$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b3854c9-f861-39b3-bf11-e498d2f04cfc.roa File: 7b3854c9-f861-39b3-bf11-e498d2f04cfc.roa (raw, json) Hash identifier: NUezI2rgX8kbmb6rlz1sygpDjqV4Nz+aJ0saRz4wWHc= Subject key identifier: A4:FC:20:A5:AE:C4:EC:64:41:0C:BE:B0:FC:39:15:50:27:34:E3:0A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B1F016A08E439F1CB2C6D7CC0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b3854c9-f861-39b3-bf11-e498d2f04cfc.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 26421 IP address blocks: 209.150.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:6a:08:e4:39:f1:cb:2c:6d:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=11aa50d5-9931-467e-ade1-fdf559bea562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:be:26:9d:01:32:7f:18:a9:24:83:77:5f: df:35:55:9e:26:93:f8:c0:6b:ea:1d:90:7d:7a:2b: 1c:0e:2c:c2:e2:16:91:61:81:f2:6d:42:ea:8d:0c: dd:3a:0b:56:0e:3e:3a:d4:6b:9f:d9:97:c1:e1:68: 35:82:17:09:70:6e:4e:89:b8:c0:22:b7:b6:f3:9b: ea:32:01:da:e3:72:24:68:b1:db:39:cc:51:20:ad: 5c:3c:15:4d:ff:da:13:c2:0a:5b:2b:d8:16:7c:d2: fc:12:d7:7b:7d:93:46:91:e8:39:2d:31:11:38:6a: fa:ca:86:d0:cf:b3:09:c7:99:34:65:a7:fc:eb:73: a4:dc:c5:3a:e5:30:e1:43:cf:2a:83:5a:2d:49:50: dc:5d:22:27:a9:11:e4:69:65:f4:67:1c:10:31:36: 4f:94:18:7b:b2:0c:ae:25:b8:0f:b7:23:2b:2e:7e: 88:4f:7b:86:9f:f6:08:6b:db:d1:71:47:a4:66:e7: b8:1a:66:f0:56:da:0b:a8:74:6b:7c:a5:71:57:45: f5:c4:96:c2:8a:7d:be:5e:ba:b0:55:c5:b9:ea:e1: 76:68:6e:f6:1f:03:eb:e8:74:1c:d6:51:0e:a8:75: 1b:90:9c:57:c5:4b:c2:4d:23:25:8f:96:30:3a:6e: 1b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FC:20:A5:AE:C4:EC:64:41:0C:BE:B0:FC:39:15:50:27:34:E3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b3854c9-f861-39b3-bf11-e498d2f04cfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.150.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:35:25:18:49:43:24:cc:7e:54:08:24:a4:f8:a4:2d:3a:b8: 3c:90:e3:e4:19:62:d6:a9:2d:a2:3f:f6:a5:22:b9:4d:2a:49: de:cc:7f:1d:86:f3:63:67:f9:66:c9:ec:1f:bc:37:d0:0b:dc: 54:b4:a3:03:0f:dc:28:77:64:92:25:cb:15:89:b3:77:40:b9: e4:4e:0e:b6:92:c9:47:a0:7e:0e:12:f2:34:66:41:e6:aa:95: cc:e8:54:29:64:5d:cc:52:e9:70:5f:27:b5:c1:2a:2d:76:0f: 37:c5:bd:25:15:52:1b:7d:3d:15:6c:de:1e:65:50:88:41:b5: 62:02:dc:53:9e:b6:79:d1:86:e9:85:f5:d3:59:2b:0b:96:82: df:6e:97:a1:46:75:f8:45:99:d8:23:bc:a2:8f:bf:b5:e6:32: 08:e0:54:06:f8:2e:5e:59:1d:a5:0c:36:38:1a:0d:ef:0c:ff: 47:66:f6:06:eb:9a:28:34:a7:f3:ac:0a:9d:bc:42:47:b6:c1: aa:aa:53:7f:dd:1f:34:a6:c8:29:0f:b1:13:b3:eb:86:31:ff: 3b:54:56:42:f4:7f:d9:49:7c:71:75:d2:16:1f:78:da:e4:a9: b9:6f:93:27:ac:8a:eb:eb:25:71:5f:76:57:c3:81:bb:33:e1: 73:c4:ff:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAWoI5DnxyyxtfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MTFhYTUwZDUtOTkzMS00NjdlLWFkZTEtZmRmNTU5YmVhNTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5O+Jp0BMn8YqSSDd1/fNVWeJpP4wGvqHZB9 eiscDizC4haRYYHybULqjQzdOgtWDj461Guf2ZfB4Wg1ghcJcG5OibjAIre285vq MgHa43IkaLHbOcxRIK1cPBVN/9oTwgpbK9gWfNL8Etd7fZNGkeg5LTEROGr6yobQ z7MJx5k0Zaf863Ok3MU65TDhQ88qg1otSVDcXSInqRHkaWX0ZxwQMTZPlBh7sgyu JbgPtyMrLn6IT3uGn/YIa9vRcUekZue4GmbwVtoLqHRrfKVxV0X1xJbCin2+Xrqw VcW56uF2aG72HwPr6HQc1lEOqHUbkJxXxUvCTSMlj5YwOm4bTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT8IKWuxOxkQQy+sPw5FVAnNOMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvN2IzODU0YzktZjg2MS0z OWIzLWJmMTEtZTQ5OGQyZjA0Y2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZZNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKM1JRhJQyTMflQIJKT4pC06uDyQ4+QZYtapLaI/9qUiuU0qSd7Mfx2G 82Nn+WbJ7B+8N9AL3FS0owMP3Ch3ZJIlyxWJs3dAueRODraSyUegfg4S8jRmQeaq lczoVClkXcxS6XBfJ7XBKi12DzfFvSUVUht9PRVs3h5lUIhBtWIC3FOetnnRhumF 9dNZKwuWgt9ul6FGdfhFmdgjvKKPv7XmMgjgVAb4Ll5ZHaUMNjgaDe8M/0dm9gbr mig0p/OsCp28Qke2waqqU3/dHzSmyCkPsROz64Yx/ztUVkL0f9lJfHF10hYfeNrk qblvkyesiuvrJXFfdlfDgbsz4XPE//Q= -----END CERTIFICATE-----Generated at Mon Oct 20 14:59:51 2025 by rpki-client