$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa File: ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa (raw, json) Hash identifier: IOk3S70ruXjyr17UrYx7KxsHExQ0qyu/GY2QrnLuQKs= Subject key identifier: 3B:2C:8C:F5:EA:B1:DB:9A:DF:8B:D5:B9:62:20:EB:E7:73:C2:7B:68 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584BBA10473726841EB8E9E30900 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 11105 IP address blocks: 206.12.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:47:37:26:84:1e:b8:e9:e3:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=011ab639-6ae9-489e-88cd-c23e9bfb2e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:91:d4:78:a7:34:14:e6:74:13:e8:26:cf: 7e:61:74:10:54:33:7a:2e:93:cd:f5:7e:e5:6f:b6: 1d:ff:38:ae:2c:e5:70:fb:ef:5a:1f:99:f2:77:b4: 78:6d:de:27:1d:1a:85:9b:34:28:c8:43:4c:12:66: 5b:a2:a8:a2:e7:f1:a4:3b:a8:07:8c:3f:77:6c:91: d1:d8:65:09:89:11:43:84:44:23:08:9c:97:1e:4e: 42:34:9b:e8:b0:27:a0:0a:4a:42:24:45:b0:a7:1e: 34:3e:22:d7:28:61:fd:be:77:01:c1:fc:f6:4e:c8: 04:a0:13:e2:f0:4f:f6:65:a8:88:6c:df:25:8b:c7: 8f:5f:67:7f:85:a5:99:b1:c5:bd:95:0c:1c:24:03: 97:57:90:62:73:3c:90:35:e3:af:f6:6f:b4:20:91: c1:80:72:35:63:bb:81:b4:f3:18:bd:19:84:2a:7c: fe:b2:51:5b:be:4d:69:1d:e2:96:89:50:37:c5:ae: 94:3f:c6:74:99:3f:e1:61:c0:d0:8f:ed:a1:a8:79: 02:19:bc:54:61:bd:c1:fc:ff:4e:33:cb:f6:0a:39: 6b:c0:6e:88:7c:23:41:49:d7:08:b1:d9:0f:96:6c: e6:cf:19:24:5a:8e:54:3f:bd:b2:46:8e:90:0f:11: f7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2C:8C:F5:EA:B1:DB:9A:DF:8B:D5:B9:62:20:EB:E7:73:C2:7B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:15:5c:97:8a:e3:64:63:a4:91:9f:ec:64:0a:74:c9:db:20: 15:4b:dd:1e:e7:66:0a:eb:d9:10:3e:83:b0:03:f6:55:1f:94: f2:8b:f2:c7:7f:72:7d:16:36:75:6d:b3:5e:3f:99:b3:75:c1: b0:c4:6b:b1:58:2a:1a:11:42:12:bf:68:85:76:0b:f7:41:07: bb:ea:d5:6d:9c:c0:04:71:31:d6:90:59:92:2c:1a:3a:d3:8f: 86:a9:13:86:d7:8f:81:1d:f9:81:b5:7b:ba:73:ba:cc:e2:43: cd:d9:27:74:2f:b3:15:d2:72:1f:c5:12:ad:99:c4:91:44:4b: de:d9:3e:7f:1e:41:57:df:22:79:49:70:b5:d8:3b:f4:49:41: ab:e7:0d:c2:27:82:41:47:ae:e0:50:6a:fe:41:d5:9d:b4:b9: b4:01:bd:a1:56:d4:b6:bf:fb:8f:3c:b0:a9:1e:b6:11:99:83: 72:77:be:c1:24:ff:d7:aa:64:4b:6b:60:d2:44:20:83:3b:2f: a4:de:00:4e:5e:e8:4b:ca:ff:e0:f4:9b:7d:93:d7:3e:cd:d4: 33:6c:a5:4d:4a:11:ec:77:0b:6f:65:1e:a7:18:e1:62:20:0a: a9:6f:47:af:16:ba:b3:c5:ff:ea:ac:ac:e9:41:66:c2:ff:c7: 03:ca:c3:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEc3JoQeuOnjCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MDExYWI2MzktNmFlOS00ODllLTg4Y2QtYzIzZTliZmIyZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVKR1HinNBTmdBPoJs9+YXQQVDN6LpPN9X7l b7Yd/ziuLOVw++9aH5nyd7R4bd4nHRqFmzQoyENMEmZboqii5/GkO6gHjD93bJHR 2GUJiRFDhEQjCJyXHk5CNJvosCegCkpCJEWwpx40PiLXKGH9vncBwfz2TsgEoBPi 8E/2ZaiIbN8li8ePX2d/haWZscW9lQwcJAOXV5BiczyQNeOv9m+0IJHBgHI1Y7uB tPMYvRmEKnz+slFbvk1pHeKWiVA3xa6UP8Z0mT/hYcDQj+2hqHkCGbxUYb3B/P9O M8v2CjlrwG6IfCNBSdcIsdkPlmzmzxkkWo5UP72yRo6QDxH3DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDssjPXqsdua34vVuWIg6+dzwntoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvY2EzZGM0OWYtOWZhYS0z ZmI5LWJhZTgtOGViZTVjZjFmNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzgwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQVXJeK42RjpJGf7GQKdMnbIBVL3R7nZgrr2RA+g7AD9lUflPKL8sd/ cn0WNnVts14/mbN1wbDEa7FYKhoRQhK/aIV2C/dBB7vq1W2cwARxMdaQWZIsGjrT j4apE4bXj4Ed+YG1e7pzusziQ83ZJ3QvsxXSch/FEq2ZxJFES97ZPn8eQVffInlJ cLXYO/RJQavnDcIngkFHruBQav5B1Z20ubQBvaFW1La/+488sKkethGZg3J3vsEk /9eqZEtrYNJEIIM7L6TeAE5e6EvK/+D0m32T1z7N1DNspU1KEex3C29lHqcY4WIg CqlvR68WurPF/+qsrOlBZsL/xwPKw6E= -----END CERTIFICATE-----Generated at Wed Nov 5 06:25:29 2025 by rpki-client