$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa File: a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa (raw, json) Hash identifier: V5IrXauvISxs65TamrHrUeMFStaYmVjTXEjSye3F8YQ= Subject key identifier: 9C:AA:85:F3:47:7B:1A:1B:B1:BF:18:CF:4E:53:33:B4:85:91:4F:5D Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584EF2E76850839A9F978BCDB680 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 271 IP address blocks: 207.23.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:68:50:83:9a:9f:97:8b:cd:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=6e67e75f-596f-42b6-87ad-6b4f13f3bcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:d6:4e:bc:91:06:72:cd:4b:59:cc:17:64: 2a:1b:0d:3d:e7:a4:98:b7:d0:89:90:0b:16:9b:43: 8a:13:32:12:6c:56:e3:3b:21:94:45:26:ef:a1:d9: 12:2c:b0:2d:b3:af:ac:53:9c:5b:1d:5e:a6:a8:22: cb:a7:1f:a7:f9:b5:f6:82:3e:f2:41:0d:7c:69:dc: 86:b5:db:c8:ce:3d:5f:79:c7:0b:ce:ba:53:b0:f9: af:9d:92:e3:96:81:aa:09:b2:bc:97:ea:8d:71:c4: ab:d8:20:87:34:8d:9a:0a:67:67:4d:62:6b:fa:28: 3c:4d:8e:51:29:d0:42:cc:32:ea:62:f3:43:97:0b: ed:16:72:90:66:a3:b0:8f:21:66:da:3f:00:ee:84: 32:4f:82:ef:89:18:30:e6:32:a8:c6:f1:9b:84:9c: dd:26:70:a5:8b:48:35:47:fa:a2:33:73:ff:61:05: f9:de:33:b1:2b:bd:a4:28:ba:4f:66:b9:ec:cd:e4: d5:7d:4c:5d:40:bf:0e:30:d5:36:b5:ff:74:96:84: 6e:e9:6a:5b:eb:ea:dd:8b:68:b1:83:1e:9e:22:3b: e8:27:4d:ad:93:44:4f:d8:0a:24:f4:a0:21:96:75: e2:b4:ab:9b:e7:93:c2:e6:15:dd:0f:86:e7:b0:28: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AA:85:F3:47:7B:1A:1B:B1:BF:18:CF:4E:53:33:B4:85:91:4F:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c4:25:d1:e9:cc:f4:34:d3:4c:50:db:08:66:53:96:3b:d5: da:00:0c:47:04:21:67:81:64:59:04:29:f9:9a:76:61:b6:ef: b5:06:cb:7d:f7:67:07:9a:2f:2d:db:6b:61:b9:93:75:32:fa: 2c:46:e9:44:ea:37:a6:48:d9:62:17:5c:32:74:bd:c2:5e:2c: 20:9f:59:78:82:ea:a5:13:4c:9a:0b:b7:80:47:91:6e:9d:dc: f7:30:74:7f:af:09:ad:fa:1d:19:4b:43:25:42:92:3d:be:c0: c7:91:7b:9a:03:af:be:53:81:05:0f:c5:c2:ea:49:ef:71:c9: fb:eb:b9:28:99:1a:15:89:21:97:7b:93:37:5e:7a:1b:cc:61: 29:16:c5:75:fd:75:e1:cf:81:37:78:03:e4:10:b5:8b:b1:4e: ac:07:bd:31:f5:cb:c3:d1:fd:56:08:ca:c4:13:2a:ec:33:f5: b7:ad:3d:9f:30:3f:b7:06:64:5e:1c:03:d0:5d:be:21:ca:cc: 29:34:66:b0:54:83:9c:5d:2d:04:5e:4f:24:50:97:e3:94:21: 6a:4b:ce:56:74:55:ee:88:bf:ca:5e:05:cf:2c:d5:c2:23:6d: 11:ab:b8:b6:d1:ef:32:d4:66:54:63:93:53:fc:dc:7a:6a:5a: 04:94:f8:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52hQg5qfl4vNtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NmU2N2U3NWYtNTk2Zi00MmI2LTg3YWQtNmI0ZjEzZjNiY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjvWTryRBnLNS1nMF2QqGw0956SYt9CJkAsW m0OKEzISbFbjOyGURSbvodkSLLAts6+sU5xbHV6mqCLLpx+n+bX2gj7yQQ18adyG tdvIzj1feccLzrpTsPmvnZLjloGqCbK8l+qNccSr2CCHNI2aCmdnTWJr+ig8TY5R KdBCzDLqYvNDlwvtFnKQZqOwjyFm2j8A7oQyT4LviRgw5jKoxvGbhJzdJnCli0g1 R/qiM3P/YQX53jOxK72kKLpPZrnszeTVfUxdQL8OMNU2tf90loRu6Wpb6+rdi2ix gx6eIjvoJ02tk0RP2Aok9KAhlnXitKub55PC5hXdD4bnsCglfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyqhfNHexobsb8Yz05TM7SFkU9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYTY1NmFmNDUtNmY2YS0z NThjLTk3ZDUtZWU5YzBlN2E5YTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnEJdHpzPQ000xQ2whmU5Y71doADEcEIWeBZFkEKfmadmG277UGy333 ZweaLy3ba2G5k3Uy+ixG6UTqN6ZI2WIXXDJ0vcJeLCCfWXiC6qUTTJoLt4BHkW6d 3PcwdH+vCa36HRlLQyVCkj2+wMeRe5oDr75TgQUPxcLqSe9xyfvruSiZGhWJIZd7 kzdeehvMYSkWxXX9deHPgTd4A+QQtYuxTqwHvTH1y8PR/VYIysQTKuwz9betPZ8w P7cGZF4cA9BdviHKzCk0ZrBUg5xdLQReTyRQl+OUIWpLzlZ0Ve6Iv8peBc8s1cIj bRGruLbR7zLUZlRjk1P83HpqWgSU+Oo= -----END CERTIFICATE-----Generated at Thu Oct 1 20:33:29 2026 by rpki-client