$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/a9cd02b8-2365-3281-9012-ab50278bf591.roa File: a9cd02b8-2365-3281-9012-ab50278bf591.roa (raw, json) Hash identifier: 3+5jW5nwBs1xXsQ3qWbWjk0h7lyjsAL9yvwdtA2SX5A= Subject key identifier: 86:E1:11:25:02:1D:BE:3E:D2:52:F3:83:78:F3:10:62:CB:1F:76:49 Certificate issuer: /CN=2059c963-068e-4fba-a7d6-639c3f36a91b Certificate serial: 010D0C9F4328584B21CC16C08DDB0AAFD1B26900 Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/a9cd02b8-2365-3281-9012-ab50278bf591.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 209.126.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:16:c0:8d:db:0a:af:d1:b2:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=aa32feec-26e8-4f70-a4d1-cc6a85eb1333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:9c:d2:d2:7d:9a:aa:80:cb:19:a1:aa:13: 25:00:42:f4:80:a6:8a:f5:77:7f:b4:27:dd:a8:65: be:c5:e9:df:f2:34:9d:b8:bb:8c:80:c3:83:40:85: 4e:be:9e:8b:8d:c2:6e:82:b1:6c:7e:8c:ed:59:3e: 34:b1:d1:c9:3e:e3:36:ba:96:a8:3a:f3:2c:2e:48: 36:80:39:19:29:5d:a6:b5:b3:80:d7:d4:97:a1:a0: f3:f3:a7:1f:ec:4a:60:23:82:fe:3f:0f:38:4f:0f: 2c:80:f4:50:7c:58:46:af:1a:53:3a:36:a0:ed:af: e4:28:24:62:09:c1:c9:58:26:af:c2:4a:7d:b1:fe: 74:77:f3:f3:82:bf:ba:d7:23:7a:4c:60:da:28:a7: d6:11:aa:53:51:0c:f5:e1:b2:37:77:e5:48:05:87: 95:35:5a:20:38:12:d8:6c:66:3b:37:50:4f:fb:06: 89:ac:01:ef:3e:f9:d5:6b:47:64:35:01:0f:e1:85: 07:3d:ea:a8:63:e0:25:fc:3f:50:fa:62:2a:dd:8f: 87:10:14:eb:80:da:87:f1:f0:1d:5e:10:78:e7:50: c5:29:9c:9f:e7:b9:59:6e:14:69:51:97:15:a6:d4: 7b:cf:98:6c:89:36:a4:e5:a6:25:23:91:d3:92:94: 18:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E1:11:25:02:1D:BE:3E:D2:52:F3:83:78:F3:10:62:CB:1F:76:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/a9cd02b8-2365-3281-9012-ab50278bf591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl X509v3 Authority Key Identifier: keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer sbgp-ipAddrBlock: critical IPv4: 209.126.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f3:69:f3:59:43:7b:f2:b8:b7:a5:e2:fa:dc:74:70:ab:9d: c1:40:97:cd:cb:6b:4d:8f:70:af:3d:ba:2b:84:18:cf:ad:0b: 1d:c0:68:00:a5:39:f2:52:d4:26:b6:e6:7b:e1:9f:01:dc:56: 1f:c5:2c:5c:76:4a:43:34:4f:5c:6a:c6:85:b4:4b:e2:ee:64: a4:a6:12:d2:4e:b0:0a:c1:2d:e9:83:af:fb:ea:88:8d:0f:8b: ed:47:1b:2d:29:38:93:bc:fa:57:9b:e5:3d:f2:82:30:c4:86: 09:69:1f:7b:65:5e:fb:78:47:af:34:18:2a:c8:d3:12:46:09: 63:97:5c:e4:a2:c7:9c:45:1b:93:fb:c4:95:97:61:ca:4d:38: 31:fa:c1:aa:16:2c:92:67:ce:09:c1:6a:6f:f9:3d:bd:2e:51: 07:14:0d:c7:ec:67:53:fb:b3:a7:f8:b0:2b:2b:59:5a:bf:9b: b3:b9:49:27:34:35:79:70:b6:fb:bd:73:b3:15:03:5f:09:4f: 4d:b1:e1:d3:54:58:51:a7:82:6d:06:00:3b:ad:5d:20:b1:23: e7:bb:cc:4e:b4:8f:4b:7c:66:49:93:5f:04:7b:c5:c8:b2:56: 98:79:55:ee:6e:2f:b9:fc:c7:0a:52:4e:76:04:ef:c9:ff:9f: 01:10:be:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBbAjdsKr9GyaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA1OWM5NjMtMDY4ZS00ZmJhLWE3ZDYtNjM5YzNmMzZh OTFiMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk YWEzMmZlZWMtMjZlOC00ZjcwLWE0ZDEtY2M2YTg1ZWIxMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY2c0tJ9mqqAyxmhqhMlAEL0gKaK9Xd/tCfd qGW+xenf8jSduLuMgMODQIVOvp6LjcJugrFsfoztWT40sdHJPuM2upaoOvMsLkg2 gDkZKV2mtbOA19SXoaDz86cf7EpgI4L+Pw84Tw8sgPRQfFhGrxpTOjag7a/kKCRi CcHJWCavwkp9sf50d/Pzgr+61yN6TGDaKKfWEapTUQz14bI3d+VIBYeVNVogOBLY bGY7N1BP+waJrAHvPvnVa0dkNQEP4YUHPeqoY+Al/D9Q+mIq3Y+HEBTrgNqH8fAd XhB451DFKZyf57lZbhRpUZcVptR7z5hsiTak5aYlI5HTkpQYNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbhESUCHb4+0lLzg3jzEGLLH3ZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5 Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2YzNmE5MWIvYTljZDAyYjgtMjM2NS0z MjgxLTkwMTItYWI1MDI3OGJmNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA1OWM5NjMtMDY4ZS00ZmJhLWE3 ZDYtNjM5YzNmMzZhOTFiLzIwNTljOTYzLTA2OGUtNGZiYS1hN2Q2LTYzOWMzZjM2 YTkxYi5jcmwwHwYDVR0jBBgwFoAUWNZYCwcsYV693v/1IVy0dP6S2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02Mzlj M2YzNmE5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0X5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvzafNZQ3vyuLel4vrcdHCrncFAl83La02PcK89uiuEGM+tCx3AaACl OfJS1Ca25nvhnwHcVh/FLFx2SkM0T1xqxoW0S+LuZKSmEtJOsArBLemDr/vqiI0P i+1HGy0pOJO8+leb5T3ygjDEhglpH3tlXvt4R680GCrI0xJGCWOXXOSix5xFG5P7 xJWXYcpNODH6waoWLJJnzgnBam/5Pb0uUQcUDcfsZ1P7s6f4sCsrWVq/m7O5SSc0 NXlwtvu9c7MVA18JT02x4dNUWFGngm0GADutXSCxI+e7zE60j0t8ZkmTXwR7xciy Vph5Ve5uL7n8xwpSTnYE78n/nwEQvtY= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:17 2025 by rpki-client