$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa File: 0c95cc7e-347c-343b-9a60-43effbd437ce.roa (raw, json) Hash identifier: ccFZOr86NAXBjzOtn0uVHBOCZOUaUqlV+cXxcs0FqKg= Subject key identifier: B9:F1:00:A4:3E:03:CC:0A:C4:D0:AD:96:A4:8E:87:9B:C0:F2:11:2D Certificate issuer: /CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Certificate serial: 010D0C9F4328584B4081B262EFF7EAF51F9C2100 Authority key identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 8075 IP address blocks: 206.209.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b2:62:ef:f7:ea:f5:1f:9c:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=6fbd81cf-849b-4ba1-a06f-4134ea0b1e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:a7:98:84:57:ad:41:0f:60:e5:d3:e3:18: 3f:4a:c2:f4:8d:68:69:19:9b:ed:a3:bd:21:c2:84: 12:ed:e9:cf:77:d0:4f:7c:ea:0b:e9:c0:34:69:f9: 8f:d2:44:f4:cb:bf:2c:ac:ef:83:f1:cb:04:73:1c: 62:fb:f3:0d:31:db:81:e0:91:74:ab:05:9c:f5:ec: 2f:5a:e1:e4:fc:df:8a:b0:ca:50:95:7e:65:60:6b: 55:4b:d6:75:8f:d6:58:ac:f1:d0:16:10:b5:f3:e5: 2a:54:21:d0:68:c2:5f:75:26:ac:14:c4:e0:fc:a9: e0:21:57:e2:e3:94:2f:f2:75:19:d7:8b:27:d2:a4: 41:d4:00:ac:c2:3f:54:79:71:a7:9e:b4:14:5e:98: a3:b8:01:a0:e7:d9:fb:26:65:6c:d6:3b:53:22:7b: 02:cb:e6:f2:68:7a:c3:14:77:ac:95:e9:9c:7a:00: 9c:db:26:70:58:bf:e2:b7:58:61:cc:40:5f:bb:fd: 43:e0:bf:e9:c9:bf:9c:5b:58:19:a1:29:89:9b:00: 6a:b9:e6:cf:48:52:17:3b:58:55:ce:fd:d4:d2:ad: cd:7f:9d:2d:0f:2c:b0:ba:fb:39:27:ce:b3:f0:12: 7c:e6:4e:6c:ff:73:3a:fe:ae:6e:a9:0c:7f:c9:83: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F1:00:A4:3E:03:CC:0A:C4:D0:AD:96:A4:8E:87:9B:C0:F2:11:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl X509v3 Authority Key Identifier: keyid:BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer sbgp-ipAddrBlock: critical IPv4: 206.209.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0e:8f:db:eb:44:3d:c2:5c:9f:61:5e:d6:5f:a5:1d:59:ca: 52:c1:71:6c:19:52:65:ad:3e:a9:aa:82:98:78:fe:29:6e:cb: d8:2a:f2:17:c4:16:b1:56:bc:53:3c:dd:b1:b4:85:da:93:53: 47:6a:dc:58:d6:1b:2f:4c:9f:21:d1:0b:fa:3b:14:94:a0:02: af:85:4d:e6:0b:1c:31:21:00:b6:de:c5:7e:37:4d:bb:e8:0a: 79:c5:d8:bd:a7:19:5c:a8:e7:32:0b:35:7f:97:19:b2:3a:a9: 58:48:bd:cd:f8:db:15:53:e0:52:70:0d:f3:f8:a9:e7:bc:2a: 28:36:8e:16:4d:7a:b0:31:ab:77:2a:bc:b2:72:f0:8f:3d:2a: 45:51:a7:ce:83:d6:9f:26:6e:96:b5:f8:d6:67:04:c4:9f:a3: 24:1e:00:8c:06:ea:60:c1:f7:59:ca:cd:87:af:e8:50:de:88: 33:f8:45:ba:a7:ed:17:8c:7b:b5:54:3d:23:15:ac:ca:2d:96: 62:8f:1f:b5:59:96:f1:df:7a:12:75:21:94:38:6c:15:ab:15: 68:48:b2:2c:17:56:17:ca:d0:cb:4c:57:2e:a9:88:09:a3:91: 51:19:cf:6e:49:5f:aa:3a:39:24:05:68:a4:a3:f5:95:19:14: 4d:7c:bb:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgbJi7/fq9R+cIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmYTY3M2UtY2VlYi00MDQ4LWIyYWItOTNjYWQ0NTgx NGFjMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NmZiZDgxY2YtODQ5Yi00YmExLWEwNmYtNDEzNGVhMGIxZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSmnmIRXrUEPYOXT4xg/SsL0jWhpGZvto70h woQS7enPd9BPfOoL6cA0afmP0kT0y78srO+D8csEcxxi+/MNMduB4JF0qwWc9ewv WuHk/N+KsMpQlX5lYGtVS9Z1j9ZYrPHQFhC18+UqVCHQaMJfdSasFMTg/KngIVfi 45Qv8nUZ14sn0qRB1ACswj9UeXGnnrQUXpijuAGg59n7JmVs1jtTInsCy+byaHrD FHeslemcegCc2yZwWL/it1hhzEBfu/1D4L/pyb+cW1gZoSmJmwBquebPSFIXO1hV zv3U0q3Nf50tDyywuvs5J86z8BJ85k5s/3M6/q5uqQx/yYN8+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnxAKQ+A8wKxNCtlqSOh5vA8hEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWZh NjczZS1jZWViLTQwNDgtYjJhYi05M2NhZDQ1ODE0YWMvMGM5NWNjN2UtMzQ3Yy0z NDNiLTlhNjAtNDNlZmZiZDQzN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmYTY3M2UtY2VlYi00MDQ4LWIy YWItOTNjYWQ0NTgxNGFjLzBhZmE2NzNlLWNlZWItNDA0OC1iMmFiLTkzY2FkNDU4 MTRhYy5jcmwwHwYDVR0jBBgwFoAUvVEvSLcAjCwb2JozS3ZOtFgF2GcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWZhNjczZS1jZWViLTQwNDgtYjJhYi05M2Nh ZDQ1ODE0YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztFrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMOj9vrRD3CXJ9hXtZfpR1ZylLBcWwZUmWtPqmqgph4/iluy9gq8hfE FrFWvFM83bG0hdqTU0dq3FjWGy9MnyHRC/o7FJSgAq+FTeYLHDEhALbexX43Tbvo CnnF2L2nGVyo5zILNX+XGbI6qVhIvc342xVT4FJwDfP4qee8Kig2jhZNerAxq3cq vLJy8I89KkVRp86D1p8mbpa1+NZnBMSfoyQeAIwG6mDB91nKzYev6FDeiDP4Rbqn 7ReMe7VUPSMVrMotlmKPH7VZlvHfehJ1IZQ4bBWrFWhIsiwXVhfK0MtMVy6piAmj kVEZz25JX6o6OSQFaKSj9ZUZFE18u64= -----END CERTIFICATE-----Generated at Mon Oct 20 02:08:10 2025 by rpki-client