$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a525a569-13be-3f73-852c-988f930cc537.roa File: a525a569-13be-3f73-852c-988f930cc537.roa (raw, json) Hash identifier: LgI3r6pYECPyLtd3tzjkzBPHsL+RYts2fsuyU1JskA4= Subject key identifier: E4:E0:ED:04:DA:E1:D2:F2:A8:93:67:C5:81:7A:05:6F:54:B0:40:9C Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584BAEC7BE7DB37722D854525380 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a525a569-13be-3f73-852c-988f930cc537.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 271 IP address blocks: 207.23.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:be:7d:b3:77:22:d8:54:52:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=a028179b-345c-43ed-9e10-6e3e29a83522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:43:ea:81:1a:a2:67:5c:5b:bd:92:fb:82:2b: da:c4:11:a8:78:50:be:00:9b:83:4a:74:e4:19:ea: be:d2:ef:24:85:25:86:59:0c:e8:a4:d9:70:1c:ed: 5e:45:20:8f:71:f8:eb:f2:ae:b8:10:a3:7a:63:ca: 77:b5:f8:a9:dd:8b:dd:23:6d:00:60:f6:90:9f:f5: 1d:66:50:a4:0c:f6:5d:14:b4:13:a8:97:b0:59:3f: ab:d6:de:96:20:58:4a:61:f9:ca:5f:1c:b5:86:c5: b9:93:80:b7:1f:7a:d1:79:11:ae:fc:b6:cb:ef:3f: 4c:c4:ef:48:57:86:8a:0e:81:5c:f2:fa:37:0e:42: 52:40:5e:1d:44:0d:6f:7e:6b:54:bb:d9:f2:9a:1f: 1b:f5:6a:44:92:73:27:1d:b9:dd:74:b6:a2:84:01: 19:ee:9b:1c:60:31:c7:48:d4:fc:4d:59:bc:17:dd: 56:a7:52:45:24:b5:0a:3a:47:b9:4d:2f:45:2a:7b: 36:f1:94:6a:ab:40:23:79:c0:42:68:b3:04:f7:6c: 3c:0a:a0:dc:56:01:bd:ff:24:9f:fc:f6:7c:ec:c4: 6e:3f:d3:55:08:e6:dd:b2:94:af:2c:d4:9a:2a:c5: d6:bc:6b:05:7a:63:8d:dd:c7:83:44:1c:b8:2e:57: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E0:ED:04:DA:E1:D2:F2:A8:93:67:C5:81:7A:05:6F:54:B0:40:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a525a569-13be-3f73-852c-988f930cc537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:03:20:09:30:b7:ed:a3:68:2a:c9:f3:49:5e:43:33:a4:32: 02:3a:80:7b:37:96:07:93:e0:04:cb:a9:46:be:a8:12:f4:53: c0:b5:15:e0:cf:4f:46:42:1c:74:3b:81:8d:87:e2:e4:0e:5b: 3b:a9:eb:54:ba:f5:e5:ac:d1:3b:c4:ef:f7:c9:a8:5b:fc:13: 65:07:8b:c6:aa:4e:13:0e:25:bf:4f:4b:93:37:cc:91:3d:5c: a8:46:e7:83:14:8b:6f:e8:ce:88:61:e9:4f:b5:c8:91:89:66: 44:34:9a:e2:1e:0c:ef:4c:f7:25:0f:f0:f9:e2:8e:fc:24:5b: 28:2f:64:73:8f:52:03:50:e0:d0:b8:88:cf:55:a0:4b:90:cd: 1f:4d:29:5a:5b:e4:d7:90:35:b1:0d:21:15:27:a6:6f:f8:f2: eb:58:d8:67:58:b5:33:8c:cf:60:fc:11:bb:2b:1c:59:04:cf: 28:37:cc:bd:f2:74:13:3c:1d:e0:f6:0e:3b:60:e7:ec:2b:74: 54:14:50:1d:f2:d8:8a:3e:67:d7:e5:41:51:30:82:70:99:d8: 80:d5:ca:8e:be:8c:fc:36:5b:ae:a8:f3:09:3b:94:74:f7:e1: 7e:cc:eb:fa:3b:98:3b:27:56:d2:a6:5f:95:cf:18:23:f1:45: 7d:13:4c:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux759s3ci2FRSU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk YTAyODE3OWItMzQ1Yy00M2VkLTllMTAtNmUzZTI5YTgzNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEPqgRqiZ1xbvZL7givaxBGoeFC+AJuDSnTk Geq+0u8khSWGWQzopNlwHO1eRSCPcfjr8q64EKN6Y8p3tfip3YvdI20AYPaQn/Ud ZlCkDPZdFLQTqJewWT+r1t6WIFhKYfnKXxy1hsW5k4C3H3rReRGu/LbL7z9MxO9I V4aKDoFc8vo3DkJSQF4dRA1vfmtUu9nymh8b9WpEknMnHbnddLaihAEZ7pscYDHH SNT8TVm8F91Wp1JFJLUKOke5TS9FKns28ZRqq0AjecBCaLME92w8CqDcVgG9/ySf /PZ87MRuP9NVCObdspSvLNSaKsXWvGsFemON3ceDRBy4LlcgzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTg7QTa4dLyqJNnxYF6BW9UsECcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYTUyNWE1NjktMTNiZS0z ZjczLTg1MmMtOTg4ZjkzMGNjNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcDIAkwt+2jaCrJ80leQzOkMgI6gHs3lgeT4ATLqUa+qBL0U8C1FeDP T0ZCHHQ7gY2H4uQOWzup61S69eWs0TvE7/fJqFv8E2UHi8aqThMOJb9PS5M3zJE9 XKhG54MUi2/ozohh6U+1yJGJZkQ0muIeDO9M9yUP8PnijvwkWygvZHOPUgNQ4NC4 iM9VoEuQzR9NKVpb5NeQNbENIRUnpm/48utY2GdYtTOMz2D8EbsrHFkEzyg3zL3y dBM8HeD2Djtg5+wrdFQUUB3y2Io+Z9flQVEwgnCZ2IDVyo6+jPw2W66o8wk7lHT3 4X7M6/o7mDsnVtKmX5XPGCPxRX0TTBk= -----END CERTIFICATE-----Generated at Wed Nov 5 14:07:03 2025 by rpki-client