$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/aa79b7ff-61d6-32f4-a186-962cf414eee0.roa File: aa79b7ff-61d6-32f4-a186-962cf414eee0.roa (raw, json) Hash identifier: JHtclbNMem+jxNwMyDWiL2WgkFQUMNUqlCTOCnRlEXA= Subject key identifier: FE:59:62:02:C2:0F:34:CB:4A:46:92:AC:7F:19:27:C8:BF:1B:83:CF Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584B8B20ED472815D6135844F130 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/aa79b7ff-61d6-32f4-a186-962cf414eee0.roa Signing time: Thu 16 Oct 2025 18:31:24 +0000 ROA not before: Thu 16 Oct 2025 18:31:24 +0000 ROA not after: Wed 14 Jan 2026 19:31:24 +0000 asID: 19901 IP address blocks: 9.244.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:20:ed:47:28:15:d6:13:58:44:f1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Oct 16 18:31:24 2025 GMT Not After : Jan 14 19:31:24 2026 GMT Subject: CN=0da063d0-9a99-46cb-a7f6-cbd83591f11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:26:a3:33:49:30:9f:8b:20:b6:63:ef:8b: c6:26:f1:7a:57:52:10:25:b2:c8:c9:9a:f7:25:b4: fc:57:1b:32:aa:92:c6:2d:01:0d:7f:ae:58:ff:60: 90:2b:5d:9e:2f:9e:d2:fb:4d:f5:2a:cd:12:22:5e: ed:de:63:09:49:73:06:40:d5:9d:a0:3b:7a:c1:40: 7d:75:55:de:ae:31:60:7e:f8:09:db:c8:8a:52:7d: 80:7d:07:4e:5c:61:a3:2f:84:8f:14:0d:26:90:85: 03:16:27:38:2d:4b:ca:7b:fd:46:63:2d:d9:62:f9: 42:67:bf:a2:ba:7b:27:a6:4f:e4:0c:f4:25:18:5a: da:3a:dd:f7:16:55:00:1d:75:7c:89:12:15:98:7a: 5b:43:4c:86:d7:ea:49:dd:bd:92:07:e1:6d:54:62: d5:78:39:3d:9c:9f:bf:1f:4c:9e:90:94:62:48:25: b7:87:ff:31:fa:4a:53:bb:af:1f:f4:e7:05:ac:f6: 24:3a:4d:8a:05:4f:d7:6d:6c:e4:81:38:40:8c:07: 61:23:64:fa:65:c4:01:c1:f9:af:73:79:f8:f3:12: f0:f3:6a:a4:6a:15:71:00:f7:66:5c:05:0e:53:ee: c2:13:66:2e:05:06:06:06:96:db:58:0f:dd:a4:b5: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:59:62:02:C2:0F:34:CB:4A:46:92:AC:7F:19:27:C8:BF:1B:83:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/aa79b7ff-61d6-32f4-a186-962cf414eee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 9.244.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:81:91:b4:e1:8a:d2:4e:f7:5f:db:d8:e5:c4:14:96:42:72: 5f:2b:b9:be:8c:b1:e7:a2:7b:07:11:ad:39:3b:83:ed:5a:f4: 4a:76:39:8f:04:a4:7e:e8:fa:19:44:22:c9:b6:50:bb:02:39: 28:6b:cf:78:10:07:f8:d0:07:42:05:3d:69:b2:78:44:59:45: 2b:8a:b1:30:fc:66:65:21:51:2d:05:07:61:ea:a5:f1:e3:90: cd:8b:18:13:7d:cb:50:ee:38:33:c0:7e:41:f4:ea:6e:1c:77: 84:54:b4:82:fb:50:a7:a3:1d:4a:d5:61:9c:a9:e4:90:87:49: 7b:e4:18:4d:77:12:fa:b6:0b:02:3a:b1:e8:e2:d6:39:2b:85: 92:41:ff:91:c7:2c:15:86:d4:ec:63:07:5b:67:c6:07:48:3f: 29:36:25:90:4d:0b:38:11:56:39:2b:b9:ce:54:32:eb:49:57: ff:29:e6:b2:b8:5e:7b:bb:70:7a:39:6c:2e:dd:9b:97:c1:3d: cf:88:ef:5c:76:25:15:00:d2:48:97:94:96:53:78:b3:0d:ab: 7b:82:06:36:1b:cb:da:45:31:a4:dd:9a:ba:24:fb:4a:4d:12: 7e:2b:9c:ba:03:bb:a9:1a:8e:2b:72:79:50:ba:25:20:5f:9b: 10:14:d1:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuLIO1HKBXWE1hE8TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI1MTAxNjE4MzEyNFoXDTI2MDExNDE5MzEyNFowLzEtMCsGA1UEAxMk MGRhMDYzZDAtOWE5OS00NmNiLWE3ZjYtY2JkODM1OTFmMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZAmozNJMJ+LILZj74vGJvF6V1IQJbLIyZr3 JbT8VxsyqpLGLQENf65Y/2CQK12eL57S+031Ks0SIl7t3mMJSXMGQNWdoDt6wUB9 dVXerjFgfvgJ28iKUn2AfQdOXGGjL4SPFA0mkIUDFic4LUvKe/1GYy3ZYvlCZ7+i unsnpk/kDPQlGFraOt33FlUAHXV8iRIVmHpbQ0yG1+pJ3b2SB+FtVGLVeDk9nJ+/ H0yekJRiSCW3h/8x+kpTu68f9OcFrPYkOk2KBU/XbWzkgThAjAdhI2T6ZcQBwfmv c3n48xLw82qkahVxAPdmXAUOU+7CE2YuBQYGBpbbWA/dpLUNrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5ZYgLCDzTLSkaSrH8ZJ8i/G4PPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvYWE3OWI3ZmYtNjFkNi0z MmY0LWExODYtOTYyY2Y0MTRlZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGCfQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyBkbThitJO91/b2OXEFJZCcl8rub6MseeiewcRrTk7g+1a9Ep2OY8E pH7o+hlEIsm2ULsCOShrz3gQB/jQB0IFPWmyeERZRSuKsTD8ZmUhUS0FB2HqpfHj kM2LGBN9y1DuODPAfkH06m4cd4RUtIL7UKejHUrVYZyp5JCHSXvkGE13Evq2CwI6 seji1jkrhZJB/5HHLBWG1OxjB1tnxgdIPyk2JZBNCzgRVjkruc5UMutJV/8p5rK4 Xnu7cHo5bC7dm5fBPc+I71x2JRUA0kiXlJZTeLMNq3uCBjYby9pFMaTdmrok+0pN En4rnLoDu6kajityeVC6JSBfmxAU0QA= -----END CERTIFICATE-----Generated at Tue Oct 21 00:31:37 2025 by rpki-client