$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa File: 226257d4-f43f-3f67-b662-d0922b1e31e3.roa (raw, json) Hash identifier: 9XtRJyehSEM9xoqo55FN4lUU17Q8U1jF8ZBSA5Z1a9s= Subject key identifier: F9:8B:08:FB:B4:2B:F7:ED:37:DE:92:66:45:83:21:44:A8:31:65:A3 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B21CC28FC0840637FFA19B040 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 397543 IP address blocks: 207.23.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:28:fc:08:40:63:7f:fa:19:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=3ba2bde3-8c6c-45b1-8815-abc9cf183202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e1:cf:34:fd:77:63:76:a8:c2:cb:d1:fe:95: 19:c0:a7:45:da:7d:a7:7c:03:05:32:54:62:73:62: 48:8a:96:56:d6:03:37:84:d5:70:89:11:5c:bd:62: 76:32:3b:30:3d:ff:2c:ef:f1:4c:77:59:e5:59:09: cf:08:69:ae:c8:ef:e1:c3:ef:9d:07:59:fc:f9:53: 91:68:49:70:45:78:e9:aa:16:9b:f3:de:1f:48:70: 52:cc:5a:b3:72:0a:0a:55:ba:40:15:8c:87:3b:6c: 42:1e:b4:4c:9c:16:fa:0a:88:01:f4:f5:4e:cf:09: 35:e0:9b:b1:3d:f6:b0:e7:ef:c8:5b:f5:7e:11:ac: ca:c8:2d:03:28:17:6d:79:16:92:c6:d8:69:80:41: bb:19:99:6c:5f:14:58:47:66:4e:18:1c:dc:f7:00: 68:2c:01:32:4e:3e:8c:3b:c7:f6:b6:4a:83:0d:ce: 35:05:bd:d1:be:a1:5e:ce:5d:ed:37:45:35:8d:f7: 42:01:75:17:0f:78:ba:53:15:58:5b:25:64:35:a4: c4:df:4a:9c:ec:6d:ff:ed:d6:4e:4e:fb:6a:cb:30: b3:22:e4:c3:7a:26:13:fa:23:b9:75:79:2c:c5:ee: 04:d4:ce:f3:89:2c:cd:63:20:e5:e1:c9:6c:ac:47: 54:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8B:08:FB:B4:2B:F7:ED:37:DE:92:66:45:83:21:44:A8:31:65:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:e1:02:c6:f5:26:67:86:3d:fe:c6:ba:69:3e:81:fd:f5:5a: 97:63:26:07:a9:9e:17:c7:4d:72:c1:49:58:60:70:04:84:25: 03:ad:51:0a:7b:30:14:d0:a6:73:e2:38:ab:ab:5e:55:6d:e7: c3:3e:63:76:a7:a7:21:40:aa:f3:8a:78:1d:3b:10:1f:af:50: 32:42:f4:ae:43:4c:94:cf:6a:43:da:7f:07:7b:ef:b2:2e:e6: 45:ff:fd:97:3c:d2:83:90:99:84:8d:36:bd:52:52:60:fe:26: 1c:1e:00:d3:d8:79:6a:9a:63:cf:cc:19:86:a2:3d:7e:c2:ea: d8:78:16:14:62:d3:ac:78:03:70:0c:06:0f:29:f8:68:18:7d: 90:9c:f8:a0:01:02:e3:da:d4:61:f3:d5:a6:36:ab:75:9a:22: 13:dd:da:27:e8:50:37:3d:84:36:72:bb:bd:36:6b:87:e5:75: 98:39:f1:c2:96:3c:51:5d:66:f8:0e:85:dc:fe:09:1e:4b:d2: a0:98:a6:3b:67:1f:53:00:99:fb:0a:a9:65:fc:7c:cc:b4:a8: 8f:b1:2c:34:6d:fb:73:9e:49:5e:29:6a:5f:4c:ac:c4:ea:67: ad:ad:28:8f:f3:2f:60:52:1c:f1:a5:25:02:b5:91:75:fc:46: 2b:43:cc:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCj8CEBjf/oZsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk M2JhMmJkZTMtOGM2Yy00NWIxLTg4MTUtYWJjOWNmMTgzMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uHPNP13Y3aowsvR/pUZwKdF2n2nfAMFMlRi c2JIipZW1gM3hNVwiRFcvWJ2MjswPf8s7/FMd1nlWQnPCGmuyO/hw++dB1n8+VOR aElwRXjpqhab894fSHBSzFqzcgoKVbpAFYyHO2xCHrRMnBb6CogB9PVOzwk14Jux Pfaw5+/IW/V+EazKyC0DKBdteRaSxthpgEG7GZlsXxRYR2ZOGBzc9wBoLAEyTj6M O8f2tkqDDc41Bb3RvqFezl3tN0U1jfdCAXUXD3i6UxVYWyVkNaTE30qc7G3/7dZO TvtqyzCzIuTDeiYT+iO5dXksxe4E1M7ziSzNYyDl4clsrEdU+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmLCPu0K/ftN96SZkWDIUSoMWWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMjI2MjU3ZDQtZjQzZi0z ZjY3LWI2NjItZDA5MjJiMWUzMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzxdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfhAsb1JmeGPf7Gumk+gf31WpdjJgepnhfHTXLBSVhgcASEJQOtUQp7 MBTQpnPiOKurXlVt58M+Y3anpyFAqvOKeB07EB+vUDJC9K5DTJTPakPafwd777Iu 5kX//Zc80oOQmYSNNr1SUmD+JhweANPYeWqaY8/MGYaiPX7C6th4FhRi06x4A3AM Bg8p+GgYfZCc+KABAuPa1GHz1aY2q3WaIhPd2ifoUDc9hDZyu702a4fldZg58cKW PFFdZvgOhdz+CR5L0qCYpjtnH1MAmfsKqWX8fMy0qI+xLDRt+3OeSV4pal9MrMTq Z62tKI/zL2BSHPGlJQK1kXX8RitDzEc= -----END CERTIFICATE-----Generated at Sat Oct 11 11:05:32 2025 by rpki-client