$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/169c0037-98fc-3c09-912d-dcf3a51a09f2.roa File: 169c0037-98fc-3c09-912d-dcf3a51a09f2.roa (raw, json) Hash identifier: /VWsGAx7fOPoEp9nlBMyV6VIDzFaOwsBNJK7XTdkPy8= Subject key identifier: 9C:01:DC:A6:DB:3A:25:F0:66:14:5D:0F:28:CF:69:E4:71:67:9E:9A Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B821E20769EAA661C17FC1AC0 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/169c0037-98fc-3c09-912d-dcf3a51a09f2.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 55569 IP address blocks: 209.8.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:20:76:9e:aa:66:1c:17:fc:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=89efda1b-38fe-43b9-9609-82dd5f9c1de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0b:08:e1:01:84:c8:4f:0b:0b:f4:77:e6:65: 5a:81:6d:eb:ba:57:81:51:4a:be:fe:65:7f:63:3f: cd:02:cb:99:a6:67:b7:5a:27:08:27:8e:28:1b:3a: ff:86:aa:92:bb:cb:37:e7:a9:6f:62:77:2d:6c:64: 54:d4:52:98:a4:fa:a4:2a:af:87:23:8c:3f:28:54: 76:5e:41:9f:2f:c5:29:da:ca:f3:8c:8d:b4:cc:04: 7b:ec:2a:dd:31:fc:34:41:b0:0f:fe:e4:a2:ca:b6: 5e:ad:ca:b4:c7:27:3b:25:f2:18:3f:63:66:7a:dd: e8:23:21:6a:b1:c2:7e:c4:7b:87:52:02:1b:4f:a4: ae:61:16:fd:3d:08:bd:ae:c2:77:b8:7f:88:cc:ba: f1:3f:f6:ea:cd:dd:bf:23:f8:b5:48:87:46:a3:76: 35:a1:87:da:2a:13:e7:42:f8:29:bf:ab:74:c3:da: 80:06:b3:11:e8:fc:f8:bb:b1:b6:3e:c5:c6:d6:f2: 0b:01:5b:72:58:38:76:ca:42:70:79:e5:4f:d7:27: 5f:d4:e1:c3:ef:dc:b5:a3:38:15:77:f2:e7:b8:ac: 9c:21:1c:3e:76:9c:6d:92:8d:ca:f6:3e:f8:ef:65: f2:55:aa:6a:86:3d:31:5c:e8:6e:98:42:3a:08:3b: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:01:DC:A6:DB:3A:25:F0:66:14:5D:0F:28:CF:69:E4:71:67:9E:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/169c0037-98fc-3c09-912d-dcf3a51a09f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:9e:b5:17:7c:c9:2e:4c:4c:7e:96:08:db:85:59:d0:70:61: 18:f1:85:a2:3b:4e:af:c4:57:9d:1c:9c:ad:7b:ae:db:38:b3: 35:1f:0b:7d:f8:75:d2:c2:88:c3:84:06:89:4b:d4:2d:81:1f: 5c:5a:5f:5d:b1:2a:8a:d9:b2:b6:38:4b:e5:77:57:76:72:01: 31:bf:60:fb:71:79:2d:22:0a:f5:f6:d9:89:ef:f8:08:89:bd: 1f:76:c3:ca:bd:a9:d1:30:80:8b:06:69:d1:3f:bf:4f:4b:80: ad:42:25:bf:68:75:54:87:bd:71:66:8d:7b:8c:73:c1:d5:95: 5c:1d:82:8c:7d:a5:e7:bb:3f:26:77:aa:d4:ec:5f:b6:8e:91: 8b:e6:46:cf:80:dd:b4:f8:5c:da:f3:eb:4f:fa:d9:26:14:2d: 20:ad:9a:2f:aa:e4:bf:20:17:56:c1:aa:29:a2:76:6a:d0:0d: df:04:93:a7:26:97:ba:31:28:ae:18:6d:ac:e9:ee:ec:16:cf: 05:53:3b:43:76:e4:84:f2:64:81:7f:bf:af:13:18:26:9c:ed: ca:c3:3d:09:56:55:7a:db:f2:9e:a9:c2:ef:4b:ef:f3:ff:4f: 07:ba:98:c9:28:d4:f8:cb:f2:52:71:5b:e5:76:d0:52:06:b1: 7b:de:14:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHiB2nqpmHBf8GsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ODllZmRhMWItMzhmZS00M2I5LTk2MDktODJkZDVmOWMxZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQsI4QGEyE8LC/R35mVagW3ruleBUUq+/mV/ Yz/NAsuZpme3WicIJ44oGzr/hqqSu8s356lvYnctbGRU1FKYpPqkKq+HI4w/KFR2 XkGfL8Up2srzjI20zAR77CrdMfw0QbAP/uSiyrZercq0xyc7JfIYP2Nmet3oIyFq scJ+xHuHUgIbT6SuYRb9PQi9rsJ3uH+IzLrxP/bqzd2/I/i1SIdGo3Y1oYfaKhPn Qvgpv6t0w9qABrMR6Pz4u7G2PsXG1vILAVtyWDh2ykJweeVP1ydf1OHD79y1ozgV d/LnuKycIRw+dpxtko3K9j7472XyVapqhj0xXOhumEI6CDvbawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwB3KbbOiXwZhRdDyjPaeRxZ56aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMTY5YzAwMzctOThmYy0z YzA5LTkxMmQtZGNmM2E1MWEwOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOetRd8yS5MTH6WCNuFWdBwYRjxhaI7Tq/EV50cnK17rts4szUfC334 ddLCiMOEBolL1C2BH1xaX12xKorZsrY4S+V3V3ZyATG/YPtxeS0iCvX22Ynv+AiJ vR92w8q9qdEwgIsGadE/v09LgK1CJb9odVSHvXFmjXuMc8HVlVwdgox9pee7PyZ3 qtTsX7aOkYvmRs+A3bT4XNrz60/62SYULSCtmi+q5L8gF1bBqimidmrQDd8Ek6cm l7oxKK4Ybazp7uwWzwVTO0N25ITyZIF/v68TGCac7crDPQlWVXrb8p6pwu9L7/P/ Twe6mMko1PjL8lJxW+V20FIGsXveFKI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:08:47 2025 by rpki-client