$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa File: bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa (raw, json) Hash identifier: ZqdEUz5wsWp1snCR6rtBnIQZDgQqu0+Pg+dpygMuDLQ= Subject key identifier: 4F:B3:04:C1:57:2F:BC:FC:7A:56:B7:AC:48:BB:75:04:AF:DF:05:55 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B0CDC2C55CD7892A586657600 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 271 IP address blocks: 209.87.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:2c:55:cd:78:92:a5:86:65:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=245845ff-bda4-4aa5-be02-cd48195cd98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:58:2d:d7:94:01:84:53:bf:f2:ef:ca:f0: 92:e1:aa:8c:f8:bf:90:76:fd:66:ab:76:40:c3:99: 38:7e:c7:8d:06:a8:a2:c1:7c:74:a3:5f:98:fd:68: c4:43:de:6b:e0:4b:eb:69:ac:88:44:f9:c9:5b:fe: 71:0a:af:e6:fb:65:74:e5:bc:2a:41:ef:ad:7a:5b: 43:da:d8:51:e8:f2:16:a7:c1:ec:7a:60:10:f1:e3: b5:34:37:65:5b:af:52:e9:75:fd:b0:0d:74:62:ff: c2:30:9f:0f:e8:e9:4d:d0:d8:5d:2f:5c:01:1d:ec: 9b:af:49:7c:f3:5d:de:88:bf:00:91:90:52:46:e8: 9f:2a:43:29:eb:e9:4b:50:2f:6d:93:d7:7e:0b:2a: 26:41:ae:d0:af:e4:07:78:aa:72:ff:0a:f6:48:95: 98:fe:0e:99:52:3f:66:a0:27:73:2a:75:53:1e:0f: 97:d3:f4:1c:cd:e5:f9:18:46:bf:47:ec:47:49:db: 06:25:3d:8a:9b:3c:9c:56:2e:de:04:cf:0e:bb:a3: 2c:1e:75:68:a5:80:56:59:23:e1:fe:36:d7:24:cb: ae:10:ab:22:81:fb:3c:85:d4:ce:db:37:cf:50:07: 89:46:78:07:1a:08:af:fc:93:25:d8:71:98:cd:f2: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B3:04:C1:57:2F:BC:FC:7A:56:B7:AC:48:BB:75:04:AF:DF:05:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e4:0c:4b:e5:e4:32:12:7f:ab:3c:33:71:a5:be:45:35:78: ea:b9:2e:74:bc:f9:d0:a3:99:d4:81:45:26:85:b2:f5:bf:06: 34:a7:b4:b3:e3:fe:42:53:c3:78:69:e2:a6:5c:79:19:69:e6: 3a:84:d8:fa:88:6e:64:73:5c:ca:27:e4:b9:6f:24:fb:15:2d: 12:81:1c:61:96:f6:65:5c:26:0d:e7:71:fb:c5:f1:6e:59:af: fc:29:d8:ff:07:52:ac:fb:41:9b:d4:0c:d1:9d:d2:e2:8e:37: bd:37:2b:96:0d:86:85:bd:db:d7:3f:51:4b:8c:6d:86:3f:99: 46:37:1e:56:9d:de:7f:a0:e4:5e:9e:2e:2c:b9:ee:35:00:91: 52:f7:71:b3:92:57:ae:13:0b:78:c7:d8:90:5f:dc:87:17:32: f3:ee:d1:08:d7:bf:3b:8d:a8:b8:82:b4:73:8f:d7:3a:fa:cd: fa:22:ca:9c:9e:5d:d0:27:c9:d0:b2:0d:fb:9e:55:1c:6e:c8: ef:3a:fd:30:f1:9d:3e:7f:39:92:5a:66:d0:04:6c:68:b6:97: dc:fa:07:7d:6a:86:09:47:9f:a4:c7:8e:1f:91:e9:81:6f:5b: 20:66:f0:77:9b:d4:a5:72:28:36:73:2f:61:2b:0e:ba:c3:46: 1e:f5:69:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CxVzXiSpYZldgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MjQ1ODQ1ZmYtYmRhNC00YWE1LWJlMDItY2Q0ODE5NWNkOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhtYLdeUAYRTv/LvyvCS4aqM+L+Qdv1mq3ZA w5k4fseNBqiiwXx0o1+Y/WjEQ95r4EvraayIRPnJW/5xCq/m+2V05bwqQe+teltD 2thR6PIWp8HsemAQ8eO1NDdlW69S6XX9sA10Yv/CMJ8P6OlN0NhdL1wBHeybr0l8 813eiL8AkZBSRuifKkMp6+lLUC9tk9d+CyomQa7Qr+QHeKpy/wr2SJWY/g6ZUj9m oCdzKnVTHg+X0/QczeX5GEa/R+xHSdsGJT2KmzycVi7eBM8Ou6MsHnVopYBWWSPh /jbXJMuuEKsigfs8hdTO2zfPUAeJRngHGgiv/JMl2HGYzfIS6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+zBMFXL7z8ela3rEi7dQSv3wVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYmQzMWMyMGQtZTZkMS0z NWVhLWFlY2QtM2Y4ZmYwYjAxNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnkDEvl5DISf6s8M3GlvkU1eOq5LnS8+dCjmdSBRSaFsvW/BjSntLPj /kJTw3hp4qZceRlp5jqE2PqIbmRzXMon5LlvJPsVLRKBHGGW9mVcJg3ncfvF8W5Z r/wp2P8HUqz7QZvUDNGd0uKON703K5YNhoW929c/UUuMbYY/mUY3Hlad3n+g5F6e Liy57jUAkVL3cbOSV64TC3jH2JBf3IcXMvPu0QjXvzuNqLiCtHOP1zr6zfoiypye XdAnydCyDfueVRxuyO86/TDxnT5/OZJaZtAEbGi2l9z6B31qhglHn6THjh+R6YFv WyBm8Heb1KVyKDZzL2ErDrrDRh71afA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:58 2025 by rpki-client