$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/80e52123-939a-321b-9214-9cc8d4826f88.roa File: 80e52123-939a-321b-9214-9cc8d4826f88.roa (raw, json) Hash identifier: qkw5RomDjdOrS4rzwmCauvT8/1E8/cUj8EnaqXPsAlc= Subject key identifier: 78:A9:98:AA:53:D3:C8:10:A3:DE:A7:F7:FA:A5:99:FE:3A:D5:BC:AD Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B9E07AE0D122623BD0D582280 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/80e52123-939a-321b-9214-9cc8d4826f88.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 7262 IP address blocks: 209.9.216.0/24 maxlen: 24 209.9.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ae:0d:12:26:23:bd:0d:58:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=eecc4043-e4dc-47de-a9fe-4e88821653e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:00:17:e2:69:3d:e6:50:c9:cf:21:24:df: b1:73:fa:c2:c9:a8:b0:e4:70:31:33:79:f6:b7:0b: af:6a:33:a9:f8:47:da:7f:2a:bf:45:9d:13:4e:dc: 5d:06:32:fe:12:00:ec:23:b6:7a:22:c4:32:e1:c3: f0:ae:8c:a4:db:76:31:e3:04:66:13:12:cc:e9:96: 7b:77:13:df:6e:3b:c9:3b:01:2a:69:49:03:dc:ad: 72:a0:6c:85:ed:59:fc:c2:cc:45:e6:69:50:2d:13: 1f:f2:cf:2e:2f:b9:72:2a:b8:d3:60:7d:d5:c0:da: 0a:8c:b3:e2:cb:e3:e3:0d:13:9a:20:d4:b0:ea:e0: b9:56:37:13:28:cd:25:7e:b6:d0:a0:ed:16:f9:51: b8:79:a1:06:b1:99:c8:96:95:3a:8d:68:34:63:4a: 4b:70:09:c6:2a:46:4c:fa:24:81:8d:33:bf:1c:8a: 91:21:ea:f3:1f:2f:67:70:36:de:63:3e:f3:81:62: 04:e9:dc:23:29:28:01:58:d6:e8:05:a7:ef:e8:84: 16:29:67:f4:5a:e9:96:71:fd:b1:61:21:a1:07:61: c1:e0:a6:d8:16:36:ca:24:4f:e9:90:12:68:d0:c9: 77:f6:5f:de:ba:cd:66:69:20:4e:9a:ed:91:05:9c: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A9:98:AA:53:D3:C8:10:A3:DE:A7:F7:FA:A5:99:FE:3A:D5:BC:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/80e52123-939a-321b-9214-9cc8d4826f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:0b:89:9f:4f:ff:a8:2d:be:ec:f1:34:f2:27:7d:06:f6:97: c9:a9:76:c3:70:54:6f:b6:64:b1:82:8f:f8:e2:c9:83:d5:13: b1:c2:8b:e1:8f:b8:40:f4:c6:9e:1b:76:23:b5:7a:15:b3:5b: b5:11:74:c1:69:83:b0:6a:26:03:86:31:88:b5:32:0f:d0:fe: 53:30:6e:41:57:71:ae:98:e5:9e:17:d7:63:cf:ae:3b:a2:ca: f9:73:80:44:f5:19:21:d3:8b:b2:9f:65:37:66:e5:e1:1f:32: 8d:1e:5c:91:01:3e:9f:d3:cf:30:ef:bc:6a:6d:2d:c7:83:9f: 6c:e3:c7:1a:a8:2c:a6:5a:54:ff:41:37:b2:e7:dd:1d:28:74: 5d:8d:df:a5:20:19:50:8b:ad:a7:31:7e:9b:80:2e:b7:55:f2: 1b:50:c5:1a:bf:41:d7:2c:76:da:4b:61:de:cb:f0:2c:6a:73: a1:eb:1e:f8:71:e5:4e:41:df:1a:8f:2b:b6:a8:35:6e:88:54: 2e:99:c8:7f:0d:2b:b6:a4:21:c6:cf:50:0c:68:1f:fa:01:79: d9:ca:34:fc:29:9a:c8:a5:f7:c9:3c:ff:4e:ce:54:f5:d2:47: d9:63:f3:37:58:cd:de:f3:4e:4a:76:06:7c:17:22:49:88:56: 8f:9d:5b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB64NEiYjvQ1YIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZWVjYzQwNDMtZTRkYy00N2RlLWE5ZmUtNGU4ODgyMTY1M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHYAF+JpPeZQyc8hJN+xc/rCyaiw5HAxM3n2 twuvajOp+Efafyq/RZ0TTtxdBjL+EgDsI7Z6IsQy4cPwroyk23Yx4wRmExLM6ZZ7 dxPfbjvJOwEqaUkD3K1yoGyF7Vn8wsxF5mlQLRMf8s8uL7lyKrjTYH3VwNoKjLPi y+PjDROaINSw6uC5VjcTKM0lfrbQoO0W+VG4eaEGsZnIlpU6jWg0Y0pLcAnGKkZM +iSBjTO/HIqRIerzHy9ncDbeYz7zgWIE6dwjKSgBWNboBafv6IQWKWf0WumWcf2x YSGhB2HB4KbYFjbKJE/pkBJo0Ml39l/eus1maSBOmu2RBZw+4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHipmKpT08gQo96n9/qlmf461bytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvODBlNTIxMjMtOTM5YS0z MjFiLTkyMTQtOWNjOGQ0ODI2Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcLiZ9P/6gtvuzxNPInfQb2l8mpdsNwVG+2ZLGCj/jiyYPVE7HCi+GP uED0xp4bdiO1ehWzW7URdMFpg7BqJgOGMYi1Mg/Q/lMwbkFXca6Y5Z4X12PPrjui yvlzgET1GSHTi7KfZTdm5eEfMo0eXJEBPp/TzzDvvGptLceDn2zjxxqoLKZaVP9B N7Ln3R0odF2N36UgGVCLracxfpuALrdV8htQxRq/QdcsdtpLYd7L8Cxqc6HrHvhx 5U5B3xqPK7aoNW6IVC6ZyH8NK7akIcbPUAxoH/oBednKNPwpmsil98k8/07OVPXS R9lj8zdYzd7zTkp2BnwXIkmIVo+dW8Y= -----END CERTIFICATE-----Generated at Tue Oct 28 00:01:41 2025 by rpki-client