$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/007148a1-daa1-3fd7-a6e1-5be6a74513c2.roa File: 007148a1-daa1-3fd7-a6e1-5be6a74513c2.roa (raw, json) Hash identifier: xiriZKEXqgPWgyJR02Tb2u3enTqzOsTrzVT6rMaCUTs= Subject key identifier: BB:B4:61:E3:88:EE:40:D0:ED:06:08:DC:11:C9:68:3F:3E:A1:70:AC Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B26867E39AA7CE956D0375B20 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/007148a1-daa1-3fd7-a6e1-5be6a74513c2.roa Signing time: Wed 10 Sep 2025 17:39:24 +0000 ROA not before: Wed 10 Sep 2025 17:39:24 +0000 ROA not after: Tue 09 Dec 2025 18:39:24 +0000 asID: 393249 IP address blocks: 206.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:86:7e:39:aa:7c:e9:56:d0:37:5b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 10 17:39:24 2025 GMT Not After : Dec 9 18:39:24 2025 GMT Subject: CN=43b83bfc-645a-44c5-a82a-65788ac62f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:73:e8:8c:f1:d6:ce:35:9d:f4:7e:84:52: 29:7d:43:0a:e3:82:7a:2e:e2:fd:85:3a:96:32:6f: 9d:6b:6c:e5:77:84:0b:62:97:cc:53:5d:86:5c:e4: 76:3a:50:6d:4c:0b:89:49:bf:c9:48:2e:85:50:7e: 29:f4:aa:76:f9:e2:bc:06:fb:6f:b5:31:76:75:d1: f6:9a:1b:6a:93:65:3e:84:c5:12:84:4d:15:7c:80: 31:25:b2:f9:dd:d4:80:68:59:a6:e3:bc:16:74:63: 73:29:cb:c2:5b:8d:e0:4e:2a:ff:4d:2f:fc:d5:77: 99:57:a8:52:53:64:6d:95:e1:99:ea:80:8b:51:bc: aa:0c:71:3a:36:20:1a:31:f4:cb:cd:8d:ba:c7:89: a0:ba:34:8e:40:e1:fa:cd:d9:86:a1:e3:7d:e0:ce: de:89:e8:1f:12:2c:03:6b:fe:1c:e0:4d:6d:12:94: 62:0c:be:2c:a9:ff:d5:6c:91:58:32:7a:8e:91:85: 43:e5:c2:23:b4:d6:85:4b:5d:14:61:e7:c3:da:37: 4b:fe:64:a4:92:9a:c9:55:5a:2e:05:43:d8:3e:48: 14:e5:71:b6:c4:d8:ef:5a:36:73:7a:9b:5e:c0:32: df:45:a3:04:e7:4b:44:4b:f9:8a:cc:63:8d:3d:c0: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B4:61:E3:88:EE:40:D0:ED:06:08:DC:11:C9:68:3F:3E:A1:70:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/007148a1-daa1-3fd7-a6e1-5be6a74513c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:96:73:d2:f4:19:40:6f:c1:40:7b:21:e7:06:1e:7d:f6:03: a2:df:82:19:37:4c:8a:10:dc:07:29:f1:ec:10:3a:73:64:00: bb:79:63:e6:b0:84:48:c6:f1:e2:3f:c9:8c:5e:d3:4b:02:a9: 24:6c:53:cf:38:83:41:d2:0a:38:fa:ce:8d:0b:cc:cc:f2:5a: 97:ac:10:b1:1b:28:85:fd:20:88:3e:33:d2:15:4b:4e:fc:bb: 19:0f:81:5d:d3:62:a5:38:9c:a1:fa:62:76:69:be:37:b7:1c: 63:3c:a6:c4:8e:91:17:d9:af:92:3d:1c:a9:f7:dc:67:6f:ac: 06:57:fb:8d:ad:17:b8:b3:92:18:08:15:f4:49:2d:f0:05:32: 44:29:52:ee:b7:92:e5:1c:ab:fc:e7:9d:ae:6b:ef:94:bf:dc: 23:40:a9:8e:19:4f:ff:90:45:06:5f:89:e7:bb:41:f5:79:b9: dd:1f:56:db:ea:8b:af:ff:22:63:cf:18:77:6b:b2:f8:40:72: 5a:d1:3d:15:e9:73:77:40:58:c2:f4:f2:4a:b2:55:d2:01:ff: 6a:41:75:0f:b6:5b:ec:77:85:c9:2c:f1:75:85:a6:a9:70:01: 5c:72:41:e3:d2:a0:8f:9f:a2:e2:39:e5:98:ff:d9:c4:c0:f4: 8c:0f:ac:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmhn45qnzpVtA3WyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkxMDE3MzkyNFoXDTI1MTIwOTE4MzkyNFowLzEtMCsGA1UEAxMk NDNiODNiZmMtNjQ1YS00NGM1LWE4MmEtNjU3ODhhYzYyZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytlz6Izx1s41nfR+hFIpfUMK44J6LuL9hTqW Mm+da2zld4QLYpfMU12GXOR2OlBtTAuJSb/JSC6FUH4p9Kp2+eK8BvtvtTF2ddH2 mhtqk2U+hMUShE0VfIAxJbL53dSAaFmm47wWdGNzKcvCW43gTir/TS/81XeZV6hS U2RtleGZ6oCLUbyqDHE6NiAaMfTLzY26x4mgujSOQOH6zdmGoeN94M7eiegfEiwD a/4c4E1tEpRiDL4sqf/VbJFYMnqOkYVD5cIjtNaFS10UYefD2jdL/mSkkprJVVou BUPYPkgU5XG2xNjvWjZzeptewDLfRaME50tES/mKzGONPcD8AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu0YeOI7kDQ7QYI3BHJaD8+oXCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMDA3MTQ4YTEtZGFhMS0z ZmQ3LWE2ZTEtNWJlNmE3NDUxM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzldIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGWc9L0GUBvwUB7IecGHn32A6Lfghk3TIoQ3Acp8ewQOnNkALt5Y+aw hEjG8eI/yYxe00sCqSRsU884g0HSCjj6zo0LzMzyWpesELEbKIX9IIg+M9IVS078 uxkPgV3TYqU4nKH6YnZpvje3HGM8psSOkRfZr5I9HKn33GdvrAZX+42tF7izkhgI FfRJLfAFMkQpUu63kuUcq/znna5r75S/3CNAqY4ZT/+QRQZfiee7QfV5ud0fVtvq i6//ImPPGHdrsvhAclrRPRXpc3dAWML08kqyVdIB/2pBdQ+2W+x3hcks8XWFpqlw AVxyQePSoI+fouI55Zj/2cTA9IwPrIs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:32 2025 by rpki-client