$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6da0c892-be19-300d-87f4-fdb8228015ff.roa File: 6da0c892-be19-300d-87f4-fdb8228015ff.roa (raw, json) Hash identifier: 6f9Ux9xCw9K8PJDwU+bSJhXbtFhOQ1nva3qKNh60XRM= Subject key identifier: 86:74:19:AC:54:3C:33:98:0A:7E:84:AF:06:E6:0F:E2:04:4E:4B:08 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B95A79667D5D85E73CD663300 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6da0c892-be19-300d-87f4-fdb8228015ff.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 17057 IP address blocks: 209.8.6.0/24 maxlen: 24 209.9.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:96:67:d5:d8:5e:73:cd:66:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=ab84623d-d323-4d42-80f2-df7942f860a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:94:63:5b:24:28:22:ba:ee:d9:97:f6:1d:16: fe:b0:b2:65:c5:15:79:97:e4:5d:30:41:ac:9b:c6: 6e:c7:8b:87:95:29:a6:22:78:e0:a0:8a:7a:ed:ce: f6:bb:0b:2d:a2:50:e2:c3:73:95:e9:6f:ac:ff:37: 7b:a1:2b:3e:0b:5c:ac:8f:0e:a1:71:91:d5:b8:47: e1:83:3d:04:4b:f3:e1:5f:06:30:68:56:55:c5:26: c1:d1:58:2b:b9:43:ed:46:02:e3:66:9e:36:23:88: 23:35:6e:29:33:63:e9:73:d9:b4:88:c7:cf:11:4f: 7f:43:a5:e3:e5:4a:cf:56:bc:11:84:f5:6e:a9:5a: ab:c5:c2:32:1c:cd:01:de:f8:82:ed:8c:94:0f:d6: db:8b:cf:de:27:27:32:93:4d:c2:13:51:36:8c:06: 41:b4:53:9d:13:1b:cc:c4:a1:c3:19:28:8a:bd:39: 85:bc:88:5f:3b:4d:7b:35:c3:de:2b:4d:dd:d3:75: fb:cb:fb:d4:d3:54:8a:77:12:2a:fc:44:ed:2e:5f: bb:54:c5:c1:38:a3:d9:b8:9a:e9:52:d0:f7:52:b0: 59:f8:ed:4d:a5:cb:8c:8b:94:42:7f:19:46:44:2c: 05:dd:e8:06:94:e1:4d:aa:27:0c:9a:52:af:45:1b: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:74:19:AC:54:3C:33:98:0A:7E:84:AF:06:E6:0F:E2:04:4E:4B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6da0c892-be19-300d-87f4-fdb8228015ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.6.0/24 209.9.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:2d:f1:99:ca:f5:44:3e:5a:f0:65:3a:81:30:ac:02:ff:0c: c1:54:f7:1c:8f:08:7b:44:25:51:53:c7:5c:78:15:c4:cc:81: 8c:8b:d8:6d:3a:04:61:ed:67:14:91:67:73:03:c6:ff:52:eb: e5:8c:84:94:d7:9a:b2:7f:7e:34:db:b1:13:78:88:df:53:01: d8:4d:7b:e7:a3:50:85:b2:e9:14:99:6f:9b:89:c9:12:cd:3c: c6:27:ae:3e:ef:4f:55:78:59:1b:26:2b:93:57:58:4f:b6:38: 8f:2c:46:f6:7a:c4:9e:16:a0:3a:cb:1e:d1:b3:53:5e:91:7e: 43:f6:b6:0b:b2:dc:4c:84:87:aa:ea:7c:96:d9:0b:a2:56:2c: 48:f8:66:a5:f0:01:4f:a8:fa:ec:66:58:86:61:c0:e6:40:ab: 61:94:11:a8:19:53:c6:b0:22:af:eb:3c:10:b3:58:06:22:e6: ed:b1:49:a9:39:f3:ba:e7:40:df:ee:bb:84:82:7c:ee:0a:bb: 73:7a:58:5f:d2:44:3c:af:50:4e:59:67:52:bc:28:34:47:d7: af:fe:a3:3e:52:8d:d8:40:a2:15:c9:c4:0b:9c:62:d0:df:3d: e1:bf:c2:6f:83:80:3e:66:70:e7:f1:cc:7e:fb:75:8d:e8:c3: 5a:7a:52:bd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuVp5Zn1dhec81mMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YWI4NDYyM2QtZDMyMy00ZDQyLTgwZjItZGY3OTQyZjg2MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZRjWyQoIrru2Zf2HRb+sLJlxRV5l+RdMEGs m8Zux4uHlSmmInjgoIp67c72uwstolDiw3OV6W+s/zd7oSs+C1ysjw6hcZHVuEfh gz0ES/PhXwYwaFZVxSbB0VgruUPtRgLjZp42I4gjNW4pM2Ppc9m0iMfPEU9/Q6Xj 5UrPVrwRhPVuqVqrxcIyHM0B3viC7YyUD9bbi8/eJycyk03CE1E2jAZBtFOdExvM xKHDGSiKvTmFvIhfO017NcPeK03d03X7y/vU01SKdxIq/ETtLl+7VMXBOKPZuJrp UtD3UrBZ+O1NpcuMi5RCfxlGRCwF3egGlOFNqicMmlKvRRt/FwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIZ0GaxUPDOYCn6ErwbmD+IETksIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNmRhMGM4OTItYmUxOS0z MDBkLTg3ZjQtZmRiODIyODAxNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0QgGAwQA 0Qm8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALkt8ZnK9UQ+WvBlOoEwrAL/DMFU9xyPCHtEJVFTx1x4FcTM gYyL2G06BGHtZxSRZ3MDxv9S6+WMhJTXmrJ/fjTbsRN4iN9TAdhNe+ejUIWy6RSZ b5uJyRLNPMYnrj7vT1V4WRsmK5NXWE+2OI8sRvZ6xJ4WoDrLHtGzU16RfkP2tguy 3EyEh6rqfJbZC6JWLEj4ZqXwAU+o+uxmWIZhwOZAq2GUEagZU8awIq/rPBCzWAYi 5u2xSak587rnQN/uu4SCfO4Ku3N6WF/SRDyvUE5ZZ1K8KDRH16/+oz5SjdhAohXJ xAucYtDfPeG/wm+DgD5mcOfxzH77dY3ow1p6Ur0= -----END CERTIFICATE-----Generated at Sat Oct 25 13:35:33 2025 by rpki-client