04:f8:d0:a5:2a:44:48:8a:59:a2:7b:53:5b: d1:76:53:30:fa:1f:93:07:a3:f8:ff:c9:89:3f:32: 80:51:f7:45:cd:71:63:a3:b6:42:26:6c:dd:71:99: b1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4C:28:76:85:94:E3:A6:E7:D2:EE:2B:0A:2C:F3:DF:79:9C:A6:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:bf:5d:d6:01:8b:68:b8:df:e3:38:79:43:8f:d9:97:aa:3e: 08:c1:d4:40:d4:70:61:1f:68:89:18:dc:a5:3d:b8:06:fc:cd: de:cf:1e:e3:31:d7:16:f8:06:d3:0d:b1:e2:0c:1b:96:70:8e: 7f:16:4d:b8:ae:91:26:6f:68:21:71:ae:5c:1a:8d:17:55:37: 2a:fc:e0:cd:37:b0:ce:95:0b:f3:c0:05:78:8f:d8:25:2e:c7: 5d:2f:da:f5:5e:e3:bd:38:71:55:43:d6:cd:e7:f1:81:62:5a: 04:18:0e:d8:d8:a3:a3:5a:32:79:cd:fc:d4:c7:97:81:4e:bd: 8c:11:06:85:e2:c8:37:2a:7a:00:94:d3:71:0a:37:b7:ee:40: 36:f3:3e:c5:cd:88:92:60:f3:29:47:8a:e3:a2:d5:7e:42:fa: 42:35:a5:c6:f6:7c:00:30:2c:21:c2:46:41:1c:b5:e5:60:a9: 75:b0:a3:cc:ed:05:9d:89:8b:87:dc:1b:0f:ea:1d:e6:e8:af: 0e:39:36:da:34:a8:66:6e:ec:9b:e9:96:3a:22:ed:63:44:b8: 8e:51:d7:8e:d8:10:5f:a9:b0:67:8e:58:d1:d8:dc:4c:b8:4a: da:b1:72:2d:bc:9b:7d:c7:ef:0d:41:c6:0e:e1:b0:1b:7a:11: 87:19:40:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TYMkt5CkJIbPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZGNlMjk2MDAtNjczZC00NGViLTg3YjAtYWRiOWJiZTFmMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPaVX24JHxEZqx+wL1LIXjTpJXVXsYJtTm+Q KnF51+jTkTY58u+IWA0g5FeVk29C646F0ckFR0LjHFfrKhp+j6kVm4xc8pAbjmGN 8QeGhU5Xn6P6G6KqkAFUnkhV8MhfjHoSjwEPwox2mDzGhm5V2u1czQTSElkmn9JT EW2FqDsgo8SE4LibqYJMviLSI53VGGU+vGuKjScqiNIcpm2RknWBtCT5a5X9uAzf xDS/TpVfqXF6DWq32OLg9HaSFbHhIleASLPGRLkSa64yqZqo+2u4vwT40KUqREiK WaJ7U1vRdlMw+h+TB6P4/8mJPzKAUfdFzXFjo7ZCJmzdcZmxpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJMKHaFlOOm59LuKwos8995nKYbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOTk5NmU5NzItNmVhZS0z ZDQ0LWFkNjktNmEwNTdkMjBlY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW/XdYBi2i43+M4eUOP2ZeqPgjB1EDUcGEfaIkY3KU9uAb8zd7PHuMx 1xb4BtMNseIMG5Zwjn8WTbiukSZvaCFxrlwajRdVNyr84M03sM6VC/PABXiP2CUu x10v2vVe4704cVVD1s3n8YFiWgQYDtjYo6NaMnnN/NTHl4FOvYwRBoXiyDcqegCU 03EKN7fuQDbzPsXNiJJg8ylHiuOi1X5C+kI1pcb2fAAwLCHCRkEcteVgqXWwo8zt BZ2Ji4fcGw/qHeborw45Nto0qGZu7Jvpljoi7WNEuI5R147YEF+psGeOWNHY3Ey4 Stqxci28m33H7w1Bxg7hsBt6EYcZQIg= -----END CERTIFICATE-----Generated at Sat Aug 23 20:05:34 2025 by rpki-client