$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa File: 59645cd8-9633-3577-8cc6-4685bcbd83f2.roa (raw, json) Hash identifier: hDIVWAhucthFXcJkCTqbBu90b0yTg683+UNAd51bQ1A= Subject key identifier: 42:6C:94:92:2F:5C:D3:FC:23:C2:E7:DD:1D:55:65:66:8F:17:74:C1 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B21CC288FA4DC1F97747F0B80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 11105 IP address blocks: 207.23.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:28:8f:a4:dc:1f:97:74:7f:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=75cc76c5-bed0-4431-a24f-fd022987dc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:8a:b4:c9:d4:8e:b4:ea:22:5a:49:4d:62: cf:75:55:1c:7d:33:e5:28:a5:db:b4:8a:92:52:26: b8:dc:c4:2a:99:41:92:79:4e:c5:9d:4f:51:b9:38: 45:14:9a:2c:44:6c:c4:58:45:4b:df:dc:29:51:62: a5:c2:72:fa:71:32:9d:4b:b7:db:6a:60:e4:dd:6e: ee:8f:6d:3f:a0:0b:e8:66:68:2e:85:4f:a4:db:39: ce:19:d1:6b:b8:1c:e8:64:d0:1e:23:90:0f:8a:fc: e1:e8:f6:2d:5b:43:e5:e2:80:8e:84:02:49:f1:cc: 8d:65:57:b3:1c:33:95:ee:3a:b1:d2:62:21:f4:2a: 7e:91:00:ab:51:70:48:db:b4:7b:4b:05:a5:f3:23: 5e:9a:23:5d:32:35:4b:b1:e2:4a:2e:eb:76:14:35: d6:ec:ed:4e:c2:3a:61:7a:04:60:50:e2:a0:99:d4: 94:ec:5b:ac:dc:57:50:66:1b:f8:ba:ea:0c:ca:d5: 2e:2a:34:0a:52:14:d9:6c:e1:1b:f0:38:98:a8:73: da:cd:80:cf:df:fc:1f:51:43:bd:f9:43:72:0b:7a: 2b:39:cf:78:5d:4d:30:f6:2a:ff:10:ba:8e:34:92: 3d:aa:7e:83:91:c3:a8:48:fd:89:e9:1e:62:36:ab: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6C:94:92:2F:5C:D3:FC:23:C2:E7:DD:1D:55:65:66:8F:17:74:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:47:0a:9b:75:66:e7:69:83:08:6e:46:c8:3c:82:84:74:6f: a4:64:9f:f6:1f:17:a4:f1:c6:c9:fc:a5:8e:98:63:6f:ab:b5: 7b:e6:0a:d8:c4:d7:25:c1:01:68:80:3c:35:47:9b:e2:ee:c5: 1d:d0:38:f5:15:69:ff:fd:48:07:59:1c:78:a0:d6:74:94:96: 74:11:76:af:b6:76:fa:d1:6f:7c:e5:e8:c3:04:04:21:f3:6c: f0:13:55:15:90:3d:59:33:5c:c4:91:d8:2a:52:e1:78:9d:31: c6:eb:f3:8a:8f:97:5b:11:aa:ed:b9:a1:81:f8:f4:b6:b3:f7: f4:3a:63:f5:77:56:6d:d9:18:34:5e:94:14:46:58:86:e8:57: 2c:16:a3:b1:4a:29:52:08:8c:4f:0e:3e:04:64:e0:bd:9b:57: d7:67:82:24:66:67:6d:96:e6:32:11:96:be:79:e9:5a:a0:91: d5:c5:71:42:df:c7:f8:e6:8c:ef:6a:49:2c:97:c1:07:82:70: f1:96:60:75:74:70:96:fd:17:85:10:e0:ec:87:68:40:1d:11: 0e:28:93:65:84:be:8d:31:60:fa:bb:2d:6b:08:d1:83:5b:3a: e8:87:aa:7a:61:f6:f5:6f:db:06:2f:77:bb:57:1d:e3:a2:67: 47:ed:e9:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCiPpNwfl3R/C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NzVjYzc2YzUtYmVkMC00NDMxLWEyNGYtZmQwMjI5ODdkYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj+KtMnUjrTqIlpJTWLPdVUcfTPlKKXbtIqS Uia43MQqmUGSeU7FnU9RuThFFJosRGzEWEVL39wpUWKlwnL6cTKdS7fbamDk3W7u j20/oAvoZmguhU+k2znOGdFruBzoZNAeI5APivzh6PYtW0Pl4oCOhAJJ8cyNZVez HDOV7jqx0mIh9Cp+kQCrUXBI27R7SwWl8yNemiNdMjVLseJKLut2FDXW7O1Owjph egRgUOKgmdSU7Fus3FdQZhv4uuoMytUuKjQKUhTZbOEb8DiYqHPazYDP3/wfUUO9 +UNyC3orOc94XU0w9ir/ELqONJI9qn6DkcOoSP2J6R5iNqusxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJslJIvXNP8I8Ln3R1VZWaPF3TBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTk2NDVjZDgtOTYzMy0z NTc3LThjYzYtNDY4NWJjYmQ4M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxdVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARHCpt1ZudpgwhuRsg8goR0b6Rkn/YfF6Txxsn8pY6YY2+rtXvmCtjE 1yXBAWiAPDVHm+LuxR3QOPUVaf/9SAdZHHig1nSUlnQRdq+2dvrRb3zl6MMEBCHz bPATVRWQPVkzXMSR2CpS4XidMcbr84qPl1sRqu25oYH49Laz9/Q6Y/V3Vm3ZGDRe lBRGWIboVywWo7FKKVIIjE8OPgRk4L2bV9dngiRmZ22W5jIRlr556VqgkdXFcULf x/jmjO9qSSyXwQeCcPGWYHV0cJb9F4UQ4OyHaEAdEQ4ok2WEvo0xYPq7LWsI0YNb OuiHqnph9vVv2wYvd7tXHeOiZ0ft6bw= -----END CERTIFICATE-----Generated at Sat Oct 11 11:03:52 2025 by rpki-client