$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa File: a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa (raw, json) Hash identifier: CPz99G1/4adTWusGfsOq9jglhqQQ1Of0i1JR8agVn5Q= Subject key identifier: C4:A7:76:9D:DA:42:D3:7E:99:56:06:F5:67:F5:23:82:59:40:76:09 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584BBA10412D9E02A56798AADE80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 271 IP address blocks: 206.12.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:41:2d:9e:02:a5:67:98:aa:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=63fee487-4f44-4dbc-aec1-462612db2fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:20:89:bb:a3:6b:a7:91:14:3e:e5:ca:64:5a: 72:ed:8f:f5:15:a2:8b:cd:34:83:c4:36:38:dd:4a: 32:49:32:dd:7a:36:c1:0b:56:43:30:35:88:ce:13: e9:41:69:80:fe:9f:f3:7d:41:0b:e6:2c:88:1c:73: c6:46:39:2f:c5:dd:d7:de:ba:0b:36:5c:43:25:49: 00:c4:f1:e2:92:bc:25:fb:36:4c:92:f3:e5:2d:48: 0a:ed:d5:d1:0e:10:9b:75:23:b4:5a:86:c8:46:8a: 4f:7d:38:d9:3d:4b:f5:33:71:cf:ed:d2:49:5b:88: 83:13:f1:28:a2:18:eb:97:28:8d:90:bf:e5:ef:df: c7:e8:21:49:37:f3:21:44:e3:5f:16:6d:c6:8a:13: 4c:b1:4a:b8:02:11:6f:b9:63:b8:b8:32:91:3e:17: 45:75:7d:32:30:01:c1:3a:b0:8a:6e:d3:4d:10:3b: fc:45:65:37:d8:2d:5d:d6:70:08:a6:53:3b:ab:25: 8d:f3:e8:3f:e2:fe:56:4f:d7:20:5b:ff:36:03:64: 72:25:0b:7f:ae:69:9f:6e:9d:4b:62:06:1e:45:00: 20:54:a3:01:31:f0:15:87:ea:8c:90:54:7c:24:2a: 36:5e:51:52:d6:0f:85:58:fa:b3:78:f5:7b:20:e9: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A7:76:9D:DA:42:D3:7E:99:56:06:F5:67:F5:23:82:59:40:76:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d7:f5:dd:12:42:96:53:95:00:f5:ad:ac:2d:5c:d5:61:7a: 93:86:9c:c0:7c:08:fa:bc:99:f1:e1:29:5c:50:9f:a5:a3:dc: 7a:c6:9d:a8:08:a9:08:b1:e3:48:d0:6b:62:22:62:d0:36:a8: b0:15:b0:76:bf:1e:c0:c7:e1:3d:f8:20:7a:1d:6f:22:0b:9a: 74:41:06:44:63:82:75:21:e6:7a:49:a8:4c:9f:e4:89:66:a6: 5e:8c:d7:d4:7b:9d:d5:0b:8b:67:d6:b6:be:ab:0f:b5:4d:8a: cf:9c:58:d7:db:4c:5c:a0:c1:cf:1b:88:be:2f:7f:2d:99:c9: aa:3e:d6:a1:35:bf:60:00:6e:1b:2c:dc:ff:74:4a:5a:c9:84: ff:a9:08:bb:37:8e:e6:30:6b:d1:83:6e:21:10:f6:e4:48:e7: 74:cd:06:24:15:8a:33:48:d0:fe:79:28:dd:0e:26:d7:8e:8b: 9b:5a:3f:8e:36:da:7f:94:71:bb:38:4f:4b:c1:cd:6e:a6:87: 6c:ad:59:fe:bb:c6:11:9a:c7:41:43:04:f2:95:99:5a:eb:3f: f2:7f:99:a2:40:56:8a:5a:0e:f9:41:36:3b:c2:a5:3b:7b:e7: d9:b3:fe:66:e4:8f:4a:f1:db:fc:19:29:00:03:fa:c8:4f:61: 93:7c:40:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEEtngKlZ5iq3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NjNmZWU0ODctNGY0NC00ZGJjLWFlYzEtNDYyNjEyZGIyZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCCJu6Nrp5EUPuXKZFpy7Y/1FaKLzTSDxDY4 3UoySTLdejbBC1ZDMDWIzhPpQWmA/p/zfUEL5iyIHHPGRjkvxd3X3roLNlxDJUkA xPHikrwl+zZMkvPlLUgK7dXRDhCbdSO0WobIRopPfTjZPUv1M3HP7dJJW4iDE/Eo ohjrlyiNkL/l79/H6CFJN/MhRONfFm3GihNMsUq4AhFvuWO4uDKRPhdFdX0yMAHB OrCKbtNNEDv8RWU32C1d1nAIplM7qyWN8+g/4v5WT9cgW/82A2RyJQt/rmmfbp1L YgYeRQAgVKMBMfAVh+qMkFR8JCo2XlFS1g+FWPqzePV7IOlanQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSndp3aQtN+mVYG9Wf1I4JZQHYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYTlhMmQzMGMtODM0Ni0z MmEyLTlhNjctZWRhODBmYjZhYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzgysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTX9d0SQpZTlQD1rawtXNVhepOGnMB8CPq8mfHhKVxQn6Wj3HrGnagI qQix40jQa2IiYtA2qLAVsHa/HsDH4T34IHodbyILmnRBBkRjgnUh5npJqEyf5Ilm pl6M19R7ndULi2fWtr6rD7VNis+cWNfbTFygwc8biL4vfy2Zyao+1qE1v2AAbhss 3P90SlrJhP+pCLs3juYwa9GDbiEQ9uRI53TNBiQVijNI0P55KN0OJteOi5taP442 2n+Ucbs4T0vBzW6mh2ytWf67xhGax0FDBPKVmVrrP/J/maJAVopaDvlBNjvCpTt7 59mz/mbkj0rx2/wZKQAD+shPYZN8QDo= -----END CERTIFICATE-----Generated at Thu Nov 6 00:23:17 2025 by rpki-client