$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa File: 23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa (raw, json) Hash identifier: asGh89PeyXKTp0d6P6Dz9+03qIpjOmkcnxTbGMXQ668= Subject key identifier: B1:D4:EA:68:4B:58:BF:38:86:7B:87:C3:29:62:4E:09:C2:CF:36:EA Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584B62023D90064F3742374EA5C0 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 208259 IP address blocks: 209.240.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:3d:90:06:4f:37:42:37:4e:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d206a1ec-7ccc-4b5e-b2e3-a72f7848a345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:1c:39:0b:46:f7:e6:03:ea:37:f9:30:b6: c9:78:bd:5a:17:8d:37:42:e0:17:59:2d:1a:de:e0: 89:44:40:72:80:96:3a:8a:7f:e7:9f:2a:41:08:31: c7:03:22:df:db:ef:83:ee:9f:0e:c6:a9:5a:68:64: f3:ad:1b:0f:a8:af:65:82:84:c7:b8:5a:25:99:6c: b2:15:ed:ca:4d:40:5a:2a:88:fc:d9:1a:d1:aa:94: 51:53:08:33:45:db:11:c7:7c:a9:56:c3:6a:ca:b5: d8:1d:06:67:cd:19:50:38:17:95:10:37:13:7d:3f: 37:71:dc:53:a9:bb:7a:1f:71:70:01:25:b4:90:5a: d0:f2:fa:75:9b:14:04:59:e1:3c:57:5a:97:1e:f7: cc:b2:ce:bf:67:88:79:0d:bb:c5:5e:ed:cb:d4:4e: 42:f2:d4:20:55:96:87:52:62:bf:c2:0c:72:e1:ff: 2c:df:b6:6e:bf:e0:5d:ba:91:ed:3e:ac:2c:d8:98: 9f:57:1b:c7:ce:fd:92:aa:1c:7c:2e:ce:24:9a:54: cc:e1:7e:21:3a:d7:17:41:d4:db:b2:48:cd:8a:51: d6:48:00:86:e0:25:38:ea:26:ca:a9:85:25:0b:cc: 8a:21:7c:f4:88:88:41:b7:64:0a:ef:d1:49:40:e1: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D4:EA:68:4B:58:BF:38:86:7B:87:C3:29:62:4E:09:C2:CF:36:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:37:0a:b7:c7:7e:cb:86:b9:48:78:e4:dc:dc:41:4c:ee:94: 9f:73:a7:7e:5c:b5:59:8b:8b:c6:0e:11:54:45:e6:4d:ff:50: 95:41:7d:17:6c:d4:67:31:40:48:e3:6f:b0:1f:d6:38:1d:46: 8c:bc:94:63:fa:99:aa:de:3f:15:6b:a3:da:36:e6:63:6e:87: 01:fc:80:07:2a:89:78:c3:23:e1:2c:cb:87:71:eb:b4:85:c2: 1f:7c:ac:8f:74:cf:fc:89:27:e9:4b:91:8e:6d:49:53:1b:c7: 50:a1:2c:40:4b:d0:04:17:41:13:4d:c3:e2:59:cc:ed:d6:85: 09:ca:5e:92:3a:25:d9:f6:5a:60:aa:f0:c0:db:4e:01:9e:6c: 15:8f:18:6d:ce:47:61:59:41:e4:ed:42:a1:1e:9a:b7:fe:94: fa:e6:36:06:e8:19:68:b7:f0:c7:2c:e7:2e:5e:32:04:77:23: 89:13:1a:93:b0:32:96:6b:08:10:da:53:38:cc:08:cf:17:2f: 23:6a:95:dd:50:c8:8e:13:88:fc:c9:52:f9:37:8c:43:3b:e4: d3:13:42:f9:55:57:fd:56:f7:91:82:30:89:bd:19:c9:8b:e9: ed:d3:7f:4a:56:eb:55:1c:37:cd:98:04:93:82:76:af:95:5c: 11:ff:86:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAj2QBk83QjdOpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDIwNmExZWMtN2NjYy00YjVlLWIyZTMtYTcyZjc4NDhhMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomUcOQtG9+YD6jf5MLbJeL1aF403QuAXWS0a 3uCJREBygJY6in/nnypBCDHHAyLf2++D7p8OxqlaaGTzrRsPqK9lgoTHuFolmWyy Fe3KTUBaKoj82RrRqpRRUwgzRdsRx3ypVsNqyrXYHQZnzRlQOBeVEDcTfT83cdxT qbt6H3FwASW0kFrQ8vp1mxQEWeE8V1qXHvfMss6/Z4h5DbvFXu3L1E5C8tQgVZaH UmK/wgxy4f8s37Zuv+BdupHtPqws2JifVxvHzv2Sqhx8Ls4kmlTM4X4hOtcXQdTb skjNilHWSACG4CU46ibKqYUlC8yKIXz0iIhBt2QK79FJQOHIlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHU6mhLWL84hnuHwyliTgnCzzbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMjM2NTUxMDQtMGI5ZS0z MWM2LTlhNWMtOWMxZDIwZmMxNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0fAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw3CrfHfsuGuUh45NzcQUzulJ9zp35ctVmLi8YOEVRF5k3/UJVBfRds 1GcxQEjjb7Af1jgdRoy8lGP6marePxVro9o25mNuhwH8gAcqiXjDI+Esy4dx67SF wh98rI90z/yJJ+lLkY5tSVMbx1ChLEBL0AQXQRNNw+JZzO3WhQnKXpI6Jdn2WmCq 8MDbTgGebBWPGG3OR2FZQeTtQqEemrf+lPrmNgboGWi38Mcs5y5eMgR3I4kTGpOw MpZrCBDaUzjMCM8XLyNqld1QyI4TiPzJUvk3jEM75NMTQvlVV/1W95GCMIm9GcmL 6e3Tf0pW61UcN82YBJOCdq+VXBH/hgo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:20 2025 by rpki-client