$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa File: 2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa (raw, json) Hash identifier: 8HqpjSqSJ4PRHE8dNrAnVHwlUBuzeOxgDIJRzXUH3jI= Subject key identifier: 76:DD:2E:05:08:F7:F1:E1:BC:70:3A:02:69:6E:E2:56:4E:BA:EB:4D Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584BAEC7BE9F5350DF60FB370900 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 271 IP address blocks: 207.23.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:be:9f:53:50:df:60:fb:37:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=446c8bca-4636-4a6e-841f-2398d9a123f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3d:18:5e:44:d8:67:7e:f4:5d:0a:26:9d:4c: 15:73:5f:ab:fd:14:84:ae:47:3f:58:67:f2:5f:60: 74:89:0f:05:ce:c4:05:85:df:68:3b:38:b1:b0:bf: f3:5b:13:ef:2c:98:10:c3:98:05:96:81:60:e9:08: 73:fb:18:eb:0f:8e:d7:f3:9d:45:5a:8e:fe:3e:00: 28:b4:82:ea:b2:ec:2d:0e:c4:3d:40:22:8f:2a:43: 11:d7:22:9a:d9:13:4f:7a:3b:20:c5:8b:64:f5:b0: 5d:16:b0:4a:f5:33:ec:db:d8:b1:ab:36:85:9a:dd: 37:a9:24:c0:ea:52:8b:11:d9:79:b3:84:87:0e:42: e0:aa:12:12:98:eb:55:a3:f4:20:fc:a2:04:cc:f5: e3:17:81:0a:5c:d6:63:e4:9b:0c:e4:95:f9:eb:0a: b1:55:da:73:3d:7a:fb:d2:48:9f:59:d0:d4:a5:3b: b6:66:ac:11:0c:bb:a9:87:87:a5:44:9f:39:8c:14: 90:4d:4b:ae:69:1c:72:aa:83:30:c9:51:54:5a:8e: f7:b4:e6:78:4e:87:b3:5f:b9:bf:c9:4d:97:ac:8d: d7:b3:34:1c:b5:37:9d:8c:ad:20:91:25:4c:b9:68: ed:57:18:c6:69:fc:ea:7d:39:77:c7:fe:4f:89:ce: 8d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DD:2E:05:08:F7:F1:E1:BC:70:3A:02:69:6E:E2:56:4E:BA:EB:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:80:b1:68:50:d3:4e:6d:b7:38:81:3f:50:1b:06:6a:0e:5f: 6f:38:1c:e6:01:74:1b:3d:1c:2d:3d:25:70:62:d4:f9:bf:20: 76:8b:b3:26:51:4f:16:a8:74:17:ac:68:d1:88:e5:48:3a:05: 62:75:2b:d7:2e:85:f5:cc:9b:37:c7:99:1c:c2:41:a0:11:7c: 73:eb:0e:af:5a:cf:c5:9d:be:f9:a5:6d:b0:ce:20:c1:71:ca: 71:c7:cc:2c:fd:fd:92:97:3f:e3:6f:1c:d8:07:8f:a1:4d:34: 20:54:9f:f6:90:3f:31:29:ec:4c:67:68:70:35:10:e5:f8:4c: e6:3f:1d:43:42:51:6d:ea:ce:62:b8:eb:82:40:b0:64:07:e1: 9b:3e:08:41:b4:e6:56:41:69:57:83:39:3f:b9:08:1c:b0:5e: e4:e8:a7:bd:2e:96:ea:7a:1a:5b:9f:4f:49:ec:99:55:86:d5: 8e:34:d1:46:e3:74:26:5a:fe:9b:be:80:56:f6:80:17:0e:42: 79:61:9b:96:e8:07:33:d2:b3:0a:97:6a:34:8a:e5:c9:43:05: 2a:0a:46:6d:55:56:dc:7a:ca:6f:ce:ad:8a:71:08:53:53:7c: 46:86:7b:14:ec:38:c6:76:86:76:ae:23:9a:b4:e8:1f:fb:6b: c0:bd:e7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux76fU1DfYPs3CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NDQ2YzhiY2EtNDYzNi00YTZlLTg0MWYtMjM5OGQ5YTEyM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz0YXkTYZ370XQomnUwVc1+r/RSErkc/WGfy X2B0iQ8FzsQFhd9oOzixsL/zWxPvLJgQw5gFloFg6Qhz+xjrD47X851FWo7+PgAo tILqsuwtDsQ9QCKPKkMR1yKa2RNPejsgxYtk9bBdFrBK9TPs29ixqzaFmt03qSTA 6lKLEdl5s4SHDkLgqhISmOtVo/Qg/KIEzPXjF4EKXNZj5JsM5JX56wqxVdpzPXr7 0kifWdDUpTu2ZqwRDLuph4elRJ85jBSQTUuuaRxyqoMwyVFUWo73tOZ4ToezX7m/ yU2XrI3XszQctTedjK0gkSVMuWjtVxjGafzqfTl3x/5Pic6N8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbdLgUI9/HhvHA6Amlu4lZOuutNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMmZmYTJiZTUtYmYwZS0z NjMyLWFjMTEtY2JmMTQxOTYxYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxf+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKAsWhQ005ttziBP1AbBmoOX284HOYBdBs9HC09JXBi1Pm/IHaLsyZR TxaodBesaNGI5Ug6BWJ1K9cuhfXMmzfHmRzCQaARfHPrDq9az8WdvvmlbbDOIMFx ynHHzCz9/ZKXP+NvHNgHj6FNNCBUn/aQPzEp7ExnaHA1EOX4TOY/HUNCUW3qzmK4 64JAsGQH4Zs+CEG05lZBaVeDOT+5CBywXuTop70ulup6GlufT0nsmVWG1Y400Ubj dCZa/pu+gFb2gBcOQnlhm5boBzPSswqXajSK5clDBSoKRm1VVtx6ym/OrYpxCFNT fEaGexTsOMZ2hnauI5q06B/7a8C955Q= -----END CERTIFICATE-----Generated at Wed Nov 5 14:05:59 2025 by rpki-client