$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ddea0208-9f25-3934-9c14-a7d7eda22304.roa File: ddea0208-9f25-3934-9c14-a7d7eda22304.roa (raw, json) Hash identifier: rclPQdQ50iRzo9fBw9WfSd5GW1r/HDz3cfaJJdfp4Oo= Subject key identifier: 23:A1:23:8F:04:B8:36:93:C1:63:27:84:42:03:6B:7D:83:46:24:A2 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B25FC36C0DFFF7D2973E1CB00 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ddea0208-9f25-3934-9c14-a7d7eda22304.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 271 IP address blocks: 209.87.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:36:c0:df:ff:7d:29:73:e1:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=eaf7708f-a54a-4ef7-a6a9-beb0f6fabdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:cc:15:92:c2:ac:31:61:14:05:84:33:ef: 6a:6d:27:9c:95:7b:bd:9c:ca:26:8a:96:f7:62:8f: 30:a9:9f:6c:f6:a5:2b:df:3e:c9:87:fe:c5:69:a2: 5a:41:29:9c:dd:a6:10:f7:80:4d:1b:61:d7:b9:25: 53:f7:c8:40:b8:05:3a:8d:28:eb:33:8a:d4:0a:99: c1:86:9a:1f:67:79:21:7f:f6:4a:4e:ae:25:1a:ad: b4:dc:9b:c2:3d:30:e9:8b:e2:6f:f6:e9:10:3f:6b: 38:96:7a:ee:5a:b1:1b:2e:71:fb:d0:27:d1:aa:48: fb:b3:55:9c:79:e9:91:52:40:6e:ee:dc:9b:eb:38: df:61:ec:6d:2d:98:92:37:2a:42:d2:29:51:2f:51: f4:9f:7c:93:81:d6:cb:72:04:94:77:63:52:9d:2e: 9d:3b:50:80:25:59:38:dc:5a:91:85:58:e9:47:c9: f4:16:ff:90:c9:5e:13:a2:79:6b:03:9c:e7:99:8b: e0:a8:60:f1:d7:b0:fa:b8:4d:29:22:89:be:38:a7: d2:11:56:a9:ae:67:3e:80:8a:a9:c5:73:27:be:9e: 4d:f2:55:a7:cc:7e:39:da:f8:f7:ed:d0:99:0d:c6: b6:33:e9:2e:ae:0d:ca:3c:6b:ea:18:1f:48:da:91: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A1:23:8F:04:B8:36:93:C1:63:27:84:42:03:6B:7D:83:46:24:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ddea0208-9f25-3934-9c14-a7d7eda22304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:41:42:d8:e4:9e:e2:8c:f3:87:78:63:e5:76:3c:bd:1d:4b: 45:da:08:6d:82:eb:bb:43:cd:10:bb:b4:36:ac:b4:9f:50:8d: be:b7:39:1e:03:41:f4:f2:84:0d:78:40:1f:d1:45:0c:fa:ba: 4b:61:2c:d1:ad:64:77:4a:06:1e:c3:ad:77:e4:c5:28:5e:8d: 08:51:c7:a5:90:32:99:47:0a:75:b7:a0:de:f1:bb:ab:bd:47: 6b:ce:8a:b6:b5:ee:49:88:df:69:66:ac:db:63:63:e8:7d:47: d5:9e:56:35:09:dc:4b:4e:31:f4:88:4b:47:e5:8f:80:90:7f: 7c:36:40:d6:3b:f4:57:be:8c:c0:61:7f:1b:f9:f7:d0:ed:6d: d9:24:49:e2:a8:72:80:a5:45:67:dd:9a:1d:d3:c4:e0:49:ff: c3:77:a5:37:72:6a:42:76:d8:a8:7e:92:1d:80:d2:a1:c2:e6: 64:f5:7c:33:18:96:85:7f:73:f5:ff:bb:82:a6:f9:ab:f5:b4: a9:77:d5:a9:87:9c:55:19:95:99:a6:4c:d3:f5:45:1c:90:dc: bb:1b:1f:ec:3b:6f:3b:3b:3e:85:ab:65:bc:0e:0d:41:e3:92: 9d:50:b3:f6:43:dc:ac:fc:1b:2e:0d:0c:6d:2b:d6:25:8d:8c: 61:75:ae:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DbA3/99KXPhywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZWFmNzcwOGYtYTU0YS00ZWY3LWE2YTktYmViMGY2ZmFiZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtajMFZLCrDFhFAWEM+9qbSeclXu9nMomipb3 Yo8wqZ9s9qUr3z7Jh/7FaaJaQSmc3aYQ94BNG2HXuSVT98hAuAU6jSjrM4rUCpnB hpofZ3khf/ZKTq4lGq203JvCPTDpi+Jv9ukQP2s4lnruWrEbLnH70CfRqkj7s1Wc eemRUkBu7tyb6zjfYextLZiSNypC0ilRL1H0n3yTgdbLcgSUd2NSnS6dO1CAJVk4 3FqRhVjpR8n0Fv+QyV4TonlrA5znmYvgqGDx17D6uE0pIom+OKfSEVaprmc+gIqp xXMnvp5N8lWnzH452vj37dCZDca2M+kurg3KPGvqGB9I2pHr9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOhI48EuDaTwWMnhEIDa32DRiSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZGRlYTAyMDgtOWYyNS0z OTM0LTljMTQtYTdkN2VkYTIyMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Vc9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtBQtjknuKM84d4Y+V2PL0dS0XaCG2C67tDzRC7tDastJ9Qjb63OR4D QfTyhA14QB/RRQz6ukthLNGtZHdKBh7DrXfkxShejQhRx6WQMplHCnW3oN7xu6u9 R2vOira17kmI32lmrNtjY+h9R9WeVjUJ3EtOMfSIS0flj4CQf3w2QNY79Fe+jMBh fxv599DtbdkkSeKocoClRWfdmh3TxOBJ/8N3pTdyakJ22Kh+kh2A0qHC5mT1fDMY loV/c/X/u4Km+av1tKl31amHnFUZlZmmTNP1RRyQ3LsbH+w7bzs7PoWrZbwODUHj kp1Qs/ZD3Kz8Gy4NDG0r1iWNjGF1rug= -----END CERTIFICATE-----Generated at Sat Oct 11 02:42:45 2025 by rpki-client