$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/027dcbdd-c463-3683-98c6-eb82b7f4b006.roa File: 027dcbdd-c463-3683-98c6-eb82b7f4b006.roa (raw, json) Hash identifier: SM7VFMmQrC+5ZCx2jWjO6vxXy72DsHauZmYg/E1woPA= Subject key identifier: C9:CD:C8:C8:07:45:54:7F:28:4B:DE:9B:90:11:B9:B9:71:AD:46:51 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584BA6679DF65081D60A03914500 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/027dcbdd-c463-3683-98c6-eb82b7f4b006.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 328578 IP address blocks: 209.9.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:9d:f6:50:81:d6:0a:03:91:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=2ff94c59-611f-4a29-b3d9-6d152c40eeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:6b:a6:68:44:56:c6:fb:df:e9:5d:5b:e5: 3b:31:89:72:1b:c9:8b:e2:8c:6d:f1:f0:3b:c6:15: a5:ee:0d:43:a6:52:c9:f7:85:12:9f:aa:38:a1:dd: 6f:2d:2c:ab:4d:03:17:8a:94:c9:6a:c7:d3:b8:b6: d9:cf:b2:14:6a:46:a8:37:60:b7:48:09:e1:f9:59: 7c:ca:35:d8:64:7c:d8:a1:7b:06:08:05:9f:69:dd: b8:8d:5d:85:70:1f:c9:50:26:0f:8d:c3:b6:aa:58: 22:3b:a6:a8:6e:06:81:f1:b6:ae:a5:67:b2:82:c2: e9:93:1c:10:ce:9a:7e:b4:ac:97:a7:c6:c0:55:26: e2:98:c5:8a:80:05:1a:86:c5:32:86:5c:4e:e8:53: ec:9c:bd:a1:78:cb:9c:68:3b:9e:e8:4a:25:04:f4: 7d:63:35:95:f4:ec:b5:14:78:3d:a7:75:7e:f0:0d: bc:ac:12:11:f3:8f:4b:b1:51:6f:34:10:20:6a:f0: fe:eb:56:db:dd:74:3b:59:a6:5e:31:6f:9a:01:c6: 2a:2d:d7:5b:e2:af:9a:98:4f:fc:aa:97:51:a9:24: 40:72:cd:8a:81:9c:a6:b3:a2:69:44:f3:01:ec:c6: b0:5e:b2:92:6d:7a:1d:30:52:50:6f:07:9d:9a:93: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CD:C8:C8:07:45:54:7F:28:4B:DE:9B:90:11:B9:B9:71:AD:46:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/027dcbdd-c463-3683-98c6-eb82b7f4b006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:4c:73:62:ea:8e:9a:9b:c6:5c:fb:fc:e2:3e:1c:16:af:91: 6a:cb:17:d7:5a:cc:9b:07:a0:4e:43:b3:71:0b:d5:1c:e6:eb: 6c:1c:2d:44:53:48:f7:94:c6:12:c2:50:fc:6d:f5:a3:23:ec: 3d:6f:fb:aa:b6:64:c6:59:74:dc:da:68:d5:bf:fc:f0:c7:53: 14:39:67:22:95:05:82:5f:4a:e7:ce:5a:71:04:fe:49:3a:8c: 04:a4:9c:69:d0:2a:62:a0:2e:3b:c8:31:e9:84:6d:94:99:db: 4f:ab:7c:52:2b:85:51:a9:7c:3a:02:95:f9:04:b8:62:44:92: a2:15:7d:4d:47:c6:9c:87:6b:90:91:af:b5:d6:9a:26:1a:d8: 7e:a1:ff:23:3b:a3:ef:56:21:b0:7d:e0:32:59:f4:e4:5b:e1: fb:57:58:9c:40:6a:53:06:df:66:e9:bf:67:0a:f5:0c:e9:db: d6:e2:22:07:7e:64:82:d3:f4:8a:49:1c:9b:0f:f3:2e:65:4f: 00:9f:b4:f8:7a:9a:13:c6:41:4d:2a:51:6f:75:a5:ed:ac:ca: e3:70:52:42:cc:b9:fe:89:5f:8c:bc:fd:83:9b:bc:c4:72:2e: 8f:68:3c:64:03:66:29:f2:b2:dd:79:07:3e:b9:2f:f0:cd:6c: 7a:13:c3:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ532UIHWCgORRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MmZmOTRjNTktNjExZi00YTI5LWIzZDktNmQxNTJjNDBlZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw1rpmhEVsb73+ldW+U7MYlyG8mL4oxt8fA7 xhWl7g1DplLJ94USn6o4od1vLSyrTQMXipTJasfTuLbZz7IUakaoN2C3SAnh+Vl8 yjXYZHzYoXsGCAWfad24jV2FcB/JUCYPjcO2qlgiO6aobgaB8baupWeygsLpkxwQ zpp+tKyXp8bAVSbimMWKgAUahsUyhlxO6FPsnL2heMucaDue6EolBPR9YzWV9Oy1 FHg9p3V+8A28rBIR849LsVFvNBAgavD+61bb3XQ7WaZeMW+aAcYqLddb4q+amE/8 qpdRqSRAcs2KgZyms6JpRPMB7MawXrKSbXodMFJQbwedmpM+BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnNyMgHRVR/KEvem5ARublxrUZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMDI3ZGNiZGQtYzQ2My0z NjgzLTk4YzYtZWI4MmI3ZjRiMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBMc2Lqjpqbxlz7/OI+HBavkWrLF9dazJsHoE5Ds3EL1Rzm62wcLURT SPeUxhLCUPxt9aMj7D1v+6q2ZMZZdNzaaNW//PDHUxQ5ZyKVBYJfSufOWnEE/kk6 jASknGnQKmKgLjvIMemEbZSZ20+rfFIrhVGpfDoClfkEuGJEkqIVfU1HxpyHa5CR r7XWmiYa2H6h/yM7o+9WIbB94DJZ9ORb4ftXWJxAalMG32bpv2cK9Qzp29biIgd+ ZILT9IpJHJsP8y5lTwCftPh6mhPGQU0qUW91pe2syuNwUkLMuf6JX4y8/YObvMRy Lo9oPGQDZinyst15Bz65L/DNbHoTw+Y= -----END CERTIFICATE-----Generated at Wed Nov 5 07:56:11 2025 by rpki-client