$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa File: 49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa (raw, json) Hash identifier: qE/9y00Rvgk3J2J0ytbGkvyAw6nwVC1B4RHDrIDEDEg= Subject key identifier: 37:33:75:36:F8:6C:52:C6:3A:00:C4:8A:67:D8:EA:EA:41:17:B0:74 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B95A7949B96B04B2A70489180 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 394973 IP address blocks: 209.9.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:94:9b:96:b0:4b:2a:70:48:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d4be61d6-530f-4185-bb58-64ff024dd87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d9:65:7d:8f:d5:d4:f9:5a:95:f6:82:48:80: f2:e4:13:e9:d1:24:c9:2b:8f:f6:4d:32:6c:64:c8: c2:a2:cd:c1:ae:83:23:bc:9d:c9:ba:41:77:d0:16: 5b:4a:10:54:ed:55:f2:ae:cb:43:21:0e:dd:7a:ae: 66:ee:a4:8c:4b:dd:95:0f:c7:3f:ec:14:80:16:11: 45:01:7d:d6:88:ce:92:d0:32:9a:d0:eb:6e:32:fa: 5f:f0:8b:a7:67:29:78:c9:54:fc:1d:ea:36:fa:56: 5a:ac:62:6f:4f:9a:29:f7:3f:2b:04:67:18:0c:a1: 03:22:58:06:27:c6:a5:75:97:db:b6:cc:39:36:20: 2a:58:a0:3d:89:33:2f:3b:19:14:be:e7:25:d0:48: 19:3d:bd:64:6c:22:fb:ba:cf:a3:b1:0c:ad:e8:a1: 46:c4:2b:e6:b1:fc:f9:bc:dd:2d:fb:f1:91:31:8d: 80:87:c2:84:bf:6b:fb:45:bb:bc:ae:7a:60:db:d7: 35:4d:69:35:d8:46:0e:4c:9e:7f:6a:3e:83:5c:59: 5c:67:5b:d8:e5:dc:46:f0:1e:f3:71:4e:e5:b9:3c: 79:8d:93:a8:fd:aa:79:3f:f9:79:90:78:f4:ad:d2: 9c:f9:29:8a:80:4f:84:6e:38:ca:48:b7:cc:f8:1a: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:33:75:36:F8:6C:52:C6:3A:00:C4:8A:67:D8:EA:EA:41:17:B0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c4:0b:ce:5c:b5:f0:f0:bd:5b:b9:aa:0c:ee:d4:26:eb:3b: fc:2f:53:44:74:61:95:5c:fa:9b:a5:6d:ee:8b:d5:c0:72:b4: ad:8a:61:59:57:62:91:4a:0b:0a:38:d8:b4:5c:43:cd:3c:27: ea:ff:32:d5:85:22:1c:7b:7d:d1:24:4f:8a:ea:30:e4:09:03: bf:e8:40:00:91:5f:88:18:1a:27:e5:0e:2a:59:9d:dc:9a:55: a3:0a:72:65:a8:8e:89:88:1f:6a:ce:eb:44:00:3e:4f:9d:8b: ee:75:14:48:84:02:ed:f5:d8:00:ca:74:a9:13:59:70:c4:07: a3:5a:82:65:e1:ef:27:86:0b:03:f0:09:6f:cf:a0:c0:e0:9e: a2:ea:ca:cd:4e:74:62:1d:7f:98:45:6a:a1:4c:b2:3c:19:ed: 46:f1:1c:25:b5:10:a8:ac:69:b6:5f:b1:ea:ad:49:a4:f8:d5: b3:83:2a:96:fb:9f:57:f5:ee:20:8b:4f:f9:9f:3a:a8:37:9c: a0:62:d6:fd:42:26:ea:bb:5d:dc:7f:23:f3:a5:2c:0b:bc:97: af:9e:7a:9f:73:86:d1:fa:61:d8:6d:56:dc:c3:e3:e3:22:6e: 06:ca:74:9b:e0:9a:19:76:01:a3:7d:bd:96:53:2c:04:a6:54: 71:8e:4d:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5SblrBLKnBIkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDRiZTYxZDYtNTMwZi00MTg1LWJiNTgtNjRmZjAyNGRkODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tllfY/V1PlalfaCSIDy5BPp0STJK4/2TTJs ZMjCos3BroMjvJ3JukF30BZbShBU7VXyrstDIQ7deq5m7qSMS92VD8c/7BSAFhFF AX3WiM6S0DKa0OtuMvpf8IunZyl4yVT8Heo2+lZarGJvT5op9z8rBGcYDKEDIlgG J8aldZfbtsw5NiAqWKA9iTMvOxkUvucl0EgZPb1kbCL7us+jsQyt6KFGxCvmsfz5 vN0t+/GRMY2Ah8KEv2v7Rbu8rnpg29c1TWk12EYOTJ5/aj6DXFlcZ1vY5dxG8B7z cU7luTx5jZOo/ap5P/l5kHj0rdKc+SmKgE+EbjjKSLfM+BrNmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDczdTb4bFLGOgDEimfY6upBF7B0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNDlkYmI5ZmEtMWIyZi0z OTYxLTg1ZGMtNDU3NDFmYmY3MWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QnVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALEC85ctfDwvVu5qgzu1CbrO/wvU0R0YZVc+pulbe6L1cBytK2KYVlX YpFKCwo42LRcQ808J+r/MtWFIhx7fdEkT4rqMOQJA7/oQACRX4gYGiflDipZndya VaMKcmWojomIH2rO60QAPk+di+51FEiEAu312ADKdKkTWXDEB6NagmXh7yeGCwPw CW/PoMDgnqLqys1OdGIdf5hFaqFMsjwZ7UbxHCW1EKisabZfseqtSaT41bODKpb7 n1f17iCLT/mfOqg3nKBi1v1CJuq7Xdx/I/OlLAu8l6+eep9zhtH6YdhtVtzD4+Mi bgbKdJvgmhl2AaN9vZZTLASmVHGOTYI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:21:26 2025 by rpki-client