$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b364f3ee-b91f-393c-a42d-2eef050ce61e.roa File: b364f3ee-b91f-393c-a42d-2eef050ce61e.roa (raw, json) Hash identifier: X2ffwr3XSb+NmR2KCTk58gzb6JyxusMyJAdRHq686gw= Subject key identifier: 48:D7:71:FE:E6:0A:43:24:A1:8F:F6:0B:CB:C1:90:44:3B:33:D4:B1 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B2CF6E7CB9199C191689B9B00 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b364f3ee-b91f-393c-a42d-2eef050ce61e.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 271 IP address blocks: 207.23.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e7:cb:91:99:c1:91:68:9b:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=867303e9-919d-46e6-8250-aa2ad0619917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:30:f4:53:db:82:f7:05:dc:de:96:8c:fa: f6:1e:9e:78:f0:54:32:ff:03:5b:29:98:f7:b8:b9: 95:8b:55:bc:ed:3a:60:b1:43:82:0f:53:0f:f7:62: 52:d2:07:60:21:30:d7:3d:57:88:f8:ed:f8:87:ab: 1a:d7:b4:a5:fc:4e:20:02:c2:aa:67:ed:94:04:13: b3:13:8c:17:72:34:74:6c:8b:bc:a1:ae:e5:cb:0c: ef:c2:ca:2c:69:3f:37:83:63:fc:3c:e3:60:41:a6: 95:e9:b8:6b:b8:ba:8c:f6:b3:aa:3c:5c:db:39:4a: 93:48:f1:fa:be:65:d9:2c:4a:e1:2c:04:33:ee:be: c2:22:b5:df:f2:6f:a2:e6:a9:b3:0e:bb:fa:22:88: 1f:bc:5f:a7:ef:5b:b3:d2:20:3b:22:e5:6a:41:62: 98:aa:ed:29:d8:d0:bb:10:ab:0b:b0:1c:33:31:7a: 46:88:61:bd:8e:d0:00:df:2f:86:54:9e:3a:5a:00: dd:4f:7e:bd:98:38:c3:12:3e:cd:a1:47:1c:ad:90: 40:ec:b6:19:b9:10:5b:ae:b8:9f:11:b7:49:85:03: 93:fa:1c:a5:92:86:10:69:fa:95:6f:78:a8:9a:6f: 3e:dc:ee:bd:4b:35:91:cb:8f:5e:ca:33:6b:d7:8e: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D7:71:FE:E6:0A:43:24:A1:8F:F6:0B:CB:C1:90:44:3B:33:D4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b364f3ee-b91f-393c-a42d-2eef050ce61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ed:70:df:c6:96:cc:42:c0:a0:d4:e4:08:cb:f1:72:d4:04: da:54:28:62:c3:a2:88:74:aa:46:11:71:10:09:fc:73:33:36: 79:69:c4:c0:5c:b8:20:90:52:be:a0:32:2d:7d:e0:51:8a:5f: 5f:fd:42:ef:c4:35:2d:79:3e:a4:1f:a8:1a:5d:cb:30:be:d4: a6:05:91:6e:9a:2e:65:f0:59:79:ec:f0:ee:5f:f0:f9:48:01: 71:1a:23:eb:3d:e7:75:73:f3:aa:62:e2:13:47:0d:96:74:ed: ae:1b:ea:18:a0:77:1c:30:62:ed:bb:98:39:73:d4:1c:87:b1: e7:cf:b0:c1:37:d8:d6:e6:06:6b:fb:64:61:69:5f:77:21:d6: 50:56:20:88:b2:87:d9:0e:04:e1:1c:61:6c:a7:1b:cd:52:56: 94:b9:58:3d:b6:a3:b0:2e:03:01:1d:f0:ed:30:15:dc:eb:69: 34:88:fe:00:dc:32:1c:05:4e:95:44:a5:fa:5f:f7:4c:2b:55: 7d:42:90:e5:a9:47:42:aa:7e:d6:d2:c1:b0:67:3d:97:96:bf: ab:10:d7:de:7f:f7:72:f7:42:97:95:55:3e:11:ff:09:4f:08: ef:79:2d:b9:ca:ad:4c:ce:43:dc:cc:ae:f2:71:b2:8a:9d:d2: 11:f2:fb:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9ufLkZnBkWibmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ODY3MzAzZTktOTE5ZC00NmU2LTgyNTAtYWEyYWQwNjE5OTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugYw9FPbgvcF3N6WjPr2Hp548FQy/wNbKZj3 uLmVi1W87TpgsUOCD1MP92JS0gdgITDXPVeI+O34h6sa17Sl/E4gAsKqZ+2UBBOz E4wXcjR0bIu8oa7lywzvwsosaT83g2P8PONgQaaV6bhruLqM9rOqPFzbOUqTSPH6 vmXZLErhLAQz7r7CIrXf8m+i5qmzDrv6IogfvF+n71uz0iA7IuVqQWKYqu0p2NC7 EKsLsBwzMXpGiGG9jtAA3y+GVJ46WgDdT369mDjDEj7NoUccrZBA7LYZuRBbrrif EbdJhQOT+hylkoYQafqVb3iomm8+3O69SzWRy49eyjNr147uIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjXcf7mCkMkoY/2C8vBkEQ7M9SxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYjM2NGYzZWUtYjkxZi0z OTNjLWE0MmQtMmVlZjA1MGNlNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxdJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3tcN/GlsxCwKDU5AjL8XLUBNpUKGLDooh0qkYRcRAJ/HMzNnlpxMBc uCCQUr6gMi194FGKX1/9Qu/ENS15PqQfqBpdyzC+1KYFkW6aLmXwWXns8O5f8PlI AXEaI+s953Vz86pi4hNHDZZ07a4b6higdxwwYu27mDlz1ByHsefPsME32NbmBmv7 ZGFpX3ch1lBWIIiyh9kOBOEcYWynG81SVpS5WD22o7AuAwEd8O0wFdzraTSI/gDc MhwFTpVEpfpf90wrVX1CkOWpR0KqftbSwbBnPZeWv6sQ195/93L3QpeVVT4R/wlP CO95LbnKrUzOQ9zMrvJxsoqd0hHy+60= -----END CERTIFICATE-----Generated at Sat Oct 11 02:46:01 2025 by rpki-client