$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/89909fdf-6692-3e87-bf0b-54e01c820bc1.roa File: 89909fdf-6692-3e87-bf0b-54e01c820bc1.roa (raw, json) Hash identifier: qEy78G3hRf5k+ROzj1cQkO08A5HEFbb3WjvmVBRJSBY= Subject key identifier: 6B:10:BB:71:8B:BA:18:EA:D4:99:7D:3E:E6:AB:E3:4D:22:36:AA:EC Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE5A563144ADE809A2880 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/89909fdf-6692-3e87-bf0b-54e01c820bc1.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 135391 IP address blocks: 206.161.232.0/24 maxlen: 24 206.161.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e5:a5:63:14:4a:de:80:9a:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=cd8fb2c6-b434-41c0-87b6-492642c3d602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:13:7d:b6:ff:84:e8:6d:cb:ba:ac:74:c9:64: 4e:46:21:28:4f:c1:30:06:e0:d4:b0:8d:9a:51:7d: bc:7e:40:ae:8d:8f:3d:21:81:28:d0:a0:e1:ae:fc: a5:45:c1:b5:0c:d5:6a:d4:14:20:3b:8d:e8:ad:29: 05:50:2c:e9:ac:05:f1:15:51:58:27:88:a7:84:0d: fc:cb:23:e0:a4:c3:c0:b0:cc:0c:9e:07:e0:b2:76: 43:1a:7f:e5:7f:ee:45:27:3e:50:fb:71:70:c0:eb: e4:50:fd:96:fa:f1:a0:37:3a:0d:ee:31:88:fb:e6: 10:9a:4b:d6:14:e5:d4:bb:83:a9:14:d8:16:53:21: 80:4f:73:4f:32:20:b0:c3:5a:dc:9b:bc:18:3b:e3: c9:d5:da:36:93:c9:a5:8d:19:88:70:22:21:c0:12: 57:71:19:a4:ab:7c:c9:4a:ac:72:f5:8c:7b:ea:04: 75:d7:29:62:66:f9:85:74:4b:fd:2d:73:16:cb:c9: c7:54:69:53:78:32:b5:83:d7:45:22:ce:36:e6:ba: fa:af:c0:26:91:5b:e2:de:f8:cd:84:8e:71:51:fb: b8:e8:b8:30:7f:a2:18:97:35:f3:e0:03:56:c2:7e: 3d:8f:ac:62:67:ff:98:5c:73:c3:32:8c:09:d3:c4: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:10:BB:71:8B:BA:18:EA:D4:99:7D:3E:E6:AB:E3:4D:22:36:AA:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/89909fdf-6692-3e87-bf0b-54e01c820bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 206.161.232.0/24 206.161.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e4:dd:c6:f1:e7:09:69:9b:cb:f6:97:a5:5a:32:fc:49:1e: 48:f6:c3:79:a9:e3:95:31:ce:65:e0:89:e7:de:c5:65:4d:85: ea:73:51:da:72:87:01:c2:5d:44:87:1f:e5:81:38:d7:53:89: 85:eb:49:4b:81:dc:cf:04:6d:12:9d:8c:01:7a:2f:52:4f:32: 54:2f:b4:2d:fe:6e:87:d5:4a:06:1b:4a:ec:49:fa:20:6e:dd: c5:8b:e5:8e:77:62:0e:79:f2:bc:94:9e:db:39:c5:98:b7:a3: 16:ea:f5:b6:cb:57:d7:ec:cc:0b:dd:a0:14:97:0e:84:98:b5: d5:3a:1f:5a:2d:e9:19:60:38:2e:95:1c:72:61:57:be:eb:13: 66:19:1a:dc:51:5b:92:a3:27:e0:a2:01:8c:dd:9f:35:98:2e: 2a:e9:b5:68:5c:6f:b6:8e:7e:69:da:d1:76:e9:3b:42:63:70: 6e:cd:6b:c9:4d:ae:b7:1b:61:e7:e3:fc:1a:4c:40:45:1d:c9: 0d:14:38:f2:60:13:bc:79:51:fd:5a:77:4d:f8:03:33:c3:c4: c0:48:55:3f:a4:d9:d2:3a:17:80:e1:69:46:fd:9f:2f:24:10: 8b:33:25:81:a0:54:69:3b:79:d9:68:c9:e4:ae:89:54:bf:cf: b8:e7:78:17 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuXDOWlYxRK3oCaKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk Y2Q4ZmIyYzYtYjQzNC00MWMwLTg3YjYtNDkyNjQyYzNkNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhN9tv+E6G3Luqx0yWRORiEoT8EwBuDUsI2a UX28fkCujY89IYEo0KDhrvylRcG1DNVq1BQgO43orSkFUCzprAXxFVFYJ4inhA38 yyPgpMPAsMwMngfgsnZDGn/lf+5FJz5Q+3FwwOvkUP2W+vGgNzoN7jGI++YQmkvW FOXUu4OpFNgWUyGAT3NPMiCww1rcm7wYO+PJ1do2k8mljRmIcCIhwBJXcRmkq3zJ Sqxy9Yx76gR11yliZvmFdEv9LXMWy8nHVGlTeDK1g9dFIs425rr6r8AmkVvi3vjN hI5xUfu46Lgwf6IYlzXz4ANWwn49j6xiZ/+YXHPDMowJ08SxvwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGsQu3GLuhjq1Jl9Puar400iNqrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvODk5MDlmZGYtNjY5Mi0z ZTg3LWJmMGItNTRlMDFjODIwYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzqHoAwQA zqHqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABnk3cbx5wlpm8v2l6VaMvxJHkj2w3mp45UxzmXgiefexWVN hepzUdpyhwHCXUSHH+WBONdTiYXrSUuB3M8EbRKdjAF6L1JPMlQvtC3+bofVSgYb SuxJ+iBu3cWL5Y53Yg558ryUnts5xZi3oxbq9bbLV9fszAvdoBSXDoSYtdU6H1ot 6RlgOC6VHHJhV77rE2YZGtxRW5KjJ+CiAYzdnzWYLirptWhcb7aOfmna0XbpO0Jj cG7Na8lNrrcbYefj/BpMQEUdyQ0UOPJgE7x5Uf1ad034AzPDxMBIVT+k2dI6F4Dh aUb9ny8kEIszJYGgVGk7edloyeSuiVS/z7jneBc= -----END CERTIFICATE-----Generated at Sat Oct 25 13:36:07 2025 by rpki-client