$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa File: 86a2fa96-af1c-3520-b8e2-324df289efd3.roa (raw, json) Hash identifier: u25AHin01R2NLzx9Rz/ePmh/y6PJayrBsD2vcTCYbvY= Subject key identifier: 13:9A:4F:13:31:8C:43:85:4D:07:B7:7B:0F:DC:98:94:C2:A5:31:27 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B1C36D083671BD0885CE8C200 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 393249 IP address blocks: 206.12.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d0:83:67:1b:d0:88:5c:e8:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=d79b03c0-07e9-4c4b-b1e5-4f2011699b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:74:0f:ae:72:67:5e:af:48:c7:a7:ce:fa:0b: 22:66:34:af:87:b9:04:12:0a:66:cb:fb:ea:e7:d4: fa:9f:20:67:4c:08:a8:c1:02:2e:d7:82:81:8e:ed: 0d:3d:32:29:60:a7:9c:6d:7b:65:e3:1e:3f:af:bb: 66:1c:6f:c1:dc:f9:eb:c9:de:be:28:56:98:c9:9a: dd:4a:d5:9e:55:c0:97:11:3f:7f:35:9b:30:82:65: 33:0a:a9:bc:b0:30:b1:69:7c:76:78:d4:11:14:3a: 46:91:b3:27:24:e3:a3:4b:d0:a0:46:c5:e7:f0:87: e2:86:64:72:6f:07:f4:e9:41:39:ef:0b:60:1d:80: 93:60:bc:cb:a9:bf:6b:e7:ae:61:7c:a5:13:ff:66: 85:2e:7b:53:63:2f:a9:0c:ea:00:94:91:cd:be:5e: f7:c1:3f:ff:d6:45:34:c2:76:04:04:d8:40:86:d9: b7:ac:96:61:b1:c3:f0:a7:bc:39:8e:d6:07:d9:da: c5:0c:61:d7:10:8b:00:7f:e3:b1:fb:07:60:96:4e: 87:2d:49:d3:fb:60:0f:b8:61:0b:aa:66:28:90:da: 6b:d6:32:31:f8:61:b3:46:87:a4:bf:76:dd:05:8e: 89:ef:fb:ce:bd:1d:a1:1c:e8:f9:23:25:76:ec:d2: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9A:4F:13:31:8C:43:85:4D:07:B7:7B:0F:DC:98:94:C2:A5:31:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:f5:d0:fc:53:f2:e0:37:3c:4c:a8:02:58:d9:db:cf:18:d9: 53:6a:2c:ba:ff:35:75:ad:78:13:b3:1e:c6:50:f3:a5:95:10: 3b:36:86:95:77:2d:33:52:f6:38:e1:61:25:50:f2:0c:e1:13: 8c:3e:e7:5a:ad:99:fd:b5:0f:13:bf:27:a8:b5:22:df:e3:6f: 48:16:c1:08:2c:4b:cd:5a:11:9f:94:80:4c:3c:e7:d7:d4:74: dd:11:1b:68:02:2c:54:ae:4e:3b:10:e1:69:a0:33:e1:be:b8: d6:5b:7d:1a:c7:99:5b:cd:bb:80:df:21:6f:e9:9b:e8:94:29: a7:31:63:17:12:42:e1:cb:72:ca:f3:76:ed:cd:66:07:1a:f3: 82:78:b6:c8:c9:6f:58:3f:e3:7c:55:a0:09:a8:92:75:b9:64: 21:38:23:b7:e9:26:42:72:74:f3:d7:11:60:e5:c5:6e:73:67: c0:95:44:6c:1a:c6:1e:fb:30:38:b8:b6:ce:29:8a:ed:0a:c3: bf:4a:82:5f:40:2e:18:e6:de:59:85:2e:cd:04:9f:34:06:0e: 0e:d8:c4:24:bf:43:dc:86:39:51:55:65:5a:fc:3b:ac:23:89: 83:83:84:07:44:57:38:f9:99:45:be:0d:66:62:48:90:6c:dc: 64:6a:cb:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtCDZxvQiFzowgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDc5YjAzYzAtMDdlOS00YzRiLWIxZTUtNGYyMDExNjk5YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3QPrnJnXq9Ix6fO+gsiZjSvh7kEEgpmy/vq 59T6nyBnTAiowQIu14KBju0NPTIpYKecbXtl4x4/r7tmHG/B3Pnryd6+KFaYyZrd StWeVcCXET9/NZswgmUzCqm8sDCxaXx2eNQRFDpGkbMnJOOjS9CgRsXn8IfihmRy bwf06UE57wtgHYCTYLzLqb9r565hfKUT/2aFLntTYy+pDOoAlJHNvl73wT//1kU0 wnYEBNhAhtm3rJZhscPwp7w5jtYH2drFDGHXEIsAf+Ox+wdglk6HLUnT+2APuGEL qmYokNpr1jIx+GGzRoekv3bdBY6J7/vOvR2hHOj5IyV27NKEqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOaTxMxjEOFTQe3ew/cmJTCpTEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODZhMmZhOTYtYWYxYy0z NTIwLWI4ZTItMzI0ZGYyODllZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzgzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJz10PxT8uA3PEyoAljZ288Y2VNqLLr/NXWteBOzHsZQ86WVEDs2hpV3 LTNS9jjhYSVQ8gzhE4w+51qtmf21DxO/J6i1It/jb0gWwQgsS81aEZ+UgEw859fU dN0RG2gCLFSuTjsQ4WmgM+G+uNZbfRrHmVvNu4DfIW/pm+iUKacxYxcSQuHLcsrz du3NZgca84J4tsjJb1g/43xVoAmoknW5ZCE4I7fpJkJydPPXEWDlxW5zZ8CVRGwa xh77MDi4ts4piu0Kw79Kgl9ALhjm3lmFLs0EnzQGDg7YxCS/Q9yGOVFVZVr8O6wj iYODhAdEVzj5mUW+DWZiSJBs3GRqyzM= -----END CERTIFICATE-----Generated at Sat Oct 11 11:02:20 2025 by rpki-client