$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa File: 23108a10-4450-3a24-b6ea-1b522a5b1f91.roa (raw, json) Hash identifier: iLW/y2jiRDrbbbfmfOLGIZDl0jV/YocE81BgOGO8cbU= Subject key identifier: D7:0E:8C:3D:41:F0:8A:7F:EC:24:A8:E1:9B:CF:07:9B:02:0C:9A:45 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584B891778A45ED2E539682D0F00 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 62651 IP address blocks: 209.107.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:78:a4:5e:d2:e5:39:68:2d:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=80403b02-b631-43d1-ae35-48d9f0a88b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8c:72:9f:32:53:ec:e2:e6:62:1a:d4:a9:e0: 8d:d4:bf:a9:1d:10:0b:c1:50:d0:69:37:80:01:d8: 26:ff:c7:21:53:91:60:c6:a5:60:1c:32:3e:24:a1: 38:aa:9d:c6:e9:bc:25:bc:bc:57:18:41:da:1e:72: 99:47:97:99:d1:43:db:c6:c5:49:da:f9:2a:08:1a: 08:aa:6c:8a:c2:79:af:6d:87:0d:d9:2f:f8:51:9c: 78:ae:ca:8a:2e:0d:46:b4:f4:7d:30:0d:91:9f:de: 26:6a:98:e9:f1:b0:f6:46:5d:5c:a2:9a:39:ce:b6: cc:58:01:fc:cb:f1:3e:1a:59:7d:d2:f0:07:8b:5f: 96:9b:41:a1:64:d7:4a:27:8f:3f:a7:dc:86:8e:3b: df:9c:da:6a:e4:ae:be:85:76:09:8f:23:eb:b8:f0: 88:69:0f:bf:80:5d:63:e1:7e:f7:5a:33:e9:6f:72: d8:0b:98:0c:9b:cb:43:aa:8f:d0:77:70:d2:56:f8: 81:27:bb:ca:df:27:fb:64:c3:9c:ad:b0:94:46:bd: 37:d0:f0:c8:61:9b:0b:58:19:08:df:50:c4:19:27: 75:b4:0f:20:16:6d:5c:13:41:f6:5d:81:16:69:4a: 2b:73:34:81:d9:75:97:a9:a3:ea:7d:a7:49:e8:24: 5f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0E:8C:3D:41:F0:8A:7F:EC:24:A8:E1:9B:CF:07:9B:02:0C:9A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:70:12:2d:4f:f9:13:a0:bd:f2:7c:10:32:4e:93:7b:7c:86: 1f:eb:ce:b7:f8:57:b0:89:c3:4a:f2:60:13:b0:38:27:d6:15: b8:96:8a:7d:95:5c:52:37:2d:a9:c8:02:01:5e:fd:6e:6b:35: 3e:b7:24:58:b8:36:36:c1:3d:1f:5d:20:2f:4b:74:8a:c5:c8: ae:3d:e2:55:4f:bd:af:55:2f:84:ac:44:a4:b2:48:f2:b9:91: 8e:99:cc:6d:03:a4:9e:aa:3a:3a:79:3b:66:ac:ff:c8:fc:66: f5:a5:89:d4:d7:5a:a9:a8:bc:34:c1:4a:00:a1:d2:b7:18:4a: ee:90:b3:97:75:bb:d4:74:a8:0c:98:ed:31:5a:6a:01:44:58: b3:39:c7:91:f0:cf:a7:ba:94:ab:84:c9:9c:25:4c:b8:08:c8: d3:24:61:f9:03:34:2b:77:df:bd:56:2d:e5:04:f4:77:9d:09: 4b:98:f0:0c:be:e3:a2:a0:bf:83:c0:36:94:12:69:35:33:3f: ae:63:7b:f4:da:f7:a0:90:40:8c:df:d4:35:a5:a0:7e:78:77: 8e:d7:f9:c5:b5:aa:e6:73:80:37:d9:86:99:b6:10:02:30:e9: 67:b3:0b:c9:93:82:6d:83:a5:0d:71:bb:e0:74:b6:62:bf:3f: 99:ed:f1:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3ikXtLlOWgtDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ODA0MDNiMDItYjYzMS00M2QxLWFlMzUtNDhkOWYwYTg4YjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4xynzJT7OLmYhrUqeCN1L+pHRALwVDQaTeA Adgm/8chU5FgxqVgHDI+JKE4qp3G6bwlvLxXGEHaHnKZR5eZ0UPbxsVJ2vkqCBoI qmyKwnmvbYcN2S/4UZx4rsqKLg1GtPR9MA2Rn94mapjp8bD2Rl1copo5zrbMWAH8 y/E+Gll90vAHi1+Wm0GhZNdKJ48/p9yGjjvfnNpq5K6+hXYJjyPruPCIaQ+/gF1j 4X73WjPpb3LYC5gMm8tDqo/Qd3DSVviBJ7vK3yf7ZMOcrbCURr030PDIYZsLWBkI 31DEGSd1tA8gFm1cE0H2XYEWaUorczSB2XWXqaPqfadJ6CRfiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcOjD1B8Ip/7CSo4ZvPB5sCDJpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMjMxMDhhMTAtNDQ1MC0z YTI0LWI2ZWEtMWI1MjJhNWIxZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpwEi1P+ROgvfJ8EDJOk3t8hh/rzrf4V7CJw0ryYBOwOCfWFbiWin2V XFI3LanIAgFe/W5rNT63JFi4NjbBPR9dIC9LdIrFyK494lVPva9VL4SsRKSySPK5 kY6ZzG0DpJ6qOjp5O2as/8j8ZvWlidTXWqmovDTBSgCh0rcYSu6Qs5d1u9R0qAyY 7TFaagFEWLM5x5Hwz6e6lKuEyZwlTLgIyNMkYfkDNCt3371WLeUE9HedCUuY8Ay+ 46Kgv4PANpQSaTUzP65je/Ta96CQQIzf1DWloH54d47X+cW1quZzgDfZhpm2EAIw 6WezC8mTgm2DpQ1xu+B0tmK/P5nt8WY= -----END CERTIFICATE-----Generated at Fri Oct 24 10:34:55 2025 by rpki-client