$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa File: 1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa (raw, json) Hash identifier: N+zpiuM7uFOPi0YfYy+5j952BXZtBTkUs4q13gj2gKE= Subject key identifier: B9:22:42:6D:A9:D7:92:D6:11:88:8C:23:DF:CC:94:A1:70:B1:FE:AD Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849D42FAB7CDF3D3769D641CD00 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 20940 IP address blocks: 209.8.112.0/24 maxlen: 24 209.8.115.0/24 maxlen: 24 209.8.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:ab:7c:df:3d:37:69:d6:41:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=ce4b52bb-fd6e-43f9-98ee-01b1474fcff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:94:23:93:7b:4a:a7:44:85:1a:0e:c4:29:80: ae:c4:de:5a:37:7c:f2:c4:22:2f:55:41:c4:55:db: 38:f4:8c:f1:15:16:58:c7:f2:fe:6e:a4:29:2a:f5: e3:b3:91:05:af:30:b5:f4:08:4f:39:66:e7:46:18: e4:b1:5b:26:5c:b0:15:12:ba:be:b7:ba:55:5a:82: 1c:c6:a2:15:7b:35:55:8f:bf:a7:d9:8e:c5:d3:52: 38:8c:1a:69:95:d2:d9:26:35:87:78:9c:d0:20:e7: af:0d:e0:f3:49:9d:a7:13:2a:b6:e2:03:51:92:d9: 47:19:b8:d8:42:a9:bf:55:a7:6c:cf:56:1d:92:60: 3c:54:16:40:80:05:52:84:7d:bd:ae:8b:cd:6b:2e: 90:47:36:30:6c:58:7a:d7:50:d1:96:56:da:59:5c: 4c:d3:d7:32:25:f9:34:df:df:06:91:0a:c2:90:84: 7f:68:1b:f6:bb:4d:be:6d:6d:33:d0:4d:b9:95:46: 77:07:d2:46:52:99:6f:69:ce:7f:7e:f8:19:3b:9b: 1f:cd:89:4f:b6:58:f4:a2:09:d2:a4:e0:f2:75:92: 47:1e:57:f7:a4:08:d6:c8:44:39:61:53:e5:f4:1f: 46:22:f5:ad:1f:23:d7:89:a0:88:7b:36:61:8b:dc: 47:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:22:42:6D:A9:D7:92:D6:11:88:8C:23:DF:CC:94:A1:70:B1:FE:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.112.0/24 209.8.115.0/24 209.8.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:21:8b:5a:3e:5b:b7:76:0c:80:de:32:e5:b5:d8:b8:3a:6f: 83:13:a4:23:ca:b1:11:c8:1c:5c:ba:86:26:2e:48:a9:8f:c0: 88:67:47:2d:91:54:0b:b4:50:b1:47:91:34:78:f8:db:d5:44: f3:35:e4:fd:a3:64:7c:56:5e:f0:14:e8:ca:cd:e8:64:e3:f4: cc:84:12:91:2c:b7:4b:ab:e8:96:74:d2:c5:b5:81:e8:cf:43: 7e:13:7e:e5:27:df:09:f2:37:27:5a:f4:2e:8e:d2:78:0a:5a: a7:59:45:50:65:6a:4a:97:d7:05:f8:08:5b:0a:22:b5:60:d7: 55:c3:f3:02:82:90:62:a3:a5:6a:cf:38:03:e5:42:04:fc:ec: 8c:7b:f1:2b:90:3e:a4:88:70:b1:3b:ef:41:34:07:01:54:3d: ac:a9:de:7b:be:47:5b:0f:94:37:ef:50:69:23:68:92:d6:1f: e3:fc:70:33:b2:eb:68:5f:3f:7b:46:c4:ee:f7:a0:e0:26:a6: a1:48:fa:93:7c:24:d1:d6:7c:2b:c6:6a:a8:68:0f:f7:f9:3e: 32:a3:71:c3:2b:0d:78:fd:49:d1:8e:6c:77:9a:3b:11:b8:81: e9:3f:5a:d4:87:eb:a9:de:55:78:eb:3b:10:b5:ee:de:58:73: c3:57:a9:c4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEnUL6t83z03adZBzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2U0YjUyYmItZmQ2ZS00M2Y5LTk4ZWUtMDFiMTQ3NGZjZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZQjk3tKp0SFGg7EKYCuxN5aN3zyxCIvVUHE Vds49IzxFRZYx/L+bqQpKvXjs5EFrzC19AhPOWbnRhjksVsmXLAVErq+t7pVWoIc xqIVezVVj7+n2Y7F01I4jBppldLZJjWHeJzQIOevDeDzSZ2nEyq24gNRktlHGbjY Qqm/Vadsz1YdkmA8VBZAgAVShH29rovNay6QRzYwbFh611DRllbaWVxM09cyJfk0 398GkQrCkIR/aBv2u02+bW0z0E25lUZ3B9JGUplvac5/fvgZO5sfzYlPtlj0ognS pODydZJHHlf3pAjWyEQ5YVPl9B9GIvWtHyPXiaCIezZhi9xHVwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLkiQm2p15LWEYiMI9/MlKFwsf6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMWQ3NmEwMGItNTcyNi0z ZGQ0LTkxMzItOWFiYWNmYTJmZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA0QhwAwQA 0QhzAwQA0Qh2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEAhi1o+W7d2DIDeMuW12Lg6b4MTpCPKsRHIHFy6 hiYuSKmPwIhnRy2RVAu0ULFHkTR4+NvVRPM15P2jZHxWXvAU6MrN6GTj9MyEEpEs t0ur6JZ00sW1gejPQ34TfuUn3wnyNyda9C6O0ngKWqdZRVBlakqX1wX4CFsKIrVg 11XD8wKCkGKjpWrPOAPlQgT87Ix78SuQPqSIcLE770E0BwFUPayp3nu+R1sPlDfv UGkjaJLWH+P8cDOy62hfP3tGxO73oOAmpqFI+pN8JNHWfCvGaqhoD/f5PjKjccMr DXj9SdGObHeaOxG4gek/WtSH66neVXjrOxC17t5Yc8NXqcQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:03 2025 by rpki-client