$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cc102866-a902-3087-b051-5f8557993d88.roa File: cc102866-a902-3087-b051-5f8557993d88.roa (raw, json) Hash identifier: 2r3ud/aT56BRPhiuGHvfEutcLlEQG/AcQjZFCu6Jx98= Subject key identifier: 24:EE:A9:61:89:4D:C6:28:C9:8F:A0:25:46:5A:8D:86:B7:9C:3B:8D Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE4857CC9545BCD6AFAB8 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cc102866-a902-3087-b051-5f8557993d88.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 29944 IP address blocks: 209.9.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e4:85:7c:c9:54:5b:cd:6a:fa:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=11ef43b8-10f2-4ef2-b34c-edbfc070ac03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:c3:aa:b5:33:04:30:9f:05:f4:80:eb:38: 99:37:87:81:30:d6:06:81:a2:f0:4b:9b:96:7a:3b: 4c:c0:25:c6:e2:40:ba:82:1e:1f:9e:70:3f:ef:18: 91:16:16:4a:c1:e0:30:31:3c:b9:b7:c7:59:62:60: f9:6d:a6:7d:2f:b2:fa:a8:6d:81:cb:20:8a:16:59: 65:37:79:fb:a3:75:86:36:c7:34:69:39:3e:a2:26: 33:b5:df:94:5c:45:27:85:6e:eb:4b:51:40:43:06: e4:cb:38:96:9c:39:c5:1c:53:3d:f3:4d:54:52:f5: 2a:2b:9a:52:9a:4a:2d:2e:2b:b0:1d:87:a8:6b:ec: ef:59:2d:fc:32:4b:eb:0c:be:80:37:64:bc:89:d2: d5:46:da:96:a4:59:91:4e:25:1f:ac:8d:6e:82:cc: 3c:e2:5c:ff:1f:19:89:ee:da:d8:55:01:57:ae:27: 62:b2:8b:1f:c7:2f:1e:69:d0:23:1e:6e:df:86:71: 57:6e:c6:49:80:81:b3:e2:c7:cb:3b:38:58:40:54: 46:a7:d0:af:5a:06:40:7a:b0:3b:80:5d:29:96:01: 74:76:da:fe:04:a7:19:7c:7a:b0:50:f5:de:91:e1: db:79:ef:e7:d9:41:69:2c:4d:60:9a:f1:99:0e:4d: cd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EE:A9:61:89:4D:C6:28:C9:8F:A0:25:46:5A:8D:86:B7:9C:3B:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cc102866-a902-3087-b051-5f8557993d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:cf:d6:48:ad:fb:00:5d:82:7f:f8:65:5b:5d:e8:73:5a:ba: df:93:d7:2c:e4:20:59:de:24:04:b0:ce:3a:ff:1d:73:e2:d7: a5:17:40:be:dd:97:2f:00:ee:66:a2:f6:53:ee:58:17:d7:e3: 69:8a:ef:1b:c7:a2:66:62:21:ce:b1:d8:51:6a:7b:4a:f0:87: 68:44:85:28:b8:ac:5f:7c:c7:f6:86:1f:80:a0:53:f1:ad:cf: bc:0c:af:d2:72:b8:a5:0b:96:7f:0b:6f:d6:39:bc:8d:a2:3d: 80:55:0a:3d:d6:4b:88:9a:5e:4f:1f:cb:2e:1b:a6:8f:99:84: 1b:7b:fa:76:67:55:01:d0:38:e4:c1:90:fb:4a:7e:bd:e7:ca: 79:ab:45:a7:16:76:40:1b:86:f4:6d:a7:93:b2:53:65:64:f8: 0a:02:d4:0f:46:64:85:62:c4:b6:e3:9c:3e:53:0b:89:95:ca: 4c:33:56:ff:41:fa:61:25:c0:4b:32:7f:35:2f:8e:7f:89:d0: 2f:88:6c:a0:4a:28:31:82:f8:68:4d:ed:67:8c:ed:ef:62:00: e2:9f:56:25:9a:1a:69:ac:4c:07:85:2f:41:34:f1:bf:1f:52: 23:1a:15:7f:95:02:8e:55:9e:41:9f:64:34:54:92:b2:93:60: 64:b2:2a:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOSFfMlUW81q+rgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MTFlZjQzYjgtMTBmMi00ZWYyLWIzNGMtZWRiZmMwNzBhYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig7DqrUzBDCfBfSA6ziZN4eBMNYGgaLwS5uW ejtMwCXG4kC6gh4fnnA/7xiRFhZKweAwMTy5t8dZYmD5baZ9L7L6qG2ByyCKFlll N3n7o3WGNsc0aTk+oiYztd+UXEUnhW7rS1FAQwbkyziWnDnFHFM9801UUvUqK5pS mkotLiuwHYeoa+zvWS38MkvrDL6AN2S8idLVRtqWpFmRTiUfrI1ugsw84lz/HxmJ 7trYVQFXridisosfxy8eadAjHm7fhnFXbsZJgIGz4sfLOzhYQFRGp9CvWgZAerA7 gF0plgF0dtr+BKcZfHqwUPXekeHbee/n2UFpLE1gmvGZDk3NVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTuqWGJTcYoyY+gJUZajYa3nDuNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvY2MxMDI4NjYtYTkwMi0z MDg3LWIwNTEtNWY4NTU3OTkzZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXP1kit+wBdgn/4ZVtd6HNaut+T1yzkIFneJASwzjr/HXPi16UXQL7d ly8A7mai9lPuWBfX42mK7xvHomZiIc6x2FFqe0rwh2hEhSi4rF98x/aGH4CgU/Gt z7wMr9JyuKULln8Lb9Y5vI2iPYBVCj3WS4iaXk8fyy4bpo+ZhBt7+nZnVQHQOOTB kPtKfr3nynmrRacWdkAbhvRtp5OyU2Vk+AoC1A9GZIVixLbjnD5TC4mVykwzVv9B +mElwEsyfzUvjn+J0C+IbKBKKDGC+GhN7WeM7e9iAOKfViWaGmmsTAeFL0E08b8f UiMaFX+VAo5VnkGfZDRUkrKTYGSyKgg= -----END CERTIFICATE-----Generated at Wed Nov 5 11:27:06 2025 by rpki-client