$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa File: a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa (raw, json) Hash identifier: Hdvff5QsRLzC0G75vcveiRLyptVq1pCjs/EdJ6knARg= Subject key identifier: 1B:C6:9D:25:66:F2:31:AC:FC:2E:84:EC:32:38:F1:B5:50:F9:61:14 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584BAEC7BE4C5BA51228C020FB00 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 271 IP address blocks: 207.23.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:be:4c:5b:a5:12:28:c0:20:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=8f10e63e-9b9a-4edc-84e7-b42b41f31129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:28:a0:2c:9c:17:20:69:a8:87:d5:2e:f1:41: ad:4e:04:6d:82:b3:b3:ef:51:3d:40:4e:00:02:e5: ef:ef:09:96:63:32:75:d7:40:6e:c3:73:3e:9d:80: 18:5d:be:c8:81:ec:b2:a0:a1:d9:81:e3:7f:96:3c: 7d:ec:2c:f0:60:e6:cc:b7:56:2e:07:60:c8:20:18: f0:20:58:9f:cc:51:d0:97:28:86:b2:7a:d0:06:15: 2e:5e:44:a1:47:13:98:a8:8b:4a:0b:ec:6c:0f:05: b4:a0:58:85:b6:28:0b:83:d2:bd:28:de:ad:20:2a: 08:4d:6a:1d:76:9b:56:3d:71:1d:d2:3e:ec:66:08: 42:5b:ca:a2:e4:8b:c0:dc:1b:60:b0:71:d9:bd:1e: 9a:63:9e:0a:ae:37:07:56:18:9a:9d:fe:07:31:8b: 54:48:e8:09:74:c5:f1:12:8a:3a:89:43:49:11:2c: 33:13:a1:29:3d:ea:16:76:d6:29:11:b6:6f:7d:ab: 70:0a:a2:99:9d:c6:61:02:b3:45:69:30:d7:4a:69: ab:c1:97:ef:df:54:da:79:0c:ab:02:46:f2:79:7b: 9f:26:23:6e:59:92:cd:a0:3e:c2:b7:58:3f:ba:bf: ca:47:76:00:28:40:66:ea:bc:95:fd:32:1f:79:5c: f1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C6:9D:25:66:F2:31:AC:FC:2E:84:EC:32:38:F1:B5:50:F9:61:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:36:a9:36:4f:81:5d:9a:54:6e:65:37:dc:ec:aa:d9:ad:14: 99:ba:e5:1f:8c:81:b2:4e:3d:ca:38:77:ea:d2:1f:65:2c:f4: 59:77:f5:e0:03:f3:d8:f8:87:a2:38:e4:c5:1e:91:7b:89:ea: 3d:36:d8:36:5a:5c:6f:2d:72:8f:ba:01:2a:b3:cd:ad:05:85: e3:4d:26:d1:91:99:f5:c2:87:43:97:17:18:d2:de:b6:23:c1: 0b:d3:0b:22:c6:75:40:75:a6:dc:88:f6:6e:c0:d7:d8:65:c3: f5:99:cb:55:97:fc:61:f8:1d:d5:a7:9b:a6:94:f5:5b:70:a7: 89:91:95:d2:93:02:39:c7:ff:a5:51:b8:b0:76:3b:fd:a5:d3: c9:c0:5e:89:6f:79:67:45:07:a4:42:84:71:bb:ab:a1:fd:be: 71:1f:f8:01:7b:ef:22:ab:83:11:db:e7:50:d6:b1:4a:f8:d0: ed:45:ad:ad:bf:56:18:d3:67:ca:81:7b:21:50:3e:66:cb:59: 55:e5:83:25:cf:96:73:dc:9c:ec:48:ea:d8:37:fa:fc:22:ef: 2d:4c:62:a4:9d:96:72:5a:0c:cd:da:74:1d:29:f4:56:7f:94: fc:b3:03:77:0f:c5:9e:11:f4:8f:86:a7:26:b2:11:d6:d6:95: 82:ef:8c:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux75MW6USKMAg+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk OGYxMGU2M2UtOWI5YS00ZWRjLTg0ZTctYjQyYjQxZjMxMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCigLJwXIGmoh9Uu8UGtTgRtgrOz71E9QE4A AuXv7wmWYzJ110Buw3M+nYAYXb7IgeyyoKHZgeN/ljx97CzwYObMt1YuB2DIIBjw IFifzFHQlyiGsnrQBhUuXkShRxOYqItKC+xsDwW0oFiFtigLg9K9KN6tICoITWod dptWPXEd0j7sZghCW8qi5IvA3BtgsHHZvR6aY54KrjcHVhianf4HMYtUSOgJdMXx Eoo6iUNJESwzE6EpPeoWdtYpEbZvfatwCqKZncZhArNFaTDXSmmrwZfv31TaeQyr AkbyeXufJiNuWZLNoD7Ct1g/ur/KR3YAKEBm6ryV/TIfeVzxzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvGnSVm8jGs/C6E7DI48bVQ+WEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYTY1NmFmNDUtNmY2YS0z NThjLTk3ZDUtZWU5YzBlN2E5YTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE42qTZPgV2aVG5lN9zsqtmtFJm65R+MgbJOPco4d+rSH2Us9Fl39eAD 89j4h6I45MUekXuJ6j022DZaXG8tco+6ASqzza0FheNNJtGRmfXCh0OXFxjS3rYj wQvTCyLGdUB1ptyI9m7A19hlw/WZy1WX/GH4HdWnm6aU9Vtwp4mRldKTAjnH/6VR uLB2O/2l08nAXolveWdFB6RChHG7q6H9vnEf+AF77yKrgxHb51DWsUr40O1Fra2/ VhjTZ8qBeyFQPmbLWVXlgyXPlnPcnOxI6tg3+vwi7y1MYqSdlnJaDM3adB0p9FZ/ lPyzA3cPxZ4R9I+GpyayEdbWlYLvjHQ= -----END CERTIFICATE-----Generated at Wed Nov 5 23:02:02 2025 by rpki-client