$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3f82cdde-c2b4-38d3-a824-4741830db185.roa File: 3f82cdde-c2b4-38d3-a824-4741830db185.roa (raw, json) Hash identifier: ymf7Ji6fGSLqyKquY8nKDt1Jh08O8w+7w5H/M7QeJ58= Subject key identifier: C3:15:EA:0D:B5:10:F8:DE:63:0D:60:9D:D3:31:DC:F1:4F:F1:96:B7 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584ACE0B9FD78B55C6E291CD6400 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3f82cdde-c2b4-38d3-a824-4741830db185.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 271 IP address blocks: 207.23.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:9f:d7:8b:55:c6:e2:91:cd:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=5aa34ec2-6b6f-46ad-8e74-45cc2727f07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e3:1c:c5:1a:18:7c:9a:18:d9:1d:f2:71:0d: 6e:35:d7:0e:64:ea:82:72:ad:4a:c7:50:77:de:6d: a8:31:2e:a1:f5:f5:4f:8b:f6:a0:cc:8a:e7:cb:5d: b0:40:80:fd:08:25:cc:93:2d:47:7d:29:fc:91:06: fd:d0:aa:1a:29:87:6d:bc:e8:7e:85:d6:b7:d8:79: da:61:db:65:7a:95:a6:f5:cb:76:93:ca:3a:27:4e: 9f:7f:bc:28:7e:5b:28:19:14:1c:1e:91:de:04:9e: 96:f3:48:0f:4c:68:c6:55:bb:0f:b4:d5:93:2d:31: f8:d6:20:e7:08:50:31:59:e7:a5:16:55:7e:c9:f7: 0d:ba:1b:7a:a0:11:e3:aa:46:f5:5b:83:37:04:3c: 93:1f:38:7b:b2:61:08:ce:4e:86:ac:a9:ad:85:5a: 2c:f5:4e:ac:b7:37:ef:63:b0:23:9e:76:ce:2d:97: 7e:b1:ef:d1:c1:73:fc:76:4f:38:1e:e0:af:cc:ee: 04:25:0f:21:5b:cf:fe:5f:60:e5:4e:31:81:70:d9: 4f:84:da:a7:a4:25:86:f5:0a:24:46:58:8d:8e:b7: 54:5d:d3:90:98:8e:7a:b0:03:7e:d3:94:3d:4c:b7: 52:82:1f:30:4f:12:80:58:91:b5:e8:80:44:77:b4: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:15:EA:0D:B5:10:F8:DE:63:0D:60:9D:D3:31:DC:F1:4F:F1:96:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3f82cdde-c2b4-38d3-a824-4741830db185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f5:59:34:75:0f:b5:19:f0:43:7e:7f:1c:05:e3:a2:32:69: 76:42:01:ac:c1:30:0b:c8:fe:b9:a5:19:2b:7d:8e:da:25:c9: d5:a5:34:d6:5e:16:b0:b4:60:40:7d:41:6d:d7:a8:21:b1:7c: a5:a4:80:c7:5f:af:48:46:bb:86:d6:7c:be:84:70:64:94:51: f9:90:e0:bc:a4:be:a0:28:5e:88:46:9f:79:93:d2:ec:be:2d: 2c:57:cc:b4:d0:16:c6:4f:bd:3b:96:2c:cb:5a:3a:da:cd:dc: 00:b9:a1:40:7b:79:65:f2:99:3b:59:1c:ad:85:49:73:dc:90: 7c:a4:71:1c:1d:17:c2:a8:88:17:8f:c6:aa:85:39:6a:ef:47: fe:93:d1:38:fc:44:93:a3:22:ef:ad:dc:24:92:df:18:65:4d: 44:65:16:a1:4a:9e:d2:9e:b9:7c:06:6a:39:74:67:fc:1d:c1: 9d:3b:38:cb:5b:6a:47:be:20:94:b9:66:1c:d5:a0:ae:9b:cb: 7f:d7:26:56:6e:78:16:f8:72:e7:6f:c3:aa:75:7a:8f:9c:1e: 9b:d4:df:2a:f1:3a:43:59:a5:ec:fa:b2:af:ab:08:a3:14:f7: e4:6b:70:8a:97:8e:81:5a:c9:0f:6f:da:c2:ae:ab:db:e5:34: 14:8e:7d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5/Xi1XG4pHNZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk NWFhMzRlYzItNmI2Zi00NmFkLThlNzQtNDVjYzI3MjdmMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeMcxRoYfJoY2R3ycQ1uNdcOZOqCcq1Kx1B3 3m2oMS6h9fVPi/agzIrny12wQID9CCXMky1HfSn8kQb90KoaKYdtvOh+hda32Hna YdtlepWm9ct2k8o6J06ff7woflsoGRQcHpHeBJ6W80gPTGjGVbsPtNWTLTH41iDn CFAxWeelFlV+yfcNuht6oBHjqkb1W4M3BDyTHzh7smEIzk6GrKmthVos9U6stzfv Y7AjnnbOLZd+se/RwXP8dk84HuCvzO4EJQ8hW8/+X2DlTjGBcNlPhNqnpCWG9Qok RliNjrdUXdOQmI56sAN+05Q9TLdSgh8wTxKAWJG16IBEd7SpvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMV6g21EPjeYw1gndMx3PFP8Za3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvM2Y4MmNkZGUtYzJiNC0z OGQzLWE4MjQtNDc0MTgzMGRiMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP1WTR1D7UZ8EN+fxwF46IyaXZCAazBMAvI/rmlGSt9jtolydWlNNZe FrC0YEB9QW3XqCGxfKWkgMdfr0hGu4bWfL6EcGSUUfmQ4LykvqAoXohGn3mT0uy+ LSxXzLTQFsZPvTuWLMtaOtrN3AC5oUB7eWXymTtZHK2FSXPckHykcRwdF8KoiBeP xqqFOWrvR/6T0Tj8RJOjIu+t3CSS3xhlTURlFqFKntKeuXwGajl0Z/wdwZ07OMtb ake+IJS5ZhzVoK6by3/XJlZueBb4cudvw6p1eo+cHpvU3yrxOkNZpez6sq+rCKMU 9+RrcIqXjoFayQ9v2sKuq9vlNBSOfTI= -----END CERTIFICATE-----Generated at Sun Aug 24 04:42:34 2025 by rpki-client