$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa File: 2c199e06-0061-3f8d-8062-186a6d89c327.roa (raw, json) Hash identifier: ZEESs7Y8/WjjmQHf7dQb5oxKNuiXRx0ooMtJ/lvaGeM= Subject key identifier: E8:A5:88:30:B6:DC:02:8D:8C:4F:33:90:5F:0D:FD:6E:12:F3:D5:3C Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B9E07ACE8D9EF7D3270BC48A0 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 17057 IP address blocks: 209.8.5.0/24 maxlen: 24 209.8.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ac:e8:d9:ef:7d:32:70:bc:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=5728a5bc-745c-491b-b8ad-469bab41cbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:fb:cc:84:52:76:ab:70:56:99:e9:86:2e: 6a:28:e6:f0:54:d1:66:04:23:12:8f:6f:e9:d4:98: 85:1e:f4:6e:90:93:cb:81:6a:ad:8f:b4:3a:1e:cf: 60:2f:be:86:4e:83:4f:60:eb:e0:7f:bc:02:1b:db: ff:50:c0:66:bc:1d:9d:61:72:85:84:8e:ff:00:81: 66:35:76:23:54:2b:5d:56:5d:c0:02:51:7d:32:4f: e8:10:1f:42:c1:b8:40:ee:ae:56:9f:dc:0f:21:b3: 58:7d:48:9f:8f:72:b5:a3:b4:ce:91:45:00:1f:a6: 37:e0:e5:d5:f8:1c:b0:72:42:96:3e:f0:b4:c6:84: f2:8a:04:80:ec:26:ec:cf:43:e8:c9:3f:f1:a8:32: 78:75:e9:82:9a:d1:31:12:fe:a2:1c:e9:13:ce:2e: 21:6e:f7:42:0d:16:24:f6:37:3b:32:88:e2:70:c8: 08:a4:d6:86:d8:2c:fd:80:a5:4d:76:cb:3a:7b:7a: 81:e1:66:67:e1:ef:83:ac:f8:ea:dc:b6:d4:41:9c: 4c:f7:2b:1f:b5:9e:49:33:92:40:66:11:3c:a6:54: be:d5:83:cd:eb:b2:64:5e:39:2a:07:8e:cc:f8:af: e5:f2:27:3a:26:54:2c:93:95:a9:b2:80:36:ca:18: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A5:88:30:B6:DC:02:8D:8C:4F:33:90:5F:0D:FD:6E:12:F3:D5:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.5.0/24 209.8.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:09:3b:3f:6d:61:fb:25:cb:13:ff:aa:e5:a8:07:58:f6:bb: b1:10:28:c0:b3:bf:f1:8d:08:98:92:32:b2:9b:94:27:4f:9a: 0e:f8:31:bf:4d:f8:83:69:15:28:23:15:15:e8:a5:0a:fb:b3: db:d3:bb:f3:9d:0e:d8:4b:c4:7a:d3:dc:06:37:10:f2:4e:98: a7:f8:d1:01:ef:03:17:fd:9a:c0:d3:56:4a:17:ef:9e:33:7c: b7:00:ad:7c:af:fb:e6:02:63:ae:28:e1:c9:7f:1b:e7:70:eb: d0:80:ef:42:30:81:54:4c:b2:fd:2f:02:b4:95:74:91:69:bb: 5e:c7:80:96:10:6e:a2:d7:5e:87:8a:5e:e8:ea:5b:e8:e8:bc: 89:41:80:32:7e:9b:c6:46:2d:12:39:74:a8:20:89:c4:62:a3: 3a:c3:ef:72:2e:78:37:d2:bc:0e:b0:d3:77:00:08:3c:c6:17: ed:9e:5a:5c:f0:ef:bd:b7:ca:2d:ac:d3:75:22:b7:b6:20:f1: be:a4:f0:b2:53:af:8c:77:cc:05:52:4c:3e:d9:af:55:6d:cc: e2:91:dd:e8:85:5e:28:77:e7:1a:1e:42:bb:71:32:23:e9:1f: 2f:60:28:e4:b3:7c:ff:5f:e8:18:69:2b:39:06:08:6e:36:95: 3f:57:0b:20 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEueB6zo2e99MnC8SKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NTcyOGE1YmMtNzQ1Yy00OTFiLWI4YWQtNDY5YmFiNDFjYmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVL7zIRSdqtwVpnphi5qKObwVNFmBCMSj2/p 1JiFHvRukJPLgWqtj7Q6Hs9gL76GToNPYOvgf7wCG9v/UMBmvB2dYXKFhI7/AIFm NXYjVCtdVl3AAlF9Mk/oEB9CwbhA7q5Wn9wPIbNYfUifj3K1o7TOkUUAH6Y34OXV +BywckKWPvC0xoTyigSA7Cbsz0PoyT/xqDJ4demCmtExEv6iHOkTzi4hbvdCDRYk 9jc7MojicMgIpNaG2Cz9gKVNdss6e3qB4WZn4e+DrPjq3LbUQZxM9ysftZ5JM5JA ZhE8plS+1YPN67JkXjkqB47M+K/l8ic6JlQsk5WpsoA2yhjH8wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOiliDC23AKNjE8zkF8N/W4S89U8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMmMxOTllMDYtMDA2MS0z ZjhkLTgwNjItMTg2YTZkODljMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0QgFAwQA 0QgHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIYJOz9tYfslyxP/quWoB1j2u7EQKMCzv/GNCJiSMrKblCdP mg74Mb9N+INpFSgjFRXopQr7s9vTu/OdDthLxHrT3AY3EPJOmKf40QHvAxf9msDT VkoX754zfLcArXyv++YCY64o4cl/G+dw69CA70IwgVRMsv0vArSVdJFpu17HgJYQ bqLXXoeKXujqW+jovIlBgDJ+m8ZGLRI5dKggicRiozrD73IueDfSvA6w03cACDzG F+2eWlzw7723yi2s03Uit7Yg8b6k8LJTr4x3zAVSTD7Zr1VtzOKR3eiFXih35xoe QrtxMiPpHy9gKOSzfP9f6BhpKzkGCG42lT9XCyA= -----END CERTIFICATE-----Generated at Sat Oct 25 13:40:26 2025 by rpki-client