$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a525a569-13be-3f73-852c-988f930cc537.roa File: a525a569-13be-3f73-852c-988f930cc537.roa (raw, json) Hash identifier: sbhjk8KJKJqa4lSbcHbGQ7aOTcSVYONsTw0RwxmEXP8= Subject key identifier: 91:0A:6D:3A:03:43:33:AB:5C:0E:F6:61:79:CC:85:F0:34:0C:D6:05 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584ACE0BA0050E13D1898EEC80B8 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a525a569-13be-3f73-852c-988f930cc537.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 271 IP address blocks: 207.23.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a0:05:0e:13:d1:89:8e:ec:80:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=d3751d6f-6c4e-4cdb-8cde-1916b9f038cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c8:e2:52:ee:c3:23:95:ed:d7:d1:9d:28:38: 82:e5:de:32:2e:ab:ba:4e:6d:12:fa:61:f3:2c:10: cc:ce:06:8d:63:ba:eb:b7:89:91:48:9d:29:47:69: a2:38:15:c4:ff:df:33:fc:2f:b3:d8:7f:86:86:c6: 05:f4:7f:2a:33:30:aa:12:69:1c:ff:46:d3:e3:06: 1e:2b:a2:96:62:a8:a7:42:d7:96:81:98:b5:a1:db: a1:f9:4d:e3:90:56:64:d0:0e:08:41:e9:cb:f0:5e: b6:52:69:0d:5a:ed:ac:4f:12:0c:e5:ba:77:1d:ae: f1:fe:32:f8:3a:aa:db:9c:01:86:6d:fb:88:0e:fc: 01:1e:63:d2:72:f7:89:1e:27:cc:a6:97:93:e5:3f: 43:0a:69:07:88:91:cc:c2:73:ed:a8:9f:47:9c:8b: de:61:66:5b:04:b6:2e:a9:e6:38:ce:97:8c:cf:cb: d5:3c:d0:66:5d:5c:71:b7:4b:10:a8:1b:c8:e9:e9: be:b7:6b:58:1e:27:31:48:c0:22:54:a2:63:a0:e6: 54:b1:7b:fc:96:56:07:53:70:1a:be:df:cf:bc:6b: 63:6b:74:86:3e:28:f3:6f:54:74:df:77:b0:64:07: 50:6e:a7:78:58:8b:e3:77:a3:9b:df:11:7b:c7:8c: 38:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0A:6D:3A:03:43:33:AB:5C:0E:F6:61:79:CC:85:F0:34:0C:D6:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a525a569-13be-3f73-852c-988f930cc537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:cc:5d:33:a3:9b:31:b4:2f:4b:27:ee:81:76:e3:8a:50:5a: f2:59:70:81:b3:5f:24:9a:3a:f9:7f:05:73:5e:2c:5b:b0:3c: 69:98:0d:7b:16:7b:ab:2d:34:0e:87:c1:9d:d7:34:a1:f4:40: 80:88:0a:f1:09:ff:76:b6:fe:de:f1:fa:88:77:36:10:b5:c6: 85:95:35:96:70:67:33:47:d1:e4:bc:a6:75:3c:4c:f1:ff:2b: da:0d:71:93:20:a6:e6:a3:6a:a9:81:04:52:19:c2:96:2d:d6: 7c:ef:4a:c0:a6:46:c4:96:06:b5:ad:f2:f0:99:38:38:cc:14: cf:9e:67:0b:d4:7d:45:7b:79:db:2d:92:b8:86:ba:98:01:8f: dc:82:7f:84:1f:e5:79:d2:d8:d2:8c:f3:ab:90:29:d7:f3:4c: 5f:60:d7:ae:c9:1a:cf:51:5d:8a:39:78:f0:00:e5:c7:05:13: cf:14:d0:48:68:eb:12:7e:b0:89:69:93:ea:23:10:13:f5:a3: 33:51:92:02:62:90:13:e2:68:67:1e:d4:d1:b7:df:24:94:45: fb:93:24:d1:5a:b1:02:d4:f2:5b:e8:4d:03:55:a2:df:ca:e6: d8:f9:ef:a5:88:e9:ad:f3:fa:7c:a0:cf:3b:73:1e:df:e6:5c: 42:5b:cd:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6AFDhPRiY7sgLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZDM3NTFkNmYtNmM0ZS00Y2RiLThjZGUtMTkxNmI5ZjAzOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMjiUu7DI5Xt19GdKDiC5d4yLqu6Tm0S+mHz LBDMzgaNY7rrt4mRSJ0pR2miOBXE/98z/C+z2H+GhsYF9H8qMzCqEmkc/0bT4wYe K6KWYqinQteWgZi1oduh+U3jkFZk0A4IQenL8F62UmkNWu2sTxIM5bp3Ha7x/jL4 OqrbnAGGbfuIDvwBHmPScveJHifMppeT5T9DCmkHiJHMwnPtqJ9HnIveYWZbBLYu qeY4zpeMz8vVPNBmXVxxt0sQqBvI6em+t2tYHicxSMAiVKJjoOZUsXv8llYHU3Aa vt/PvGtja3SGPijzb1R033ewZAdQbqd4WIvjd6Ob3xF7x4w4TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEKbToDQzOrXA72YXnMhfA0DNYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYTUyNWE1NjktMTNiZS0z ZjczLTg1MmMtOTg4ZjkzMGNjNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPMXTOjmzG0L0sn7oF244pQWvJZcIGzXySaOvl/BXNeLFuwPGmYDXsW e6stNA6HwZ3XNKH0QICICvEJ/3a2/t7x+oh3NhC1xoWVNZZwZzNH0eS8pnU8TPH/ K9oNcZMgpuajaqmBBFIZwpYt1nzvSsCmRsSWBrWt8vCZODjMFM+eZwvUfUV7edst kriGupgBj9yCf4Qf5XnS2NKM86uQKdfzTF9g167JGs9RXYo5ePAA5ccFE88U0Eho 6xJ+sIlpk+ojEBP1ozNRkgJikBPiaGce1NG33ySURfuTJNFasQLU8lvoTQNVot/K 5tj576WI6a3z+nygzztzHt/mXEJbzeg= -----END CERTIFICATE-----Generated at Sun Aug 24 06:38:44 2025 by rpki-client