$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86078e42-811c-36a8-b15b-9dc8e6abc40c.roa File: 86078e42-811c-36a8-b15b-9dc8e6abc40c.roa (raw, json) Hash identifier: 5Bjy7k+T8yCDa+3CBaOOQsRAu7rw1E92pFyyJuWA+9M= Subject key identifier: 43:A0:90:C0:3A:13:08:42:31:3F:FC:FB:19:34:0B:35:AA:61:67:67 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584BB19286562F44DF5A2CCDBEE0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86078e42-811c-36a8-b15b-9dc8e6abc40c.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 271 IP address blocks: 206.12.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:86:56:2f:44:df:5a:2c:cd:be:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=6cf5f9b8-53b8-498d-b972-a3f15639437f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:ce:f9:21:0c:fc:7e:c8:6f:07:c9:14:29: 13:98:3a:3b:43:c7:90:2a:ff:8c:aa:0a:e2:e8:b6: 25:8a:92:ea:d2:56:e0:68:40:bc:14:ec:74:98:e0: bc:03:e8:4e:31:7c:ad:a3:6a:e9:f4:0f:38:9c:bb: 8d:e9:6b:e7:78:21:82:58:80:71:68:7b:e6:da:a2: 25:41:81:17:48:ea:f6:82:cf:45:51:43:1c:79:8a: 2a:87:8d:2c:4b:3a:73:c1:a2:f5:09:0a:6d:ab:af: 97:18:03:27:79:b8:75:8d:9a:8d:63:c5:31:25:ae: 68:ab:a2:89:a9:49:44:eb:29:7c:4d:1d:0d:c8:91: 7d:47:13:b4:d3:07:75:3c:cb:44:49:5d:54:2e:20: 73:f6:9e:2a:74:d2:32:c3:eb:55:c1:4d:f4:82:a5: bf:5c:97:11:2c:8e:23:70:f7:17:93:d6:fe:36:d1: 96:5d:e1:ac:fc:61:6f:3c:f4:31:e4:0e:21:6e:89: 3b:89:19:84:e6:75:1d:f7:c2:b1:e9:14:be:02:fb: 0a:7b:39:97:e7:be:c6:a6:78:16:d9:b3:7c:f3:a6: 1e:d9:e5:97:5f:86:92:e1:1a:5e:15:a7:41:38:f4: 65:ad:7b:19:25:80:0e:e3:8f:c2:77:26:6f:9e:57: fb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A0:90:C0:3A:13:08:42:31:3F:FC:FB:19:34:0B:35:AA:61:67:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86078e42-811c-36a8-b15b-9dc8e6abc40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:63:b6:70:b0:75:a1:bd:13:0e:77:57:68:4a:eb:27:80:20: fd:63:a0:14:3a:24:33:be:ca:a0:57:90:42:e2:b0:15:fe:3e: c5:5d:7f:2f:5f:e6:37:a0:04:8d:46:bc:8e:af:e8:03:39:a8: 4b:85:54:6c:b9:49:8c:2a:87:d1:e1:7a:07:e1:34:b8:85:02: eb:cf:ab:a0:6d:fb:d3:71:88:15:ca:08:7b:16:d0:16:4f:b7: cc:54:f1:27:41:83:aa:31:9b:31:9e:1b:54:ed:60:b0:60:e7: 85:71:3d:82:1a:e6:56:49:6f:1c:32:5e:89:27:33:e3:a7:da: 65:14:b4:38:46:35:0d:da:3c:db:b2:86:db:a2:98:2b:7a:83: 24:89:91:b4:1d:20:06:85:c4:7d:05:c5:f8:f3:2a:15:af:33: 34:12:31:92:e5:c6:15:67:6e:fa:ea:3f:f7:7c:2a:ab:81:4c: a6:65:39:d5:26:d2:69:24:12:e5:de:d2:68:3a:0c:33:f8:14: e9:a3:95:e9:7e:e8:88:1e:b0:f4:c0:99:8d:30:69:aa:8d:1e: 4e:3b:2a:82:73:47:54:f3:63:48:96:10:25:89:53:b3:70:32: ff:da:f0:47:7b:c4:60:73:91:73:40:65:fe:be:a9:1d:52:e7: cd:54:59:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkoZWL0TfWizNvuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NmNmNWY5YjgtNTNiOC00OThkLWI5NzItYTNmMTU2Mzk0MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkDO+SEM/H7IbwfJFCkTmDo7Q8eQKv+Mqgri 6LYlipLq0lbgaEC8FOx0mOC8A+hOMXyto2rp9A84nLuN6WvneCGCWIBxaHvm2qIl QYEXSOr2gs9FUUMceYoqh40sSzpzwaL1CQptq6+XGAMnebh1jZqNY8UxJa5oq6KJ qUlE6yl8TR0NyJF9RxO00wd1PMtESV1ULiBz9p4qdNIyw+tVwU30gqW/XJcRLI4j cPcXk9b+NtGWXeGs/GFvPPQx5A4hbok7iRmE5nUd98Kx6RS+AvsKezmX577GpngW 2bN886Ye2eWXX4aS4RpeFadBOPRlrXsZJYAO44/CdyZvnlf7FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOgkMA6EwhCMT/8+xk0CzWqYWdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODYwNzhlNDItODExYy0z NmE4LWIxNWItOWRjOGU2YWJjNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzgwCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZjtnCwdaG9Ew53V2hK6yeAIP1joBQ6JDO+yqBXkELisBX+PsVdfy9f 5jegBI1GvI6v6AM5qEuFVGy5SYwqh9HhegfhNLiFAuvPq6Bt+9NxiBXKCHsW0BZP t8xU8SdBg6oxmzGeG1TtYLBg54VxPYIa5lZJbxwyXoknM+On2mUUtDhGNQ3aPNuy htuimCt6gySJkbQdIAaFxH0FxfjzKhWvMzQSMZLlxhVnbvrqP/d8KquBTKZlOdUm 0mkkEuXe0mg6DDP4FOmjlel+6IgesPTAmY0waaqNHk47KoJzR1TzY0iWECWJU7Nw Mv/a8Ed7xGBzkXNAZf6+qR1S581UWSA= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:29 2025 by rpki-client