$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa File: 226257d4-f43f-3f67-b662-d0922b1e31e3.roa (raw, json) Hash identifier: bQI5pxLXbYKm7+j0kzJ8yyyHOyLfiTQEiG140NDOzeQ= Subject key identifier: 9A:2B:0F:A6:3E:F2:15:B5:5E:D5:E4:BA:74:73:5A:D0:F4:C8:B2:DA Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584A41105ADB465EA0ED2819A6C0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 397543 IP address blocks: 207.23.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:5a:db:46:5e:a0:ed:28:19:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=caac0203-a6e9-4b0f-afa6-a845d10ca13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:3d:dd:ea:de:7e:5f:79:a9:c9:99:b4:ed: 1e:d8:6b:ba:cd:96:1a:84:e5:aa:ac:56:45:93:44: 2f:d3:f0:09:60:e2:83:88:23:0d:c1:65:37:e7:73: 6c:5e:cd:47:8a:27:77:92:ce:77:b8:ce:22:7a:7b: 32:13:70:d3:97:8a:6c:24:6f:d9:3f:34:d9:80:d8: 5e:d9:12:85:56:65:5f:d4:bc:38:21:94:4a:1b:d5: b1:1d:b7:88:4c:cb:31:cf:6d:57:9f:b0:d5:05:34: 46:53:32:f9:45:c6:8e:74:78:d3:0a:a1:33:57:df: 71:aa:ed:c8:59:13:c8:63:8e:d8:d4:8c:ab:8f:11: fa:5b:81:f7:92:99:a3:0e:99:86:a8:6f:43:3f:8d: 7a:15:c0:3e:25:ee:89:6c:7b:d2:a9:e2:60:8e:e9: ec:f0:8a:88:5d:e8:88:a7:09:b5:4b:e7:32:23:9d: 10:1b:3e:4e:f3:77:9c:41:79:61:4f:dc:5c:7c:75: b1:71:4b:f6:f7:3a:03:6b:f0:8a:a9:99:aa:7a:e2: bb:11:bd:cb:5a:48:81:fa:22:21:9c:37:25:32:f9: 12:4b:93:a8:ca:9d:61:33:dd:e4:b9:78:2a:99:35: ba:62:dc:ac:26:19:11:a2:35:f6:80:73:57:8a:09: 62:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2B:0F:A6:3E:F2:15:B5:5E:D5:E4:BA:74:73:5A:D0:F4:C8:B2:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ae:71:52:e2:87:36:f2:9b:1f:15:79:0a:bd:34:e1:f1:cf: 78:48:2b:e1:a9:0c:82:67:a3:22:b1:07:02:19:fc:41:5c:91: 73:de:f6:9c:fa:ae:3d:9e:0e:66:b3:e7:8c:e7:8c:91:6d:eb: 45:0e:13:e0:a0:da:fb:b3:22:ee:a0:7a:52:2d:a1:f2:0a:ef: db:fe:0e:07:84:6c:c3:ed:9d:1b:e2:fc:e7:99:4e:26:f0:83: ce:ec:4f:05:68:ca:d0:02:6c:cc:96:cf:53:bb:b4:e3:23:9b: 7b:21:d0:b2:b7:5c:3f:eb:d7:ad:ba:bf:de:8f:33:42:11:e6: 4b:e2:7a:72:1a:9f:f2:92:5d:93:3e:75:f2:b4:27:ea:46:23: 25:7d:7b:39:4a:0c:a1:76:9e:6b:b5:0e:c5:ad:0e:06:57:8e: 75:16:cf:16:28:02:70:6a:d7:85:27:ac:62:4f:62:68:19:b0: a4:28:54:53:86:44:33:08:34:c8:7c:a3:5e:f5:b1:d7:3a:a4: 1e:dc:77:d7:b0:95:dd:52:ad:94:52:ce:e5:2f:e2:aa:f0:ab: 51:22:0b:e4:02:7d:4b:58:08:77:29:1d:76:0b:d8:55:60:7c: 11:44:c9:cd:75:91:44:73:84:81:34:dc:3e:65:58:f8:4d:c3: 79:26:58:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFrbRl6g7SgZpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk Y2FhYzAyMDMtYTZlOS00YjBmLWFmYTYtYTg0NWQxMGNhMTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNc93erefl95qcmZtO0e2Gu6zZYahOWqrFZF k0Qv0/AJYOKDiCMNwWU353NsXs1Hiid3ks53uM4iensyE3DTl4psJG/ZPzTZgNhe 2RKFVmVf1Lw4IZRKG9WxHbeITMsxz21Xn7DVBTRGUzL5RcaOdHjTCqEzV99xqu3I WRPIY47Y1IyrjxH6W4H3kpmjDpmGqG9DP416FcA+Je6JbHvSqeJgjuns8IqIXeiI pwm1S+cyI50QGz5O83ecQXlhT9xcfHWxcUv29zoDa/CKqZmqeuK7Eb3LWkiB+iIh nDclMvkSS5Ooyp1hM93kuXgqmTW6YtysJhkRojX2gHNXigliqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJorD6Y+8hW1XtXkunRzWtD0yLLaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMjI2MjU3ZDQtZjQzZi0z ZjY3LWI2NjItZDA5MjJiMWUzMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzxdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuucVLihzbymx8VeQq9NOHxz3hIK+GpDIJnoyKxBwIZ/EFckXPe9pz6 rj2eDmaz54znjJFt60UOE+Cg2vuzIu6gelItofIK79v+DgeEbMPtnRvi/OeZTibw g87sTwVoytACbMyWz1O7tOMjm3sh0LK3XD/r1626v96PM0IR5kvienIan/KSXZM+ dfK0J+pGIyV9ezlKDKF2nmu1DsWtDgZXjnUWzxYoAnBq14UnrGJPYmgZsKQoVFOG RDMINMh8o171sdc6pB7cd9ewld1SrZRSzuUv4qrwq1EiC+QCfUtYCHcpHXYL2FVg fBFEyc11kURzhIE03D5lWPhNw3kmWMc= -----END CERTIFICATE-----Generated at Sun Jun 29 21:40:27 2025 by rpki-client