$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa File: a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa (raw, json) Hash identifier: MDQ+c/awEO8WdcAIpkhrfkiWD3S1t4bH2ttZ5hk3zWM= Subject key identifier: 81:81:26:77:8F:88:A6:28:E4:AC:BE:5B:42:FB:B6:EC:94:42:A1:54 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584BA8D06DCCB8B11B6A92623380 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 31713 IP address blocks: 209.8.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a8:d0:6d:cc:b8:b1:1b:6a:92:62:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=fef459d5-4e2e-46f9-ac00-6b108fc69e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:f6:6a:70:6d:15:f1:28:65:22:b5:29:0a: c1:2e:1c:f8:9b:c1:86:9e:a1:f8:87:1d:40:01:5b: f9:3b:f8:ce:33:d4:81:b4:0d:98:55:0a:07:67:63: 05:9e:e4:5e:9a:ce:42:25:09:f3:25:50:30:72:29: 1e:f1:3b:db:ec:12:34:86:62:cd:e4:e8:8c:74:f7: 11:a7:84:8c:a1:12:ed:7d:1d:5f:ad:7a:25:6e:2b: 21:2b:34:c2:cd:6d:2b:da:2b:84:cf:8e:1a:3b:76: 38:f9:7e:80:bd:67:08:e4:0c:92:a1:77:04:70:7b: 01:55:78:0a:66:c8:05:a2:33:3f:8b:8d:6d:31:32: 68:d6:73:f8:63:9e:32:cc:57:6c:d1:f1:f5:b3:07: fb:7f:27:7d:e0:c5:22:04:3b:08:27:7a:98:5a:ec: d5:e2:31:f1:62:29:53:64:3c:c1:1c:08:ee:6a:65: a6:72:0b:d4:a4:d2:5c:91:8d:dd:f0:2e:b3:a0:56: 82:1b:d2:2c:dd:23:2c:46:11:77:4b:33:d8:7d:29: 03:67:1c:af:42:85:0c:0d:3c:1e:3a:a8:80:0b:3d: 65:59:34:c6:01:47:97:d1:78:94:d2:3f:cb:82:31: d7:fa:2e:94:17:93:02:1d:ad:24:ee:1e:9c:12:d6: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:81:26:77:8F:88:A6:28:E4:AC:BE:5B:42:FB:B6:EC:94:42:A1:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:03:40:98:88:0c:f3:0d:0b:d7:f7:71:d1:e2:fd:38:69:50: 09:a5:6b:05:7f:d8:6e:9d:d5:02:65:f0:16:c3:e9:44:97:b7: b3:70:25:66:a4:15:10:a4:68:30:43:3a:cd:49:6f:c7:b3:a6: ce:aa:ac:52:e9:e6:f5:3e:29:99:6f:d9:4e:d8:12:47:f4:30: ce:e4:e5:2e:36:ae:00:0f:95:84:76:9b:3d:db:58:d2:06:38: 71:33:91:9c:4a:b5:98:41:5d:72:b2:82:f5:97:4c:24:e9:fc: 65:ba:65:a7:20:11:65:24:a3:bb:4b:1a:58:89:ec:77:43:d7: fe:76:b2:03:29:2e:34:eb:b0:4a:11:15:43:d3:e3:2b:cf:75: b6:6c:cf:76:0e:3c:61:97:dc:ca:96:56:23:57:50:22:07:97: 98:03:fe:dc:84:bd:0b:2e:be:e6:ff:8c:b6:cd:0f:7b:21:92: d7:96:09:7e:31:17:de:b0:3a:c6:cc:c6:4b:e7:a9:85:0e:14: 02:96:3b:0d:1d:63:07:69:da:7a:10:54:32:f6:71:65:c1:7e: d8:e7:4f:32:4c:ae:cb:53:c7:58:14:ef:4d:6d:6e:c8:36:e5: 03:9c:89:8e:7d:e0:d7:98:95:6c:74:75:c1:6a:3f:79:f9:a1: e0:b0:1b:fd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuo0G3MuLEbapJiM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmVmNDU5ZDUtNGUyZS00NmY5LWFjMDAtNmIxMDhmYzY5ZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMf2anBtFfEoZSK1KQrBLhz4m8GGnqH4hx1A AVv5O/jOM9SBtA2YVQoHZ2MFnuRems5CJQnzJVAwcike8Tvb7BI0hmLN5OiMdPcR p4SMoRLtfR1frXolbishKzTCzW0r2iuEz44aO3Y4+X6AvWcI5AySoXcEcHsBVXgK ZsgFojM/i41tMTJo1nP4Y54yzFds0fH1swf7fyd94MUiBDsIJ3qYWuzV4jHxYilT ZDzBHAjuamWmcgvUpNJckY3d8C6zoFaCG9Is3SMsRhF3SzPYfSkDZxyvQoUMDTwe OqiACz1lWTTGAUeX0XiU0j/LgjHX+i6UF5MCHa0k7h6cEtYzXQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIGBJnePiKYo5Ky+W0L7tuyUQqFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYTZlZTJlMWMtMjZkMS0z YTA5LTk3MDYtMzk2YTdiNDc3ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0QgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEANAmIgM8w0L1/dx0eL9OGlQCaVrBX/Ybp3VAmXwFsPpRJe3s3AlZqQV EKRoMEM6zUlvx7OmzqqsUunm9T4pmW/ZTtgSR/QwzuTlLjauAA+VhHabPdtY0gY4 cTORnEq1mEFdcrKC9ZdMJOn8ZbplpyARZSSju0saWInsd0PX/nayAykuNOuwShEV Q9PjK891tmzPdg48YZfcypZWI1dQIgeXmAP+3IS9Cy6+5v+Mts0PeyGS15YJfjEX 3rA6xszGS+ephQ4UApY7DR1jB2naehBUMvZxZcF+2OdPMkyuy1PHWBTvTW1uyDbl A5yJjn3g15iVbHR1wWo/efmh4LAb/Q== -----END CERTIFICATE-----Generated at Wed Nov 5 08:18:52 2025 by rpki-client