$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa File: 2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa (raw, json) Hash identifier: oH+QqWlCiZEUfq1rT5jMwOwfBl72dFghVKbFtM5eoPU= Subject key identifier: 24:D4:86:28:21:9B:7E:13:60:23:B8:72:6C:E8:20:56:D3:AF:FD:F6 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584ACE0BA0318E143CC35A25F980 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 271 IP address blocks: 207.23.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a0:31:8e:14:3c:c3:5a:25:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=4b488be3-80da-473f-87b0-e5a1de8f8701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0d:ee:ee:2d:8b:1b:18:df:fd:45:17:c8:fe: 17:0b:8f:48:e6:06:7b:f9:d9:70:ab:15:ea:31:e8: 2a:42:7a:ee:e6:89:3b:19:da:9f:cc:df:5d:c1:5c: 04:2a:fb:63:30:3f:59:82:ae:29:e2:13:74:d2:e6: 20:ea:9e:c8:5c:20:c7:9b:81:9c:92:db:cc:6b:2e: 9f:fb:39:f1:1a:ae:dc:7d:53:29:37:18:09:c8:d0: cb:40:89:8e:ba:07:72:4f:aa:68:44:f8:60:e7:4b: fe:7e:b9:2b:7b:86:a5:f9:e2:c4:ee:ca:bb:f2:63: 7b:7d:fb:59:b5:cc:0e:9c:8c:71:5e:55:2a:a5:d5: 5c:73:a6:d2:57:3a:f1:56:87:a5:84:1c:47:fc:5c: c0:1b:8e:68:0f:e5:bf:da:20:7f:4d:63:23:a1:56: c7:06:ef:2e:1c:77:68:b1:d2:a1:a2:f4:87:f7:af: f2:4a:b5:11:bd:41:e5:46:86:af:4b:b4:49:c4:f7: a2:fe:23:af:b1:56:a8:67:67:ae:bb:c8:a0:af:dd: 0d:64:2e:89:cf:e9:7c:9f:04:65:94:f0:37:ed:10: 46:bb:ad:c1:1e:ed:7d:bb:ff:30:f1:08:d7:ce:14: 13:74:9b:af:75:04:97:32:1f:e0:e7:50:37:84:ac: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D4:86:28:21:9B:7E:13:60:23:B8:72:6C:E8:20:56:D3:AF:FD:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:55:2c:52:67:e3:43:e6:d9:06:12:a2:b6:14:a3:3e:b1:4c: 25:33:a4:e8:cd:19:b3:f5:4c:a1:df:49:a5:8b:3a:39:35:34: bd:26:d2:b0:b1:b1:96:c0:e6:e0:bb:a4:fb:23:51:3e:d1:00: 48:f0:28:0e:c4:48:19:c0:89:4c:78:2d:d7:f5:c4:a7:9b:b7: 23:93:8e:b7:e7:cf:07:45:19:4d:16:3c:26:a6:4f:f2:56:ab: 21:f6:cb:05:30:65:ee:02:0b:e7:6a:c1:19:4f:27:89:6c:da: 5a:8e:c3:e6:07:b2:b4:03:38:8f:8d:2a:ef:c6:cc:83:fa:88: 7c:2e:eb:b7:c7:cf:2c:98:13:68:13:13:ad:20:00:72:03:93: 93:41:75:f6:81:ab:ce:3d:a7:cc:e1:85:01:e5:3b:13:20:25: 83:ab:f9:01:60:e8:a8:61:1c:a1:57:1c:fa:b6:51:0d:13:88: 2e:25:19:42:38:ee:71:34:10:f5:12:30:ab:84:7d:b5:34:08: fb:01:94:95:99:59:13:39:66:1a:08:8a:46:a3:23:d3:fd:b5: 0b:9a:65:a7:dd:0f:fe:b7:82:68:27:b7:f2:8c:4e:76:73:5d: 77:a5:17:02:20:82:78:77:91:11:26:64:67:bd:6b:c6:08:dd: 5d:71:4c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6AxjhQ8w1ol+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk NGI0ODhiZTMtODBkYS00NzNmLTg3YjAtZTVhMWRlOGY4NzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ3u7i2LGxjf/UUXyP4XC49I5gZ7+dlwqxXq MegqQnru5ok7GdqfzN9dwVwEKvtjMD9Zgq4p4hN00uYg6p7IXCDHm4GcktvMay6f +znxGq7cfVMpNxgJyNDLQImOugdyT6poRPhg50v+frkre4al+eLE7sq78mN7fftZ tcwOnIxxXlUqpdVcc6bSVzrxVoelhBxH/FzAG45oD+W/2iB/TWMjoVbHBu8uHHdo sdKhovSH96/ySrURvUHlRoavS7RJxPei/iOvsVaoZ2euu8igr90NZC6Jz+l8nwRl lPA37RBGu63BHu19u/8w8QjXzhQTdJuvdQSXMh/g51A3hKxIQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTUhighm34TYCO4cmzoIFbTr/32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMmZmYTJiZTUtYmYwZS0z NjMyLWFjMTEtY2JmMTQxOTYxYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxf+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9VLFJn40Pm2QYSorYUoz6xTCUzpOjNGbP1TKHfSaWLOjk1NL0m0rCx sZbA5uC7pPsjUT7RAEjwKA7ESBnAiUx4Ldf1xKebtyOTjrfnzwdFGU0WPCamT/JW qyH2ywUwZe4CC+dqwRlPJ4ls2lqOw+YHsrQDOI+NKu/GzIP6iHwu67fHzyyYE2gT E60gAHIDk5NBdfaBq849p8zhhQHlOxMgJYOr+QFg6KhhHKFXHPq2UQ0TiC4lGUI4 7nE0EPUSMKuEfbU0CPsBlJWZWRM5ZhoIikajI9P9tQuaZafdD/63gmgnt/KMTnZz XXelFwIggnh3kREmZGe9a8YI3V1xTNM= -----END CERTIFICATE-----Generated at Sun Aug 24 04:40:49 2025 by rpki-client