$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa File: efe9fd20-4d24-3686-aa49-f25771fa77fb.roa (raw, json) Hash identifier: D9FUWucrQIKUavT+SEPVE98/XpK2AQ9cEwsXWmt4wtg= Subject key identifier: 52:E2:7D:B8:2F:92:92:65:2C:99:A8:EB:D9:03:DC:91:46:F8:AD:00 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B40819C23140E3B74A75C2F00 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 7262 IP address blocks: 209.9.216.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:9c:23:14:0e:3b:74:a7:5c:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=b9e1424e-c20f-4fe5-9444-753564f1dd64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:10:3d:06:d9:2a:ff:30:24:7d:79:0c:40: 0e:47:f9:20:8c:45:9d:02:9a:e3:75:cf:03:62:4b: 52:ff:f9:09:1e:0a:b3:06:78:f4:af:b6:ed:32:a7: 90:3f:2e:73:55:cf:7d:21:f8:e1:74:32:9d:56:a4: 2b:cd:79:d5:dd:ac:44:f8:98:f6:d4:64:f0:fd:53: be:58:b8:4a:6f:53:4b:a3:8a:5e:a9:2b:b2:bb:30: 26:8e:ec:08:01:84:9a:48:08:91:63:9c:df:08:d1: 89:52:7b:ae:cd:46:b4:17:50:4a:bf:4e:ad:9f:4b: c7:63:0f:d2:0f:4a:a2:67:8b:40:6b:6a:2d:80:9e: 4a:5e:6d:b1:c5:20:7f:69:57:53:87:69:ff:8f:42: 78:86:33:a4:cb:21:a0:0d:8e:fe:c5:a2:c3:15:3d: e6:86:53:07:7c:58:0b:21:72:f9:8c:73:01:fb:85: fc:2c:8e:18:1b:b9:c5:b7:68:af:5e:1f:e3:d0:18: 44:61:83:b2:c6:a3:22:e2:7e:2b:fe:1b:7f:3f:1c: 99:89:87:d1:d4:4d:91:1b:88:92:be:d1:66:83:8e: 88:0a:2e:d7:f9:c1:7d:21:ee:7c:af:77:1c:4b:84: 54:47:2f:db:eb:83:7d:d3:ee:8b:5a:05:ea:9b:54: e4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E2:7D:B8:2F:92:92:65:2C:99:A8:EB:D9:03:DC:91:46:F8:AD:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:3a:fd:03:01:c8:a9:c2:75:e1:38:e7:19:bf:63:e6:d6:e5: a5:b3:98:aa:c6:74:67:ba:db:21:08:2a:31:85:b6:4b:cd:3a: 3a:a1:e0:99:58:7a:69:de:56:b2:64:82:54:ea:85:70:7a:1d: 6a:f0:d8:8c:3c:a6:94:28:22:6a:3f:3b:69:95:d5:0c:a2:c6: b0:b9:99:7e:77:15:fa:2f:aa:cb:d2:7e:48:8d:3f:ca:1b:72: 95:de:b2:04:b7:61:c4:4a:3d:b6:41:e3:8d:7d:69:d2:d5:7b: 62:0a:24:7c:98:48:d5:29:77:46:da:cd:6a:8a:95:7b:1b:8c: 8a:68:a3:dc:19:64:f6:0c:ae:d9:c0:7f:4f:80:09:5b:0f:27: 15:0b:ca:9a:ab:c6:52:33:7a:bf:27:5c:b0:8f:d4:9d:d6:d0: e6:15:39:78:23:f6:f6:9d:15:67:9f:4e:f8:d9:e3:37:39:14: 70:29:07:e6:ff:3f:4c:f2:bd:8a:99:6a:4e:b7:a7:05:2c:43: 60:31:31:bc:2d:92:84:15:70:e3:13:60:c6:a9:11:43:ae:c5: bb:11:a7:6c:f2:92:62:46:6d:62:44:af:62:9b:d4:1d:9c:96: d0:c4:97:b3:81:80:a5:d0:24:48:98:cd:39:68:97:a3:e1:12: b2:52:79:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgZwjFA47dKdcLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YjllMTQyNGUtYzIwZi00ZmU1LTk0NDQtNzUzNTY0ZjFkZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdQQPQbZKv8wJH15DEAOR/kgjEWdAprjdc8D YktS//kJHgqzBnj0r7btMqeQPy5zVc99IfjhdDKdVqQrzXnV3axE+Jj21GTw/VO+ WLhKb1NLo4peqSuyuzAmjuwIAYSaSAiRY5zfCNGJUnuuzUa0F1BKv06tn0vHYw/S D0qiZ4tAa2otgJ5KXm2xxSB/aVdTh2n/j0J4hjOkyyGgDY7+xaLDFT3mhlMHfFgL IXL5jHMB+4X8LI4YG7nFt2ivXh/j0BhEYYOyxqMi4n4r/ht/PxyZiYfR1E2RG4iS vtFmg46ICi7X+cF9Ie58r3ccS4RURy/b64N90+6LWgXqm1Tk+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLifbgvkpJlLJmo69kD3JFG+K0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZWZlOWZkMjAtNGQyNC0z Njg2LWFhNDktZjI1NzcxZmE3N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo6/QMByKnCdeE45xm/Y+bW5aWzmKrGdGe62yEIKjGFtkvNOjqh4JlY emneVrJkglTqhXB6HWrw2Iw8ppQoImo/O2mV1QyixrC5mX53FfovqsvSfkiNP8ob cpXesgS3YcRKPbZB4419adLVe2IKJHyYSNUpd0bazWqKlXsbjIpoo9wZZPYMrtnA f0+ACVsPJxULypqrxlIzer8nXLCP1J3W0OYVOXgj9vadFWefTvjZ4zc5FHApB+b/ P0zyvYqZak63pwUsQ2AxMbwtkoQVcOMTYMapEUOuxbsRp2zykmJGbWJEr2Kb1B2c ltDEl7OBgKXQJEiYzTlol6PhErJSec0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:21:11 2025 by rpki-client