$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/deb60b62-235a-3e60-9042-e2589cd32690.roa File: deb60b62-235a-3e60-9042-e2589cd32690.roa (raw, json) Hash identifier: EdTCaXoKIlX586gas3aVSW9v/ZCMdheaarWxNj/3cVk= Subject key identifier: 97:09:63:A5:05:3E:0E:8B:3B:97:B0:C5:A6:98:F6:13:80:F1:00:95 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B99D79AC49D57EA8FCB9F7C00 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/deb60b62-235a-3e60-9042-e2589cd32690.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 271 IP address blocks: 206.12.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:9a:c4:9d:57:ea:8f:cb:9f:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=7793e29a-ee1d-41c9-a2f2-d924142eb1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:05:01:76:e2:a6:fc:49:8c:f8:ce:79:02: 59:97:e6:33:89:20:58:74:c1:fb:89:e7:6c:bf:00: 2e:2a:39:c1:7f:be:ed:23:56:7d:d2:d4:0f:55:ce: 81:5f:b2:a0:69:18:f6:0c:e3:11:47:27:e6:3a:88: 90:4f:1d:50:08:98:39:77:26:97:9b:09:15:bc:ab: 94:82:00:98:9d:47:8b:34:7e:16:5f:c8:fb:2a:d6: 1c:26:55:ea:8c:ba:29:60:25:5c:59:77:0b:f8:bd: 8e:a4:68:4f:65:70:27:f5:c6:ce:5a:e7:5b:5b:21: cf:63:84:3d:1f:5b:d6:42:03:d2:05:63:de:da:73: f4:8c:6d:6d:51:d4:61:51:b9:08:2d:69:00:4f:c8: 69:c0:82:a0:31:7d:2b:bc:5d:73:09:7d:97:f2:19: df:46:92:5f:06:29:6f:ed:ca:63:d4:b8:17:09:b8: 41:2e:5f:df:be:8b:3c:4f:eb:13:db:95:65:47:48: 41:6d:f4:48:71:c0:50:ce:72:95:2c:3e:27:97:e2: c0:18:59:4a:93:f5:e3:d7:4c:50:47:58:43:d4:44: d4:68:ef:81:4c:93:ef:68:b4:41:1f:32:d5:d2:da: 6e:f6:b7:bf:aa:4c:c0:e8:a0:0c:26:90:99:84:eb: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:09:63:A5:05:3E:0E:8B:3B:97:B0:C5:A6:98:F6:13:80:F1:00:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/deb60b62-235a-3e60-9042-e2589cd32690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:32:da:70:81:f0:1c:84:99:17:78:34:bb:25:fa:a4:26:19: 6d:27:dd:ae:dc:e2:d6:bb:fa:b2:50:17:a0:03:b4:2a:b3:44: 1a:47:34:65:e4:44:3b:96:80:b7:d1:fb:41:de:73:59:16:c6: 3b:ac:5a:62:53:fe:ad:d0:ec:cd:0a:87:39:77:70:e6:65:db: 56:7f:b9:9c:ee:fb:25:a0:02:4b:1d:3a:48:81:2d:1f:55:86: a1:8a:8f:f4:1b:08:a3:07:6b:87:53:4e:38:05:ed:f1:bc:30: 9f:97:5a:5a:1b:82:aa:c4:48:83:6d:fa:77:29:f6:21:53:8e: 45:8e:dd:09:96:02:9d:2c:ba:f8:37:60:58:1c:0f:f2:d2:02: 34:ce:ea:54:40:ab:e8:1b:25:38:aa:a4:30:76:37:e2:94:1b: 87:de:33:7b:02:a5:22:55:20:0a:c4:d6:c9:f5:47:4b:02:0a: 0b:a6:ed:b8:00:43:c2:da:b5:e8:21:ce:c9:54:ce:65:9d:e6: dc:70:aa:d7:fe:c6:65:b9:1c:59:d4:df:e5:7a:df:56:93:3a: d4:0e:ee:93:0b:31:c9:9d:f4:44:38:b8:82:c0:5e:30:ed:08: ce:9d:bf:a1:9e:dc:63:32:56:26:72:7e:cb:4c:b1:67:40:75: 19:bf:e0:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15rEnVfqj8uffAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Nzc5M2UyOWEtZWUxZC00MWM5LWEyZjItZDkyNDE0MmViMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQEFAXbipvxJjPjOeQJZl+YziSBYdMH7ieds vwAuKjnBf77tI1Z90tQPVc6BX7KgaRj2DOMRRyfmOoiQTx1QCJg5dyaXmwkVvKuU ggCYnUeLNH4WX8j7KtYcJlXqjLopYCVcWXcL+L2OpGhPZXAn9cbOWudbWyHPY4Q9 H1vWQgPSBWPe2nP0jG1tUdRhUbkILWkAT8hpwIKgMX0rvF1zCX2X8hnfRpJfBilv 7cpj1LgXCbhBLl/fvos8T+sT25VlR0hBbfRIccBQznKVLD4nl+LAGFlKk/Xj10xQ R1hD1ETUaO+BTJPvaLRBHzLV0tpu9re/qkzA6KAMJpCZhOtYHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcJY6UFPg6LO5ewxaaY9hOA8QCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZGViNjBiNjItMjM1YS0z ZTYwLTkwNDItZTI1ODljZDMyNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzgwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0y2nCB8ByEmRd4NLsl+qQmGW0n3a7c4ta7+rJQF6ADtCqzRBpHNGXk RDuWgLfR+0Hec1kWxjusWmJT/q3Q7M0Khzl3cOZl21Z/uZzu+yWgAksdOkiBLR9V hqGKj/QbCKMHa4dTTjgF7fG8MJ+XWlobgqrESINt+ncp9iFTjkWO3QmWAp0suvg3 YFgcD/LSAjTO6lRAq+gbJTiqpDB2N+KUG4feM3sCpSJVIArE1sn1R0sCCgum7bgA Q8LateghzslUzmWd5txwqtf+xmW5HFnU3+V631aTOtQO7pMLMcmd9EQ4uILAXjDt CM6dv6Ge3GMyViZyfstMsWdAdRm/4AA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:16 2025 by rpki-client