$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa File: 59645cd8-9633-3577-8cc6-4685bcbd83f2.roa (raw, json) Hash identifier: BYnxvIonAQjbqcIqBdwfH4CatNpdbkUtonYYAekXuXA= Subject key identifier: D1:7B:6E:E4:9D:BF:B8:35:C1:AF:13:7D:0C:C4:CA:88:8F:47:6D:14 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584DC29AEEC08B12BF561D1866C0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 11105 IP address blocks: 207.23.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:ee:c0:8b:12:bf:56:1d:18:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=9be23a0f-6f8e-449b-b8a5-098ee8f10770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:da:f1:1d:aa:b0:2f:b3:64:2a:bd:be:da:12: 89:7a:72:15:b2:11:52:e2:57:88:98:43:fd:c8:34: bb:3c:95:15:12:3d:96:4e:9d:0e:f1:66:0d:3a:3b: 0d:55:a0:9d:8c:3a:1f:f3:d0:99:d1:cb:d5:7c:21: 1a:db:59:cd:f7:16:35:32:27:10:a2:62:c3:01:04: d7:7b:19:d2:e4:21:8d:e8:69:df:73:63:c2:1e:03: 5a:aa:24:3e:6c:7d:66:9d:f6:44:21:ed:67:f2:c8: d9:3c:83:ca:ca:9b:b7:59:ca:72:b1:92:9c:23:d7: 04:f9:ab:91:96:74:da:52:3a:cf:e5:a4:f2:0f:3a: 69:63:59:a0:e5:bf:d5:6b:79:c4:dd:70:f1:68:bc: 71:52:e6:20:10:4e:8a:41:49:dd:ca:f4:3e:78:31: fd:ad:54:ea:74:18:68:98:16:e5:60:2f:9f:d4:ab: 45:8b:8c:ac:80:7e:a9:55:30:47:bd:84:26:1c:4a: 71:e3:fc:80:e8:d3:00:e3:63:34:29:ac:6b:9c:4e: b6:d9:bb:03:e3:6a:aa:a7:05:43:85:1d:bd:2c:dd: d2:d7:ef:ed:a5:64:a9:85:b4:8c:40:b6:1b:e8:68: 54:0b:85:bc:db:a3:db:8f:c6:e8:89:df:bb:26:75: 7d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7B:6E:E4:9D:BF:B8:35:C1:AF:13:7D:0C:C4:CA:88:8F:47:6D:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:90:cb:21:bf:e4:f9:4f:9a:dd:fd:36:8a:55:f8:62:2e:67: 07:a7:b9:55:c7:36:28:01:30:f3:5b:c4:35:7d:b5:f8:10:df: 14:ca:0a:c0:4f:6a:2d:00:51:2c:2e:2a:db:aa:af:1f:48:25: 31:4c:3a:1f:48:90:35:f1:c3:6d:b4:7c:6f:63:c4:7e:3f:1b: d0:f4:77:da:69:c4:33:c0:39:1c:5e:50:dc:ca:4b:40:0e:ad: 8c:f8:3c:b7:a6:ee:16:a7:9e:74:d1:5d:ee:10:b5:f0:a5:0e: ad:21:55:d5:50:25:c3:ca:f9:dd:d5:ca:e6:b6:89:78:17:7e: 47:1f:5a:f3:16:25:66:47:a5:ce:24:28:48:10:87:7c:52:90: d8:7b:e4:77:d3:da:4e:6b:58:fc:d2:bc:7d:73:0a:50:e0:a1: 58:9c:3f:a0:6f:e3:58:87:17:55:f2:3e:f5:a6:be:48:50:07: 5f:9c:5d:4f:8d:d8:cf:23:fe:0c:42:d0:d1:7c:26:15:2e:54: 82:fe:0d:d9:fa:01:0f:3e:b5:f6:07:dc:fa:84:f1:e6:31:17: 25:cd:63:98:bc:7b:5c:8f:a2:7d:84:5e:d6:53:99:b6:ba:da: af:91:c6:8e:4d:bd:55:63:0d:3a:a8:4b:51:16:dc:ff:f7:2c: 7b:0b:e4:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Cmu7AixK/Vh0YZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk OWJlMjNhMGYtNmY4ZS00NDliLWI4YTUtMDk4ZWU4ZjEwNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktrxHaqwL7NkKr2+2hKJenIVshFS4leImEP9 yDS7PJUVEj2WTp0O8WYNOjsNVaCdjDof89CZ0cvVfCEa21nN9xY1MicQomLDAQTX exnS5CGN6Gnfc2PCHgNaqiQ+bH1mnfZEIe1n8sjZPIPKypu3WcpysZKcI9cE+auR lnTaUjrP5aTyDzppY1mg5b/Va3nE3XDxaLxxUuYgEE6KQUndyvQ+eDH9rVTqdBho mBblYC+f1KtFi4ysgH6pVTBHvYQmHEpx4/yA6NMA42M0KaxrnE622bsD42qqpwVD hR29LN3S1+/tpWSphbSMQLYb6GhUC4W826Pbj8boid+7JnV9xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNF7buSdv7g1wa8TfQzEyoiPR20UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTk2NDVjZDgtOTYzMy0z NTc3LThjYzYtNDY4NWJjYmQ4M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxdVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyQyyG/5PlPmt39NopV+GIuZwenuVXHNigBMPNbxDV9tfgQ3xTKCsBP ai0AUSwuKtuqrx9IJTFMOh9IkDXxw220fG9jxH4/G9D0d9ppxDPAORxeUNzKS0AO rYz4PLem7hannnTRXe4QtfClDq0hVdVQJcPK+d3Vyua2iXgXfkcfWvMWJWZHpc4k KEgQh3xSkNh75HfT2k5rWPzSvH1zClDgoVicP6Bv41iHF1XyPvWmvkhQB1+cXU+N 2M8j/gxC0NF8JhUuVIL+Ddn6AQ8+tfYH3PqE8eYxFyXNY5i8e1yPon2EXtZTmba6 2q+Rxo5NvVVjDTqoS1EW3P/3LHsL5MQ= -----END CERTIFICATE-----Generated at Wed May 13 13:59:37 2026 by rpki-client