$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa File: 4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa (raw, json) Hash identifier: SUHpxeJGevdvPbeXVajMnWZpDFQm+lQtvut5JHW29oQ= Subject key identifier: 96:9B:C0:15:5B:42:3F:D8:D2:7C:99:B7:39:8D:C7:A0:AC:B7:67:D2 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B2CF6E7BB4E9571744DB96000 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 271 IP address blocks: 207.23.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e7:bb:4e:95:71:74:4d:b9:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=997f050f-67ea-4615-b9dc-9f2cf85f8fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e3:84:70:3e:78:4f:aa:89:10:4e:b7:6f:85: 37:36:24:09:c9:74:e0:40:d0:cc:52:71:92:ff:d9: e8:b7:4a:61:25:8d:5f:cc:bb:02:97:71:a5:4a:3c: 1d:77:c5:aa:f3:50:77:ef:22:eb:66:88:95:b1:6d: 93:4c:01:91:b2:4b:d9:02:8c:de:1c:2e:71:d2:70: 4c:d1:81:20:a2:89:2c:bd:10:8e:87:de:50:f2:4e: bf:b0:5c:6e:2e:4f:d4:40:89:69:67:1a:34:2b:da: af:3f:15:b2:78:b1:f5:f0:0f:76:d3:5f:f0:18:a8: de:55:ab:f1:de:6e:6b:91:87:30:3d:f0:86:78:2d: ec:20:5c:30:88:76:8d:77:6a:59:9c:b4:f5:bc:1d: 60:03:9b:a3:79:6b:b6:54:b3:92:57:67:32:68:21: 9f:81:2b:82:40:48:fd:b4:dc:cd:73:d5:fa:fc:7d: 6f:00:78:14:94:28:30:98:75:0f:77:4d:e9:2a:28: 6b:cd:84:ee:12:86:93:e6:d6:cc:fc:21:8f:16:be: c9:e0:e8:34:74:0d:8f:1e:e1:41:41:77:80:68:9f: d5:cb:41:65:2b:7a:49:f8:5b:ea:0a:a9:88:2f:68: 7e:ad:ea:e3:f7:c0:42:29:89:48:86:69:cc:5c:8c: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9B:C0:15:5B:42:3F:D8:D2:7C:99:B7:39:8D:C7:A0:AC:B7:67:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:43:7d:41:92:c7:36:f7:dc:f7:b2:67:7d:f7:bf:9e:01:09: 7f:de:1d:a2:8f:7f:83:71:60:cd:f3:12:57:15:3f:af:f1:13: 43:ca:91:6d:5b:e8:5c:e9:da:68:92:43:f3:49:5b:9d:9d:f0: 11:c9:75:d3:62:4a:00:e3:84:21:ae:38:bd:34:0b:a6:4a:48: f4:be:59:a8:d8:94:5f:b6:b3:1a:d7:b5:3d:35:3e:63:c9:45: 6c:52:99:d0:32:12:bd:95:04:aa:08:4b:d2:fc:d6:8a:48:f2: f6:bb:70:a3:40:ee:23:e9:58:67:38:a2:1a:d4:f4:3f:69:c3: fe:03:62:6e:d4:51:a0:f6:a1:7f:85:3d:6e:bb:6f:1a:5c:cd: 13:f8:e1:c0:d9:f8:be:0f:96:55:98:f3:1f:d7:ee:ab:88:7e: e1:7f:ce:39:e0:8f:7d:62:17:27:e5:94:2b:ea:bf:0b:c7:75: 13:d6:9e:f1:ba:b5:96:98:5c:cf:89:89:a4:d1:ae:a5:8a:da: 33:68:8c:cb:31:e9:07:87:45:92:b8:2f:5e:38:a8:e4:1c:27: 12:0a:24:f3:50:a3:3d:9d:4c:19:9d:b9:1f:e8:ab:99:03:91: f0:49:f7:2d:d1:e3:14:d8:80:40:ed:de:f8:d4:ac:f7:d3:b4: d4:30:15:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9ue7TpVxdE25YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk OTk3ZjA1MGYtNjdlYS00NjE1LWI5ZGMtOWYyY2Y4NWY4ZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OOEcD54T6qJEE63b4U3NiQJyXTgQNDMUnGS /9not0phJY1fzLsCl3GlSjwdd8Wq81B37yLrZoiVsW2TTAGRskvZAozeHC5x0nBM 0YEgooksvRCOh95Q8k6/sFxuLk/UQIlpZxo0K9qvPxWyeLH18A9201/wGKjeVavx 3m5rkYcwPfCGeC3sIFwwiHaNd2pZnLT1vB1gA5ujeWu2VLOSV2cyaCGfgSuCQEj9 tNzNc9X6/H1vAHgUlCgwmHUPd03pKihrzYTuEoaT5tbM/CGPFr7J4Og0dA2PHuFB QXeAaJ/Vy0FlK3pJ+FvqCqmIL2h+rerj98BCKYlIhmnMXIxoLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJabwBVbQj/Y0nyZtzmNx6Cst2fSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNGQyYTllZjktN2RlMy0z NGExLWEyYjctYWM5OTYyMGFjYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhDfUGSxzb33PeyZ333v54BCX/eHaKPf4NxYM3zElcVP6/xE0PKkW1b 6Fzp2miSQ/NJW52d8BHJddNiSgDjhCGuOL00C6ZKSPS+WajYlF+2sxrXtT01PmPJ RWxSmdAyEr2VBKoIS9L81opI8va7cKNA7iPpWGc4ohrU9D9pw/4DYm7UUaD2oX+F PW67bxpczRP44cDZ+L4PllWY8x/X7quIfuF/zjngj31iFyfllCvqvwvHdRPWnvG6 tZaYXM+JiaTRrqWK2jNojMsx6QeHRZK4L144qOQcJxIKJPNQoz2dTBmduR/oq5kD kfBJ9y3R4xTYgEDt3vjUrPfTtNQwFVw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:49 2025 by rpki-client