$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa File: b09e3c7b-d4da-3052-b836-3ec571164c65.roa (raw, json) Hash identifier: 0ltfgbLgOhCrfcrPN5geqHqqloRcu7A9EQm90bQOw5s= Subject key identifier: F5:96:D3:DB:48:1B:14:9D:25:4B:75:E9:0C:02:D5:32:23:E6:E2:00 Certificate issuer: /CN=7d6bea32-db4c-4326-93a0-713364b8aa44 Certificate serial: 010D0C9F4328584B48E2109A3AD489AD9F851500 Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 22351 IP address blocks: 216.250.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:10:9a:3a:d4:89:ad:9f:85:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f95c4545-8c1d-4e54-ba04-9221c4ab27f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9f:1e:fa:59:66:51:0f:8c:25:38:86:4d:6c: 1f:81:ad:e5:e2:c6:6a:92:41:00:33:de:4e:73:2d: 5e:0e:da:67:49:cb:e2:9c:c2:96:08:9b:4e:be:d7: ec:81:52:95:ed:bb:10:c1:95:8b:07:77:0b:73:ea: 43:dd:26:9b:2a:e5:bf:da:78:2b:a9:45:5a:24:0d: aa:49:95:12:07:7c:7f:fa:3e:01:ff:e1:f1:1b:d5: 0b:c6:2a:d5:d2:9d:5d:82:e2:00:0b:1e:15:a2:19: 8c:be:2f:f8:1b:f5:45:e6:02:fc:ef:5e:c4:f1:1c: 51:86:2e:be:36:91:34:76:84:9e:6b:58:70:72:c7: c6:aa:fb:cf:74:0a:db:19:89:00:c4:56:81:fb:fd: 2b:66:90:42:4e:07:91:2f:fc:4d:4e:c8:f3:95:ae: 93:a6:03:4e:ec:91:d2:a2:00:08:1a:2d:c1:3e:3e: 22:b8:5f:55:17:e4:f4:cf:bd:f9:92:7e:f3:d5:10: 9c:eb:bf:26:4e:9f:29:ea:63:77:ef:1c:5a:79:e7: fd:14:6a:13:49:2b:63:d9:f0:7e:a6:36:0e:b0:64: 9d:96:56:c8:78:73:72:97:7d:cb:a1:5f:07:70:74: 71:7e:32:2c:d5:a7:1a:48:ee:86:0a:3d:1b:b1:42: fb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:96:D3:DB:48:1B:14:9D:25:4B:75:E9:0C:02:D5:32:23:E6:E2:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl X509v3 Authority Key Identifier: keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer sbgp-ipAddrBlock: critical IPv4: 216.250.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a9:1b:07:5d:5a:f7:53:f8:f8:75:60:fb:e1:8f:9d:51:0c: d5:40:36:e9:be:f8:70:a6:3a:69:1d:a8:f4:21:21:13:d8:47: a1:e5:b4:ea:39:3c:c7:f3:fe:b1:d8:c8:93:44:1e:3b:72:b8: 7b:86:c8:59:d3:12:5a:b4:31:07:51:be:5a:96:39:a8:93:e1: b6:dc:40:c0:f8:b9:72:2f:90:c7:54:0a:2a:5e:a8:46:95:56: 86:9e:f6:b7:a6:84:b9:d2:58:9a:41:70:89:73:25:7d:6c:61: 06:47:be:a5:79:0c:08:96:e6:7b:be:4c:d4:4b:e8:96:f5:ed: 25:98:ff:f9:bc:24:55:50:33:41:ac:82:9a:79:47:87:57:8a: 99:cb:ca:9b:dc:fd:0a:e7:45:70:7a:6d:b3:12:c2:d5:a6:34: af:16:5c:d8:52:22:63:74:db:e4:c5:a1:7f:f3:0a:97:83:f6: 19:d3:74:7e:35:31:29:6a:2a:e1:14:ae:05:e9:e9:d6:e7:01: c3:6f:8c:bb:75:de:b1:e8:0c:0e:51:1c:06:25:72:76:9d:01: d4:36:7a:bd:a4:f2:c1:2c:ee:af:2c:b8:b3:e4:0f:6c:34:6a: 12:4a:dc:75:2c:4c:b0:c9:45:da:e9:7d:44:d8:e2:80:5c:2b: e6:e2:3d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4hCaOtSJrZ+FFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q2YmVhMzItZGI0Yy00MzI2LTkzYTAtNzEzMzY0Yjhh YTQ0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Zjk1YzQ1NDUtOGMxZC00ZTU0LWJhMDQtOTIyMWM0YWIyN2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ8e+llmUQ+MJTiGTWwfga3l4sZqkkEAM95O cy1eDtpnScvinMKWCJtOvtfsgVKV7bsQwZWLB3cLc+pD3SabKuW/2ngrqUVaJA2q SZUSB3x/+j4B/+HxG9ULxirV0p1dguIACx4VohmMvi/4G/VF5gL8717E8RxRhi6+ NpE0doSea1hwcsfGqvvPdArbGYkAxFaB+/0rZpBCTgeRL/xNTsjzla6TpgNO7JHS ogAIGi3BPj4iuF9VF+T0z735kn7z1RCc678mTp8p6mN37xxaeef9FGoTSStj2fB+ pjYOsGSdllbIeHNyl33LoV8HcHRxfjIs1acaSO6GCj0bsUL7cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWW09tIGxSdJUt16QwC1TIj5uIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZi ZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMzNjRiOGFhNDQvYjA5ZTNjN2ItZDRkYS0z MDUyLWI4MzYtM2VjNTcxMTY0YzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2Q2YmVhMzItZGI0Yy00MzI2LTkz YTAtNzEzMzY0YjhhYTQ0LzdkNmJlYTMyLWRiNGMtNDMyNi05M2EwLTcxMzM2NGI4 YWE0NC5jcmwwHwYDVR0jBBgwFoAU13vCe9o3Nfdsvxl4cDowOSWIciMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZiZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMz NjRiOGFhNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PrOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCpGwddWvdT+Ph1YPvhj51RDNVANum++HCmOmkdqPQhIRPYR6HltOo5 PMfz/rHYyJNEHjtyuHuGyFnTElq0MQdRvlqWOaiT4bbcQMD4uXIvkMdUCipeqEaV Voae9remhLnSWJpBcIlzJX1sYQZHvqV5DAiW5nu+TNRL6Jb17SWY//m8JFVQM0Gs gpp5R4dXipnLypvc/QrnRXB6bbMSwtWmNK8WXNhSImN02+TFoX/zCpeD9hnTdH41 MSlqKuEUrgXp6dbnAcNvjLt13rHoDA5RHAYlcnadAdQ2er2k8sEs7q8suLPkD2w0 ahJK3HUsTLDJRdrpfUTY4oBcK+biPaQ= -----END CERTIFICATE-----Generated at Sat Oct 11 05:23:08 2025 by rpki-client