$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86fece67-20b8-3986-8803-3d7ac8138185.roa File: 86fece67-20b8-3986-8803-3d7ac8138185.roa (raw, json) Hash identifier: V99Hz/ZM6hBdrTctcpXi1ddwYJ3MoQXEcG3z5YbtZTg= Subject key identifier: 88:89:FD:AB:D3:36:C8:3D:08:01:A2:F8:1A:E4:CB:56:DC:5D:27:FC Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B1C36CF53D34454C3A71B3B80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86fece67-20b8-3986-8803-3d7ac8138185.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 393249 IP address blocks: 142.231.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:cf:53:d3:44:54:c3:a7:1b:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3cd63f97-bc33-452a-b6f6-3762f62d602c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5a:ca:0a:72:cc:66:55:b1:0e:e6:46:6c:24: c3:41:b4:68:9c:60:ec:c9:27:78:c0:81:70:71:f4: cc:5a:be:76:a1:ac:04:2e:72:15:64:4b:fb:d6:c3: 29:a0:a1:4a:d6:19:d8:55:41:f8:57:11:ee:60:1d: 18:3a:68:e3:ea:8f:77:65:3d:4a:99:43:69:07:ca: 36:6b:26:cc:4b:30:ad:16:22:a3:ea:50:08:2b:83: 16:fd:ea:81:09:2e:4b:9e:4a:d0:5d:77:95:52:cb: e3:1b:ec:df:d5:c8:52:5b:5e:3a:1f:cd:e9:38:63: 93:d7:9c:75:1d:b2:84:91:c7:58:01:c9:5e:93:7d: 5c:71:85:8d:2b:50:96:f0:ac:3f:93:f6:56:a9:d1: 96:b8:08:e3:6c:2a:59:2a:62:15:c3:94:3d:37:8e: 83:79:7b:c0:de:f9:90:ca:46:99:ce:c9:d1:a6:74: 3f:be:b1:79:a7:9a:93:5a:bb:71:45:19:f4:4f:fd: a0:6a:da:a1:81:d4:a2:5f:0e:e1:65:64:7d:73:93: 7d:53:54:6e:9c:b8:af:c3:b1:23:bd:58:47:96:27: 98:30:72:63:db:1f:0d:41:7f:4a:17:a9:bf:80:db: 23:21:d8:64:bc:41:be:c3:27:73:5e:eb:ed:01:39: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:89:FD:AB:D3:36:C8:3D:08:01:A2:F8:1A:E4:CB:56:DC:5D:27:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86fece67-20b8-3986-8803-3d7ac8138185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 142.231.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:88:2e:df:7e:b6:66:5d:e8:fc:14:86:d1:53:db:c3:f9:27: 46:69:6b:ff:60:36:71:c2:57:c0:0a:c1:88:9d:b2:20:55:1a: 3c:d8:d5:57:30:b5:42:b2:fe:bf:99:06:4e:97:27:58:a4:76: 87:77:a4:a7:db:b1:bb:cf:0d:24:15:ec:fb:28:d3:8c:cc:1a: 4e:fd:cf:53:fb:5f:0f:9c:dd:56:c8:12:37:fd:7c:30:1d:1f: 2c:c0:1e:6e:9f:e8:bc:56:2f:cb:75:c4:75:db:ba:03:08:1e: 90:f8:d7:38:7d:7d:57:92:25:fb:49:08:3f:5e:a4:fe:38:64: a1:6a:77:f7:17:b7:5d:5d:62:f7:ee:2c:b0:61:4b:1b:be:17: 75:b8:f5:a8:dd:8b:69:fd:96:98:17:a4:3f:e8:25:60:d6:95: 39:e0:a3:b0:06:b8:ac:6e:80:80:82:ba:42:e6:a9:b9:06:7e: 72:54:a2:cd:52:1b:dd:ea:61:98:63:e3:ac:5d:1d:a2:e8:b1: fb:02:df:56:1c:c6:8f:46:89:5d:f8:97:a8:98:d9:70:28:03: 52:f3:c8:b0:60:96:0c:86:d7:90:81:88:7c:89:bc:d6:74:27: 32:58:fe:31:3d:4d:e2:36:d1:10:a1:24:df:15:11:c9:97:4e: 60:71:94:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNs9T00RUw6cbO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2NkNjNmOTctYmMzMy00NTJhLWI2ZjYtMzc2MmY2MmQ2MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVrKCnLMZlWxDuZGbCTDQbRonGDsySd4wIFw cfTMWr52oawELnIVZEv71sMpoKFK1hnYVUH4VxHuYB0YOmjj6o93ZT1KmUNpB8o2 aybMSzCtFiKj6lAIK4MW/eqBCS5LnkrQXXeVUsvjG+zf1chSW146H83pOGOT15x1 HbKEkcdYAclek31ccYWNK1CW8Kw/k/ZWqdGWuAjjbCpZKmIVw5Q9N46DeXvA3vmQ ykaZzsnRpnQ/vrF5p5qTWrtxRRn0T/2gatqhgdSiXw7hZWR9c5N9U1RunLivw7Ej vVhHlieYMHJj2x8NQX9KF6m/gNsjIdhkvEG+wydzXuvtATmSAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiJ/avTNsg9CAGi+Brky1bcXSf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODZmZWNlNjctMjBiOC0z OTg2LTg4MDMtM2Q3YWM4MTM4MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjucYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiILt9+tmZd6PwUhtFT28P5J0Zpa/9gNnHCV8AKwYidsiBVGjzY1Vcw tUKy/r+ZBk6XJ1ikdod3pKfbsbvPDSQV7Pso04zMGk79z1P7Xw+c3VbIEjf9fDAd HyzAHm6f6LxWL8t1xHXbugMIHpD41zh9fVeSJftJCD9epP44ZKFqd/cXt11dYvfu LLBhSxu+F3W49ajdi2n9lpgXpD/oJWDWlTngo7AGuKxugICCukLmqbkGfnJUos1S G93qYZhj46xdHaLosfsC31Ycxo9GiV34l6iY2XAoA1LzyLBglgyG15CBiHyJvNZ0 JzJY/jE9TeI20RChJN8VEcmXTmBxlDY= -----END CERTIFICATE-----Generated at Sat Oct 11 11:03:51 2025 by rpki-client