$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b2cfa53d-a932-3912-aadb-d09c12415290.roa File: b2cfa53d-a932-3912-aadb-d09c12415290.roa (raw, json) Hash identifier: VpsW8IxnGesDj35w8+Z0IpJhBiZOqUVUF6q1dl/punc= Subject key identifier: 70:3C:BD:D8:20:B0:B8:0D:60:9C:0B:2A:94:77:0D:2C:65:DD:76:C9 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B25FC369C8A8A4EE3A506EA80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b2cfa53d-a932-3912-aadb-d09c12415290.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 271 IP address blocks: 209.87.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:36:9c:8a:8a:4e:e3:a5:06:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=6c0450d5-abd6-4c59-8942-deaedb5e0105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b0:c7:39:24:f4:83:8f:e8:51:da:1a:b7:29: f0:8a:d0:ad:a2:a3:e1:ce:d0:8b:2c:31:b9:2a:99: 47:51:71:a9:97:43:fe:16:87:71:c1:f5:af:40:d6: ed:8e:90:7b:19:61:44:dd:c7:4c:20:b3:df:4b:b3: f8:db:06:56:ba:55:e2:6c:50:16:0c:99:d6:be:82: 3b:2a:c8:47:e1:d6:b7:9b:3d:a9:58:4b:a8:3e:e8: 66:dc:76:31:87:26:33:2c:88:3b:0b:88:0c:0c:11: 85:d4:7d:24:c2:62:7b:97:dc:6c:f8:49:56:de:3b: 5a:9e:78:e4:dd:72:d7:63:8f:93:0f:87:df:5d:bf: 6f:97:d3:68:bc:01:02:49:a7:6b:55:c3:26:67:02: 0b:cf:89:95:3f:33:83:00:54:c3:08:b1:82:27:0b: 22:29:36:2f:a5:e9:32:21:12:0c:42:92:52:ac:cb: 04:2e:2c:b7:21:97:a3:2a:89:81:a8:ba:d7:8d:e0: e4:62:fd:75:ce:bf:3a:33:31:bc:79:fd:80:14:f1: c7:b3:f4:34:51:5f:10:73:48:83:f4:c5:64:76:dc: 79:20:10:39:16:2c:08:28:a8:9d:40:1d:04:36:1c: 6d:6f:8f:6b:ee:cb:69:71:38:d7:f5:ef:23:ff:8d: ff:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3C:BD:D8:20:B0:B8:0D:60:9C:0B:2A:94:77:0D:2C:65:DD:76:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b2cfa53d-a932-3912-aadb-d09c12415290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:87:76:90:08:70:17:70:9c:21:37:d7:1c:ea:82:ed:65:3a: 8d:b4:b6:43:69:d2:fa:c5:6a:61:94:29:b6:24:98:5b:d0:7c: e6:de:85:70:98:29:ad:ec:cc:d3:7b:e6:47:0f:ed:f0:1c:90: 88:7f:44:48:c1:66:c9:2e:34:31:17:5f:59:ba:8d:5d:63:f4: 8e:b5:32:6b:53:9d:df:47:d7:6d:d7:ad:5c:a0:52:81:cb:80: db:12:60:29:ea:3a:0d:23:72:50:95:5f:7e:f6:c6:2b:f6:9f: 3b:05:82:22:ef:db:38:d1:23:2d:43:24:9c:9d:b3:19:39:d7: 62:ba:9c:bf:71:d7:e6:5b:2d:ab:81:3d:23:03:21:57:e6:61: 80:8b:e3:20:8c:09:ec:33:fc:cb:76:86:55:60:fa:69:c7:bb: f8:26:cb:c4:db:07:b1:37:4c:f6:56:11:17:fb:4f:31:4a:c3: 1d:ce:3a:2f:68:0f:17:9f:a9:51:55:ac:65:28:53:f9:10:d1: 3d:54:cd:bd:40:5a:c8:cd:bd:de:f0:2d:8e:79:04:71:06:e7: 66:b5:7e:f8:91:d6:3b:ec:82:50:1f:25:4e:3f:0c:03:76:92: af:2f:3f:7e:57:32:35:21:d6:be:5c:d8:f7:27:8f:75:be:b6: 5a:b9:36:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DaciopO46UG6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NmMwNDUwZDUtYWJkNi00YzU5LTg5NDItZGVhZWRiNWUwMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97DHOST0g4/oUdoatynwitCtoqPhztCLLDG5 KplHUXGpl0P+FodxwfWvQNbtjpB7GWFE3cdMILPfS7P42wZWulXibFAWDJnWvoI7 KshH4da3mz2pWEuoPuhm3HYxhyYzLIg7C4gMDBGF1H0kwmJ7l9xs+ElW3jtannjk 3XLXY4+TD4ffXb9vl9NovAECSadrVcMmZwILz4mVPzODAFTDCLGCJwsiKTYvpeky IRIMQpJSrMsELiy3IZejKomBqLrXjeDkYv11zr86MzG8ef2AFPHHs/Q0UV8Qc0iD 9MVkdtx5IBA5FiwIKKidQB0ENhxtb49r7stpcTjX9e8j/43/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA8vdggsLgNYJwLKpR3DSxl3XbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYjJjZmE1M2QtYTkzMi0z OTEyLWFhZGItZDA5YzEyNDE1MjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmHdpAIcBdwnCE31xzqgu1lOo20tkNp0vrFamGUKbYkmFvQfObehXCY Ka3szNN75kcP7fAckIh/REjBZskuNDEXX1m6jV1j9I61MmtTnd9H123XrVygUoHL gNsSYCnqOg0jclCVX372xiv2nzsFgiLv2zjRIy1DJJydsxk512K6nL9x1+ZbLauB PSMDIVfmYYCL4yCMCewz/Mt2hlVg+mnHu/gmy8TbB7E3TPZWERf7TzFKwx3OOi9o DxefqVFVrGUoU/kQ0T1Uzb1AWsjNvd7wLY55BHEG52a1fviR1jvsglAfJU4/DAN2 kq8vP35XMjUh1r5c2Pcnj3W+tlq5Ns0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:25 2025 by rpki-client