$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa File: a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa (raw, json) Hash identifier: KKElZ+/TCIfARm0QXwi/oKtFRuOpI612HPI0uiLP6s8= Subject key identifier: 5B:5C:B9:18:57:67:FD:64:14:3D:99:D4:39:A7:FB:F7:D5:CD:AE:35 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584ACE0B9FC40D43C1BD42D24880 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 271 IP address blocks: 207.23.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:9f:c4:0d:43:c1:bd:42:d2:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=ee6ee0ce-cf0b-44f0-9d7f-385204086985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:d8:45:31:ad:a3:e1:57:0f:71:e1:82:c9: 31:d7:75:eb:1f:2e:30:8f:7b:a0:fe:57:50:67:8b: 8e:94:e7:60:90:06:4d:c2:3e:cd:92:73:58:a2:e3: d8:2f:c4:c1:4e:c8:67:31:3f:9f:a1:e9:18:f9:5b: 49:27:d0:9a:97:cf:0e:62:86:9b:ce:76:cf:e7:19: f2:46:61:99:89:ea:20:d9:c3:48:78:be:76:a2:19: 58:67:5e:54:e3:8e:91:29:ea:ae:a1:7f:d9:80:7e: 6e:f8:75:4c:90:aa:ec:42:74:5d:7c:75:4e:bc:6c: 4c:d5:73:d0:19:46:95:d0:de:88:11:97:2a:e0:6c: 3b:b1:4e:af:de:9f:a9:64:fb:d6:4a:03:33:a1:12: c7:8d:85:60:a5:a8:c5:e5:40:9a:81:dd:0d:33:df: 48:90:79:b8:6a:02:42:7d:76:d0:5e:89:f5:a5:19: 85:2f:fe:ae:33:e7:11:bd:04:c8:07:c9:27:6d:00: f1:65:77:6c:c6:8c:c6:c7:be:dc:14:39:b1:d0:df: 22:88:39:37:6e:a8:ea:c8:bd:79:71:93:2f:84:bd: c8:20:ac:9f:55:1f:4f:91:17:41:ed:30:8a:71:ee: fd:e4:b0:0a:b9:56:77:93:11:c5:9e:8f:9f:1e:82: c1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5C:B9:18:57:67:FD:64:14:3D:99:D4:39:A7:FB:F7:D5:CD:AE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:e1:2d:9e:d2:c6:e0:57:ea:32:2c:3d:71:38:94:6d:b3:44: 91:99:19:95:29:b3:38:48:34:b8:3a:02:54:4a:6a:17:6b:be: 3b:68:dd:d9:4e:77:bf:3b:d2:6f:dd:ed:d7:1a:a2:54:c1:93: 5b:cc:75:87:1e:57:17:8c:45:19:af:5e:48:69:8a:06:5d:52: a2:8b:e2:4d:21:a8:a9:cd:a1:e2:aa:69:ee:d4:25:bd:e2:15: 84:d1:de:b1:12:69:70:0c:e7:1c:8b:e6:fc:9b:cc:04:f7:00: e0:5a:aa:16:0b:1d:25:2c:46:7a:3a:58:24:25:d4:4a:28:f3: cc:d7:b1:f9:19:92:33:73:f6:4a:b2:db:bf:4b:dd:a3:c1:66: 3a:7a:7e:be:5b:0d:4f:f6:fb:c6:e1:dc:6c:78:c7:11:3a:d8: 76:6f:8d:2e:6a:c2:c5:c7:e1:22:9c:9c:8d:ca:1b:72:b0:b2: 15:8c:0b:7e:5d:ec:52:21:88:e1:b1:b2:a5:af:d7:12:54:7c: ed:61:61:84:26:ab:05:5f:e1:72:30:cf:7a:6d:6d:45:aa:39: 5b:9c:bf:b5:a8:3d:11:47:f0:20:33:87:c5:b5:fe:2c:86:f9: c1:16:2e:47:79:42:2e:a0:44:80:0c:3a:8d:a9:df:07:a3:48: 02:ac:9b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5/EDUPBvULSSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZWU2ZWUwY2UtY2YwYi00NGYwLTlkN2YtMzg1MjA0MDg2OTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOvYRTGto+FXD3Hhgskx13XrHy4wj3ug/ldQ Z4uOlOdgkAZNwj7NknNYouPYL8TBTshnMT+foekY+VtJJ9Cal88OYoabznbP5xny RmGZieog2cNIeL52ohlYZ15U446RKequoX/ZgH5u+HVMkKrsQnRdfHVOvGxM1XPQ GUaV0N6IEZcq4Gw7sU6v3p+pZPvWSgMzoRLHjYVgpajF5UCagd0NM99IkHm4agJC fXbQXon1pRmFL/6uM+cRvQTIB8knbQDxZXdsxozGx77cFDmx0N8iiDk3bqjqyL15 cZMvhL3IIKyfVR9PkRdB7TCKce795LAKuVZ3kxHFno+fHoLB6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtcuRhXZ/1kFD2Z1Dmn+/fVza41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYTY1NmFmNDUtNmY2YS0z NThjLTk3ZDUtZWU5YzBlN2E5YTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALThLZ7SxuBX6jIsPXE4lG2zRJGZGZUpszhINLg6AlRKahdrvjto3dlO d7870m/d7dcaolTBk1vMdYceVxeMRRmvXkhpigZdUqKL4k0hqKnNoeKqae7UJb3i FYTR3rESaXAM5xyL5vybzAT3AOBaqhYLHSUsRno6WCQl1Eoo88zXsfkZkjNz9kqy 279L3aPBZjp6fr5bDU/2+8bh3Gx4xxE62HZvjS5qwsXH4SKcnI3KG3KwshWMC35d 7FIhiOGxsqWv1xJUfO1hYYQmqwVf4XIwz3ptbUWqOVucv7WoPRFH8CAzh8W1/iyG +cEWLkd5Qi6gRIAMOo2p3wejSAKsm1M= -----END CERTIFICATE-----Generated at Sun Aug 24 04:39:38 2025 by rpki-client