$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c800565-0350-3f92-96a1-5c4ba4fe455c.roa File: 2c800565-0350-3f92-96a1-5c4ba4fe455c.roa (raw, json) Hash identifier: XlYJwwwEsiMqJv2EBDXHDuiIqiguY9clHQHiGs2b9Z0= Subject key identifier: DB:71:08:B1:E4:F4:50:FC:38:A6:10:5D:78:7B:91:8F:FA:17:98:5C Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B95A794AF138AA59936138800 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c800565-0350-3f92-96a1-5c4ba4fe455c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 29889 IP address blocks: 209.9.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:94:af:13:8a:a5:99:36:13:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4d082ed3-9e3b-4bd6-9255-a931cd91f4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:80:05:ee:cf:00:05:3c:de:d9:13:6e:45: 8d:da:cb:6c:2e:33:12:3b:14:84:d4:22:20:41:bf: ee:69:83:65:b4:7d:de:ba:d9:ad:c9:e7:60:49:ca: 63:c1:ab:e5:df:c0:40:e7:9b:5f:4b:97:a0:77:bc: 54:23:f2:76:c8:c0:86:50:96:69:fb:b2:27:24:0a: fd:99:4a:47:9c:27:47:b8:84:76:ab:0c:5f:db:b1: 4b:ad:fc:67:c4:db:bd:14:69:3c:41:3b:b4:5a:ae: 4a:8a:02:1e:c8:6f:04:99:55:38:a1:85:2c:df:fd: 36:7a:cd:b0:09:be:96:a5:bb:df:e4:6a:e2:de:00: 71:f2:99:8b:f2:c7:57:b2:ea:db:d7:92:27:b5:34: 30:a4:1e:1a:a3:7a:67:25:6b:3e:a3:54:50:7d:30: 51:81:84:28:a2:80:71:a1:31:fd:07:8e:e4:9d:59: a1:c2:3d:e1:98:1e:22:ca:cd:9a:af:de:ba:e0:77: 38:13:d8:ff:03:41:38:51:6e:72:b7:23:3d:00:af: 15:19:ca:aa:0a:f1:61:35:69:1b:59:26:0b:46:0d: d5:ea:a4:e1:19:88:a6:31:0a:3e:cf:48:fa:8c:8e: c3:58:c8:f0:e5:0f:8d:c4:88:b4:f5:9d:33:a3:21: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:71:08:B1:E4:F4:50:FC:38:A6:10:5D:78:7B:91:8F:FA:17:98:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c800565-0350-3f92-96a1-5c4ba4fe455c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b7:bc:f0:d9:34:89:85:bb:19:48:12:af:6f:e5:fe:71:8a: 90:0b:ac:08:cc:0d:7b:51:a3:78:96:b8:a2:99:29:6a:2d:f4: 78:1c:ac:0d:ea:0d:7e:2c:a8:20:25:0e:65:b9:03:37:fe:d6: ed:12:3f:1a:82:67:6a:f1:9a:d6:de:17:4e:10:58:80:86:b0: 92:04:9d:ba:31:f8:cf:3b:1a:85:a7:4a:f9:55:7d:dc:57:74: cc:cc:e4:44:c3:bc:3f:5a:12:d9:4e:45:2c:b0:dd:ed:e2:27: 3b:4b:e5:44:18:fa:c6:50:d9:63:a1:4c:42:6f:1e:57:8e:4c: 4b:e9:24:4e:85:bb:e5:ea:21:e7:28:b0:10:f0:18:35:8f:94: b2:36:07:59:a8:d8:fe:ad:b0:24:4d:68:d2:ea:6a:0d:f0:a1: ed:ad:e0:90:b7:56:a3:1f:04:db:22:2a:66:9f:83:f2:ba:d2: 6b:8b:bf:f7:13:2f:fc:e3:da:3d:9a:77:f0:9a:ec:75:1f:49: 97:e6:07:03:13:37:0c:80:8a:19:78:2b:49:01:fa:d0:ba:6a: 1c:56:2b:76:fd:08:f2:27:3d:a4:2a:2b:03:51:85:a8:41:1b: ba:8f:2a:22:ac:2d:a0:a5:ce:cd:8f:91:15:cc:c3:51:15:79: 4f:4a:1e:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5SvE4qlmTYTiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGQwODJlZDMtOWUzYi00YmQ2LTkyNTUtYTkzMWNkOTFmNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7SABe7PAAU83tkTbkWN2stsLjMSOxSE1CIg Qb/uaYNltH3eutmtyedgScpjwavl38BA55tfS5egd7xUI/J2yMCGUJZp+7InJAr9 mUpHnCdHuIR2qwxf27FLrfxnxNu9FGk8QTu0Wq5KigIeyG8EmVU4oYUs3/02es2w Cb6Wpbvf5Gri3gBx8pmL8sdXsurb15IntTQwpB4ao3pnJWs+o1RQfTBRgYQoooBx oTH9B47knVmhwj3hmB4iys2ar9664Hc4E9j/A0E4UW5ytyM9AK8VGcqqCvFhNWkb WSYLRg3V6qThGYimMQo+z0j6jI7DWMjw5Q+NxIi09Z0zoyENKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtxCLHk9FD8OKYQXXh7kY/6F5hcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMmM4MDA1NjUtMDM1MC0z ZjkyLTk2YTEtNWM0YmE0ZmU0NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QnuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq3vPDZNImFuxlIEq9v5f5xipALrAjMDXtRo3iWuKKZKWot9HgcrA3q DX4sqCAlDmW5Azf+1u0SPxqCZ2rxmtbeF04QWICGsJIEnbox+M87GoWnSvlVfdxX dMzM5ETDvD9aEtlORSyw3e3iJztL5UQY+sZQ2WOhTEJvHleOTEvpJE6Fu+XqIeco sBDwGDWPlLI2B1mo2P6tsCRNaNLqag3woe2t4JC3VqMfBNsiKmafg/K60muLv/cT L/zj2j2ad/Ca7HUfSZfmBwMTNwyAihl4K0kB+tC6ahxWK3b9CPInPaQqKwNRhahB G7qPKiKsLaClzs2PkRXMw1EVeU9KHp4= -----END CERTIFICATE-----Generated at Sat Oct 25 13:33:35 2025 by rpki-client