$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e03be62d-daaa-3bec-a5e2-f28d6508be59.roa File: e03be62d-daaa-3bec-a5e2-f28d6508be59.roa (raw, json) Hash identifier: JcmInMsk52FpUYt30cAbvTvxLvRXoVNfTZzXyIjYTvs= Subject key identifier: 3C:11:6D:11:E0:50:E3:9D:09:B2:A1:10:22:F7:9D:E0:E4:61:DB:9E Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584EF2E76868EBD4D21C33689800 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e03be62d-daaa-3bec-a5e2-f28d6508be59.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 271 IP address blocks: 207.23.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:68:68:eb:d4:d2:1c:33:68:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=ba171a99-94e9-49e7-930f-158ccbfb0fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:87:ca:c5:c7:3b:3f:b9:8d:17:8e:4c:52:81: 23:ce:7f:1b:a2:a4:76:14:fa:62:b3:fb:62:96:43: 34:ba:26:44:a8:d2:99:14:77:f9:22:9f:de:5f:b0: 82:7a:04:89:82:ad:59:9a:d9:e6:7b:d4:46:92:cf: cc:5d:c2:02:44:d0:6e:ff:3b:1a:62:44:20:a7:0c: f6:fc:05:49:3d:b2:10:1f:67:d5:ad:70:7c:df:63: 8f:8e:ee:46:4c:dc:9f:62:e6:06:80:50:33:ba:2f: 3d:ab:28:f0:5e:98:3d:f6:de:33:f0:9e:d7:7e:8e: a3:43:8b:98:6c:80:f1:30:b9:75:35:07:22:5d:75: a8:d9:5b:fc:c2:0f:3a:78:bb:76:8e:ab:b8:a1:0f: 13:15:69:a1:f3:0b:36:ac:e6:f9:57:99:3d:b5:a3: 5b:9f:32:f3:4d:da:3c:21:69:6f:06:6c:cb:e8:be: bb:12:f8:a2:5b:2c:10:d4:ef:d0:08:e7:cb:dc:8f: 4d:e3:10:ca:3c:b1:ae:8e:3f:d4:24:11:79:a9:fc: 7b:8b:5f:03:7e:17:b7:ea:0b:f5:a8:78:6b:2c:b7: 10:b2:46:20:d8:84:54:75:a9:6e:80:14:a2:c4:b0: 64:d0:65:a0:45:66:70:a3:99:8b:24:19:88:6b:29: cf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:11:6D:11:E0:50:E3:9D:09:B2:A1:10:22:F7:9D:E0:E4:61:DB:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e03be62d-daaa-3bec-a5e2-f28d6508be59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:be:66:86:41:a8:db:4e:73:c8:a8:79:0e:dd:97:49:a7:a5: 62:d4:5c:e6:1d:f0:1e:0c:72:c1:ea:c6:38:71:17:6c:1b:3c: 0a:54:8b:e4:2d:c6:96:c3:76:8b:94:43:47:56:50:d8:b9:a0: 76:41:a3:5b:3f:96:ac:04:37:25:35:c0:f3:4b:60:10:e2:1d: 52:52:65:11:ff:fe:a2:e8:71:42:cb:f7:14:8d:aa:a1:e7:77: 5d:87:06:d6:f4:eb:bb:11:94:08:08:c4:ae:ad:97:cd:ca:f0: 66:9f:6d:b6:5d:e7:1d:59:13:22:d3:dc:ae:e0:9c:5d:c9:f0: af:4b:16:36:25:46:a6:96:b4:79:68:81:e0:5a:51:f7:89:65: 4f:67:4d:f9:6d:04:8e:5d:78:f4:2b:f7:f9:8a:57:cb:74:3f: 39:d5:9f:11:26:80:e7:35:fb:ee:6d:73:52:f4:fd:7d:1b:17: ab:aa:18:0e:41:84:dc:e9:d6:49:09:af:0c:be:9c:30:99:66: 80:c1:e9:ca:09:36:87:2c:5c:41:09:d4:c5:66:57:16:01:d3: c8:df:e7:33:cf:d5:40:97:f6:0c:5e:4f:51:87:20:71:ea:d0: 16:fd:21:c5:55:ed:fe:de:9f:0c:8e:11:40:df:bd:f2:6a:f5: d4:98:c5:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52ho69TSHDNomAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YmExNzFhOTktOTRlOS00OWU3LTkzMGYtMTU4Y2NiZmIwZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYfKxcc7P7mNF45MUoEjzn8boqR2FPpis/ti lkM0uiZEqNKZFHf5Ip/eX7CCegSJgq1Zmtnme9RGks/MXcICRNBu/zsaYkQgpwz2 /AVJPbIQH2fVrXB832OPju5GTNyfYuYGgFAzui89qyjwXpg99t4z8J7Xfo6jQ4uY bIDxMLl1NQciXXWo2Vv8wg86eLt2jqu4oQ8TFWmh8ws2rOb5V5k9taNbnzLzTdo8 IWlvBmzL6L67EviiWywQ1O/QCOfL3I9N4xDKPLGujj/UJBF5qfx7i18Dfhe36gv1 qHhrLLcQskYg2IRUdalugBSixLBk0GWgRWZwo5mLJBmIaynPHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwRbRHgUOOdCbKhECL3neDkYdueMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZTAzYmU2MmQtZGFhYS0z YmVjLWE1ZTItZjI4ZDY1MDhiZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi+ZoZBqNtOc8ioeQ7dl0mnpWLUXOYd8B4McsHqxjhxF2wbPApUi+Qt xpbDdouUQ0dWUNi5oHZBo1s/lqwENyU1wPNLYBDiHVJSZRH//qLocULL9xSNqqHn d12HBtb067sRlAgIxK6tl83K8GafbbZd5x1ZEyLT3K7gnF3J8K9LFjYlRqaWtHlo geBaUfeJZU9nTfltBI5dePQr9/mKV8t0PznVnxEmgOc1++5tc1L0/X0bF6uqGA5B hNzp1kkJrwy+nDCZZoDB6coJNocsXEEJ1MVmVxYB08jf5zPP1UCX9gxeT1GHIHHq 0Bb9IcVV7f7enwyOEUDfvfJq9dSYxes= -----END CERTIFICATE-----Generated at Sun Oct 4 19:08:35 2026 by rpki-client