$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3e9c89cc-8a41-3ea2-9760-edc7e172b7bf.roa File: 3e9c89cc-8a41-3ea2-9760-edc7e172b7bf.roa (raw, json) Hash identifier: JVktFahLtX8DzhwfiDgAQzPmdhV8MC4xPdCAjeSsCrk= Subject key identifier: 78:1D:4E:23:45:AF:0F:A5:F7:3D:3D:2A:70:02:7B:D2:9E:CF:7F:51 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584BBA104B22959CE4411BBC3700 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3e9c89cc-8a41-3ea2-9760-edc7e172b7bf.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 11105 IP address blocks: 207.23.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4b:22:95:9c:e4:41:1b:bc:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=a0278781-c98e-4743-a644-98f915cc8418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:ba:85:bc:6e:d6:7b:ee:46:b9:59:90:77: ee:cc:8a:1a:c8:d3:34:8a:b3:7b:97:07:bd:3d:c6: 3c:08:c6:9a:bd:ac:40:f6:5b:2f:37:33:f2:3e:ce: 5c:05:a4:bd:4f:ef:0b:2f:8d:a2:74:7a:33:b5:7a: e2:0d:7e:1b:4b:c9:82:b8:dd:62:70:84:85:58:e7: 2c:fd:5c:85:19:8d:41:09:19:f5:a2:df:a3:b4:00: c8:3d:81:11:0b:dc:55:07:8d:e8:29:fa:56:46:28: b5:15:2d:f5:7e:41:dc:b4:d3:22:39:46:5a:d6:36: 77:cb:3b:2c:1b:1c:7b:30:72:9c:e8:fc:07:4c:ce: 6e:7a:63:77:67:70:14:a5:76:03:9b:2d:1e:d4:ce: f9:2b:c2:35:02:45:d0:f1:2d:f4:72:3f:6d:83:40: 4b:6a:f3:21:ab:01:7d:cf:ea:da:c6:88:14:86:10: eb:cb:60:85:6f:f4:b9:03:1a:2a:84:8d:ba:6e:99: 87:62:16:83:1b:be:1c:6c:db:3f:a1:51:4e:07:74: 9e:bf:a4:b3:65:92:4a:d7:02:83:0b:0f:44:6f:c4: 44:8f:80:eb:86:1c:6d:df:00:81:ba:05:32:ab:52: a3:55:95:fe:81:0e:7d:01:50:86:d6:71:97:26:17: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1D:4E:23:45:AF:0F:A5:F7:3D:3D:2A:70:02:7B:D2:9E:CF:7F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3e9c89cc-8a41-3ea2-9760-edc7e172b7bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:de:05:93:85:f3:3c:7a:3c:83:65:18:cf:25:8b:17:03:ae: 9d:11:fa:fe:1b:9d:14:55:89:65:ca:a8:d7:58:63:f9:db:90: 97:f0:98:b1:28:b9:15:48:28:ce:e8:4b:ac:72:52:27:4d:2f: bc:d2:46:a2:3a:4f:42:02:d9:1a:97:ea:ee:53:da:f1:12:75: 43:39:4b:03:26:5e:d6:2e:9b:26:d5:d2:c9:d5:c8:85:2b:40: f6:b4:6f:0f:a1:f3:19:be:04:2d:ee:39:1c:6a:c3:33:b6:7b: 59:82:e2:b4:11:16:04:44:90:7e:48:9a:cd:95:b6:12:8e:14: 18:31:94:bf:d4:0e:1e:f8:b6:6e:75:42:23:5e:cd:af:e1:f9: 04:21:25:6e:58:be:71:77:a0:12:08:61:11:0b:5e:2e:3e:9d: 23:3d:f8:cd:45:31:8f:90:90:de:8d:76:45:38:51:8d:02:80: 51:17:05:a2:9a:4b:af:88:4a:4f:21:b9:a1:14:c6:e3:b0:91: bd:2a:17:37:05:0a:3c:68:83:3c:06:9c:47:5e:63:1b:4f:27: bc:d6:e3:c6:72:09:69:50:05:03:35:a7:2e:b9:82:29:a8:5c: 0a:86:eb:91:d8:64:ad:eb:e5:83:f9:ca:a8:6d:0a:f4:6e:a9: 6f:c0:2e:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEsilZzkQRu8NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YTAyNzg3ODEtYzk4ZS00NzQzLWE2NDQtOThmOTE1Y2M4NDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrC6hbxu1nvuRrlZkHfuzIoayNM0irN7lwe9 PcY8CMaavaxA9lsvNzPyPs5cBaS9T+8LL42idHoztXriDX4bS8mCuN1icISFWOcs /VyFGY1BCRn1ot+jtADIPYERC9xVB43oKfpWRii1FS31fkHctNMiOUZa1jZ3yzss Gxx7MHKc6PwHTM5uemN3Z3AUpXYDmy0e1M75K8I1AkXQ8S30cj9tg0BLavMhqwF9 z+raxogUhhDry2CFb/S5AxoqhI26bpmHYhaDG74cbNs/oVFOB3Sev6SzZZJK1wKD Cw9Eb8REj4Drhhxt3wCBugUyq1KjVZX+gQ59AVCG1nGXJhf6FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgdTiNFrw+l9z09KnACe9Kez39RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvM2U5Yzg5Y2MtOGE0MS0z ZWEyLTk3NjAtZWRjN2UxNzJiN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjeBZOF8zx6PINlGM8lixcDrp0R+v4bnRRViWXKqNdYY/nbkJfwmLEo uRVIKM7oS6xyUidNL7zSRqI6T0IC2RqX6u5T2vESdUM5SwMmXtYumybV0snVyIUr QPa0bw+h8xm+BC3uORxqwzO2e1mC4rQRFgREkH5Ims2VthKOFBgxlL/UDh74tm51 QiNeza/h+QQhJW5YvnF3oBIIYRELXi4+nSM9+M1FMY+QkN6NdkU4UY0CgFEXBaKa S6+ISk8huaEUxuOwkb0qFzcFCjxogzwGnEdeYxtPJ7zW48ZyCWlQBQM1py65gimo XAqG65HYZK3r5YP5yqhtCvRuqW/ALqA= -----END CERTIFICATE-----Generated at Wed Nov 5 06:25:27 2025 by rpki-client