$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa File: e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa (raw, json) Hash identifier: 0YlkshU+hQsm/KIYzlo2Ikw7M6bFq4oUTIPVgmsuOKk= Subject key identifier: D8:32:2E:DD:CD:00:60:98:0C:2F:7D:34:9A:51:06:9D:D9:E1:DA:F9 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE498764C0304457F48A8 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 3491 IP address blocks: 209.8.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e4:98:76:4c:03:04:45:7f:48:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=29334653-eb64-497a-9b1d-fe0ae31deae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2b:bf:e0:c6:67:80:db:c5:c2:3c:7c:f7:98: 0d:41:01:0b:ed:d0:05:e1:8f:a0:64:7d:f6:d5:03: c4:25:9d:43:a8:dd:56:32:73:35:f6:1a:43:3f:b1: 54:72:24:01:c3:6d:74:60:fd:1f:08:19:14:5d:a2: 2b:b2:4a:97:e3:3d:73:64:1f:98:d1:2d:27:31:90: 38:95:2c:f2:4f:55:d8:43:4d:3f:2a:07:5b:92:29: 9f:31:49:55:dc:b1:55:9d:10:97:49:6a:82:c0:d2: 90:5b:30:03:5f:0b:20:c9:5f:4f:03:67:c2:e7:ed: f6:f7:4b:ce:15:94:b0:c9:82:5d:a5:09:1c:5f:a8: a0:45:e6:1a:c0:62:42:e7:97:2b:58:94:e9:67:61: 51:ae:94:79:69:60:2a:1b:94:72:9a:8a:b6:fb:9f: 17:7b:c0:c7:b9:ad:0b:45:11:3c:d4:95:1c:71:89: 7d:5b:ea:99:b7:30:a9:b7:d7:43:2a:b7:c9:64:90: 16:11:70:14:7a:31:72:b6:73:45:08:ef:20:72:7e: f4:f6:11:e4:f3:96:2d:4d:25:2e:ac:83:a7:b5:f2: 40:e8:78:86:96:0a:ef:ab:79:4e:80:0a:00:06:a8: b2:59:3b:3a:be:d2:13:6e:e3:67:cf:19:85:22:e2: e8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:32:2E:DD:CD:00:60:98:0C:2F:7D:34:9A:51:06:9D:D9:E1:DA:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:38:51:d2:92:82:97:76:64:f6:16:00:25:c5:bd:19:43:da: b9:4d:55:8b:42:78:28:ca:25:e3:6d:dc:59:43:34:17:fd:d1: 67:52:e1:83:49:d3:ca:73:df:94:55:21:dd:72:d5:10:1c:51: 8b:78:29:81:a1:83:8f:08:47:14:a4:ed:fc:c1:2b:74:06:9e: 65:56:1a:d6:24:7c:90:13:58:18:59:73:26:16:54:75:52:da: dc:c7:50:76:c3:d4:1c:33:bc:7a:0e:05:36:7e:6a:ae:77:6c: be:aa:6c:22:68:13:62:04:de:a2:92:c5:6f:59:f2:9e:b1:cd: e7:14:96:b3:37:de:54:9c:47:1a:1b:3b:87:7b:e3:b7:bb:48: f8:36:24:2a:47:43:7b:13:16:a1:47:97:c2:6d:26:17:ba:ad: 30:9a:71:08:79:d8:de:1a:32:33:7f:76:6e:22:4c:df:22:27: f0:ef:17:cc:c7:f5:22:e0:82:27:4c:e9:cd:df:1f:14:a6:81: b3:0d:82:42:8e:93:21:e0:7a:0f:4b:ec:34:a1:6c:99:b2:6f: da:0c:ce:e0:cc:60:bb:66:c4:ea:2d:75:d0:16:d1:9a:58:56: 1e:58:43:ee:f5:35:dd:28:de:0b:dc:9f:38:e7:46:12:4d:01: c2:33:89:f3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuXDOSYdkwDBEV/SKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MjkzMzQ2NTMtZWI2NC00OTdhLTliMWQtZmUwYWUzMWRlYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSu/4MZngNvFwjx895gNQQEL7dAF4Y+gZH32 1QPEJZ1DqN1WMnM19hpDP7FUciQBw210YP0fCBkUXaIrskqX4z1zZB+Y0S0nMZA4 lSzyT1XYQ00/KgdbkimfMUlV3LFVnRCXSWqCwNKQWzADXwsgyV9PA2fC5+3290vO FZSwyYJdpQkcX6igReYawGJC55crWJTpZ2FRrpR5aWAqG5Rymoq2+58Xe8DHua0L RRE81JUccYl9W+qZtzCpt9dDKrfJZJAWEXAUejFytnNFCO8gcn709hHk85YtTSUu rIOntfJA6HiGlgrvq3lOgAoABqiyWTs6vtITbuNnzxmFIuLoLQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNgyLt3NAGCYDC99NJpRBp3Z4dr5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZTk1NmFiNDMtOTkxMi0z ZWY1LWJmNzQtMGI0YjQ4NTdkMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0QgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAuThR0pKCl3Zk9hYAJcW9GUPauU1Vi0J4KMol423cWUM0F/3RZ1Lhg0nT ynPflFUh3XLVEBxRi3gpgaGDjwhHFKTt/MErdAaeZVYa1iR8kBNYGFlzJhZUdVLa 3MdQdsPUHDO8eg4FNn5qrndsvqpsImgTYgTeopLFb1nynrHN5xSWszfeVJxHGhs7 h3vjt7tI+DYkKkdDexMWoUeXwm0mF7qtMJpxCHnY3hoyM392biJM3yIn8O8XzMf1 IuCCJ0zpzd8fFKaBsw2CQo6TIeB6D0vsNKFsmbJv2gzO4Mxgu2bE6i110BbRmlhW HlhD7vU13SjeC9yfOOdGEk0BwjOJ8w== -----END CERTIFICATE-----Generated at Sat Oct 25 13:33:39 2025 by rpki-client