$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/871367a2-06a4-3d61-9643-e4d5d8226731.roa File: 871367a2-06a4-3d61-9643-e4d5d8226731.roa (raw, json) Hash identifier: X9yXhuv4K1yb8QJqM3LKStq1iJZ/c5Og8SvsWpjMANc= Subject key identifier: 32:7E:A7:1A:C4:66:12:5A:B1:20:6D:24:6E:0C:81:FD:6F:94:7B:8E Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584BA9324FBEAF13F6A6D1C7E080 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/871367a2-06a4-3d61-9643-e4d5d8226731.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 209 IP address blocks: 206.99.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:4f:be:af:13:f6:a6:d1:c7:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=ae0a5849-a0c8-428e-b584-f4cf909215c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:be:e9:d4:ae:6b:d0:fe:1d:22:ea:b8:e1: 76:f7:91:1d:a7:ac:fc:e1:a0:fb:24:da:2d:6c:db: 7d:fa:40:35:3b:82:ab:0e:0f:de:0f:bf:d7:e7:d1: c9:b6:3a:9d:ea:8c:e3:1e:ca:8e:ab:5e:c9:1a:cb: 3a:21:95:c7:ea:6d:6b:0a:13:f3:dc:ad:23:aa:2d: ea:b9:9c:bc:96:6d:fc:3c:f1:52:73:7e:e2:f3:17: c7:81:e5:dc:b3:15:e9:64:79:19:2a:6b:60:8e:76: ce:dd:e8:52:86:53:43:18:2b:8a:f5:3e:71:b6:61: b1:e9:9a:d2:5c:5e:f8:c2:90:37:d3:b5:e9:ad:98: bd:ce:41:dd:14:29:85:2c:dc:c4:00:67:e8:73:37: 94:62:10:15:75:fd:6f:42:7f:82:e2:5f:c9:85:71: ea:73:aa:6c:39:d9:f1:0f:a2:02:49:c4:07:10:86: ea:31:96:8c:0d:01:c1:83:66:03:08:7d:fc:21:6a: aa:b3:9b:68:30:b6:23:60:d3:89:b0:8d:3c:eb:10: 82:7c:69:c8:cc:c9:93:59:aa:f4:37:0d:c3:06:25: 0e:dd:38:50:8e:fa:d5:a4:dc:6d:0e:95:56:14:b6: 62:00:39:e4:00:02:12:35:0f:e6:5b:15:b0:d4:c2: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7E:A7:1A:C4:66:12:5A:B1:20:6D:24:6E:0C:81:FD:6F:94:7B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/871367a2-06a4-3d61-9643-e4d5d8226731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 206.99.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:3b:29:c0:95:97:70:2d:45:76:f2:c4:8a:f9:c2:71:57:8a: b2:19:76:30:3a:9b:e6:e7:9f:45:59:dd:5a:23:ae:c7:1d:6a: c0:75:2b:3b:cb:25:89:37:b5:7f:e2:08:44:8b:63:98:4e:ba: e2:4c:66:52:9d:12:d2:c2:91:7d:cb:a9:f5:60:7d:42:3a:43: 7f:fe:2f:89:e6:72:74:1a:47:da:a9:5b:23:1b:21:11:4a:f5: 29:f1:9b:e6:7b:2b:d2:9b:e2:9c:2a:fc:31:9f:41:4a:cf:3c: 5e:c4:42:c2:ab:7e:73:2e:d9:49:3a:c8:05:4c:c6:11:e3:76: 78:c8:32:e8:35:de:a5:63:eb:a2:eb:6d:4d:b8:34:e3:a9:57: 6d:09:a0:c2:94:06:e7:6b:96:49:cb:9a:0a:03:e2:d0:f7:ff: eb:6d:ea:1b:b1:f6:f1:9b:c6:12:14:a3:7c:08:09:7e:76:9f: ff:76:bf:47:a8:d4:8c:2f:b8:86:52:73:c2:51:46:29:5b:a8: c1:e3:08:d0:2a:63:33:27:38:33:d7:df:1c:f2:cb:70:27:fa: b8:a3:4a:27:6d:e2:f7:2d:05:16:23:25:6e:e4:0f:e6:d6:06: 9b:ae:fc:65:44:0d:7e:9b:e5:a0:09:10:dc:20:70:43:dd:3c: 6a:f3:b5:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMk++rxP2ptHH4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YWUwYTU4NDktYTBjOC00MjhlLWI1ODQtZjRjZjkwOTIxNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQC+6dSua9D+HSLquOF295Edp6z84aD7JNot bNt9+kA1O4KrDg/eD7/X59HJtjqd6ozjHsqOq17JGss6IZXH6m1rChPz3K0jqi3q uZy8lm38PPFSc37i8xfHgeXcsxXpZHkZKmtgjnbO3ehShlNDGCuK9T5xtmGx6ZrS XF74wpA307XprZi9zkHdFCmFLNzEAGfoczeUYhAVdf1vQn+C4l/JhXHqc6psOdnx D6ICScQHEIbqMZaMDQHBg2YDCH38IWqqs5toMLYjYNOJsI086xCCfGnIzMmTWar0 Nw3DBiUO3ThQjvrVpNxtDpVWFLZiADnkAAISNQ/mWxWw1MJ00wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ+pxrEZhJasSBtJG4Mgf1vlHuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvODcxMzY3YTItMDZhNC0z ZDYxLTk2NDMtZTRkNWQ4MjI2NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzmO5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE7KcCVl3AtRXbyxIr5wnFXirIZdjA6m+bnn0VZ3VojrscdasB1KzvL JYk3tX/iCESLY5hOuuJMZlKdEtLCkX3LqfVgfUI6Q3/+L4nmcnQaR9qpWyMbIRFK 9Snxm+Z7K9Kb4pwq/DGfQUrPPF7EQsKrfnMu2Uk6yAVMxhHjdnjIMug13qVj66Lr bU24NOOpV20JoMKUBudrlknLmgoD4tD3/+tt6hux9vGbxhIUo3wICX52n/92v0eo 1IwvuIZSc8JRRilbqMHjCNAqYzMnODPX3xzyy3An+rijSidt4vctBRYjJW7kD+bW Bpuu/GVEDX6b5aAJENwgcEPdPGrztZI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:58 2025 by rpki-client