$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9d32fd60-59d6-38ff-9495-259335bafe5e.roa File: 9d32fd60-59d6-38ff-9495-259335bafe5e.roa (raw, json) Hash identifier: jk79CyBfMlSVfBKezLU6rZpwRPV26Nly+zsTjPh6UO0= Subject key identifier: 67:8B:25:DA:62:D3:80:6F:4C:BE:63:88:D3:6A:EC:16:1E:0C:89:54 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE11B9F155CD0F6FB51F0 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9d32fd60-59d6-38ff-9495-259335bafe5e.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 3491 IP address blocks: 205.252.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e1:1b:9f:15:5c:d0:f6:fb:51:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=ff9af125-3375-4c90-977a-314191d1b2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:00:06:3d:60:de:0b:88:e2:f3:23:56:55:28: 59:3e:96:31:1c:be:2b:0e:85:29:69:3e:ec:a1:b6: da:4b:94:d7:a0:fe:8b:17:a9:27:ff:93:50:bd:02: c0:04:f2:24:8c:ed:fd:ed:d7:1a:0a:36:b2:af:58: eb:c9:a3:ce:ee:88:a2:69:d3:96:51:6b:4f:cc:fb: 70:01:f0:5f:4e:e8:9c:36:4c:6f:3d:5e:4d:9d:0f: 14:a2:50:4d:7c:e2:e3:46:ce:ed:a6:49:10:56:a6: 54:fa:af:f1:da:00:32:1d:13:4d:b4:c7:48:be:d4: e8:85:1a:22:2b:26:4c:f9:29:6f:a5:d4:be:57:16: 88:e8:92:0d:ce:bd:bd:1b:12:9c:6f:b0:14:51:69: ba:2b:06:a4:e3:61:8d:dd:97:68:e4:db:0f:ac:79: f1:22:28:16:fa:45:8c:ad:e0:f7:36:26:82:aa:da: 6f:25:52:05:be:2c:b7:97:24:05:1a:59:c5:82:4e: 66:4f:5a:50:d4:6b:5a:32:44:9e:bd:a3:88:f1:f4: 93:98:a1:25:ef:39:6e:6e:40:d9:85:76:5c:87:5c: fa:9d:80:18:4a:63:e3:d1:5a:bc:d9:58:e1:62:38: f8:b9:86:aa:7e:ad:2c:ce:e9:75:c6:36:70:72:21: b9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8B:25:DA:62:D3:80:6F:4C:BE:63:88:D3:6A:EC:16:1E:0C:89:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9d32fd60-59d6-38ff-9495-259335bafe5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 205.252.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a3:8e:be:cb:1f:64:f5:52:e6:d3:8a:35:3f:19:ea:9b:63: 35:95:79:5e:62:44:1d:ff:ca:d1:80:de:b2:e4:0d:6d:85:0c: 7d:24:4f:de:a8:22:db:2d:22:9f:a9:8b:bd:49:71:15:dd:f6: c7:75:ef:c3:8a:99:06:58:41:9f:62:32:50:93:c3:7f:b3:7a: 0c:11:70:f2:51:25:0d:e6:9e:0d:6f:81:29:bd:77:a5:5b:62: 36:69:44:8f:79:82:be:23:b5:eb:29:5f:a2:29:53:6f:a7:bf: 3a:43:6b:26:8f:c4:33:e0:65:f8:31:56:ad:ae:5e:d9:f1:04: 86:d9:88:6b:ae:23:e6:d3:ac:77:71:7c:96:2b:d1:59:3c:c9: de:3d:b1:f3:3b:98:5d:db:70:65:1c:f3:c2:1c:3e:fc:ac:a8: e2:a2:09:57:ff:53:82:a6:c6:7f:e4:cb:f7:8f:dc:3c:3c:68: 68:da:c6:c1:38:c5:a2:66:00:99:17:0b:6b:4f:48:25:c9:43: 57:e8:89:46:6e:45:08:10:bc:4b:99:f0:c4:08:06:fd:c8:e6: 9d:5d:73:8f:8e:4a:96:95:ba:ba:21:20:d4:a1:b1:07:71:25: 61:15:96:b8:d0:5c:53:32:3c:5a:86:a4:2a:68:22:b1:6c:84: 36:89:11:87 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuXDOEbnxVc0Pb7UfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZmY5YWYxMjUtMzM3NS00YzkwLTk3N2EtMzE0MTkxZDFiMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwAGPWDeC4ji8yNWVShZPpYxHL4rDoUpaT7s obbaS5TXoP6LF6kn/5NQvQLABPIkjO397dcaCjayr1jryaPO7oiiadOWUWtPzPtw AfBfTuicNkxvPV5NnQ8UolBNfOLjRs7tpkkQVqZU+q/x2gAyHRNNtMdIvtTohRoi KyZM+SlvpdS+VxaI6JINzr29GxKcb7AUUWm6Kwak42GN3Zdo5NsPrHnxIigW+kWM reD3NiaCqtpvJVIFviy3lyQFGlnFgk5mT1pQ1GtaMkSevaOI8fSTmKEl7zlubkDZ hXZch1z6nYAYSmPj0Vq82VjhYjj4uYaqfq0szul1xjZwciG5xwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGeLJdpi04BvTL5jiNNq7BYeDIlUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOWQzMmZkNjAtNTlkNi0z OGZmLTk0OTUtMjU5MzM1YmFmZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzfwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATaOOvssfZPVS5tOKNT8Z6ptjNZV5XmJEHf/K0YDesuQNbYUMfSRP3qgi 2y0in6mLvUlxFd32x3Xvw4qZBlhBn2IyUJPDf7N6DBFw8lElDeaeDW+BKb13pVti NmlEj3mCviO16ylfoilTb6e/OkNrJo/EM+Bl+DFWra5e2fEEhtmIa64j5tOsd3F8 livRWTzJ3j2x8zuYXdtwZRzzwhw+/Kyo4qIJV/9TgqbGf+TL94/cPDxoaNrGwTjF omYAmRcLa09IJclDV+iJRm5FCBC8S5nwxAgG/cjmnV1zj45KlpW6uiEg1KGxB3El YRWWuNBcUzI8WoakKmgisWyENokRhw== -----END CERTIFICATE-----Generated at Sat Oct 25 13:40:18 2025 by rpki-client