$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/06679cb1-fcf9-3fe1-979c-52610734f879.roa File: 06679cb1-fcf9-3fe1-979c-52610734f879.roa (raw, json) Hash identifier: azvMn3VHOUs0d7RZqD6L1Rc5BopdUAzj2QbeEbZuR7s= Subject key identifier: 82:2E:62:40:F2:4A:E9:01:36:D7:AC:03:D1:A3:01:DF:05:CB:59:FF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B52BDEC44EFFDA540422B7200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/06679cb1-fcf9-3fe1-979c-52610734f879.roa Signing time: Fri 26 Sep 2025 13:46:39 +0000 ROA not before: Fri 26 Sep 2025 13:46:39 +0000 ROA not after: Thu 25 Dec 2025 14:46:39 +0000 asID: 25198 IP address blocks: 209.101.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:bd:ec:44:ef:fd:a5:40:42:2b:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 26 13:46:39 2025 GMT Not After : Dec 25 14:46:39 2025 GMT Subject: CN=030cce26-78fa-4fb1-98d0-714b450be619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:88:67:82:53:f4:3a:a1:80:89:3a:ff:71: d1:75:57:87:2b:12:ea:fe:0c:ef:2b:6f:56:1a:91: b9:c6:f5:84:86:7d:d0:48:45:f5:75:f8:f5:3b:c8: 76:8c:a5:0f:55:d9:08:e1:60:0b:5e:a1:c6:f9:66: d0:e1:7d:61:11:10:c3:d1:e1:c4:c3:13:6a:82:c4: 56:ba:5d:c1:e5:bc:63:ff:ad:c4:84:85:2f:84:4f: ad:1c:b4:d6:d1:80:79:fd:72:1b:70:22:88:d1:b4: 95:94:6d:82:8d:37:fb:55:dd:a2:4d:0c:92:71:95: b8:99:b0:34:9a:0c:9b:e8:9c:c8:bf:03:d4:1c:89: e1:d6:9b:18:22:28:77:f7:75:50:a9:ff:3c:8b:3e: 4f:14:2c:55:2e:be:78:d2:29:a8:a4:fe:77:e8:6f: 2b:2c:5f:4f:ff:c6:64:bc:30:d1:70:d1:20:d2:22: 18:f4:42:5b:8a:f2:d2:53:9a:c9:c1:c2:28:a2:5d: 3b:98:ca:b0:0c:0f:d9:22:01:a7:5b:f9:cd:84:7e: 5a:05:de:93:a8:18:74:11:d1:ae:23:b9:5e:1b:a5: c1:fc:76:c7:a0:d1:9c:99:01:39:58:34:60:23:5a: b7:f8:2d:8e:08:25:45:b7:40:6c:c7:45:5c:ba:fd: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2E:62:40:F2:4A:E9:01:36:D7:AC:03:D1:A3:01:DF:05:CB:59:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/06679cb1-fcf9-3fe1-979c-52610734f879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b0:26:2e:a6:e8:52:83:a8:69:d8:e4:4a:d8:5c:07:68:07: 55:58:44:93:af:84:0f:b4:de:15:f4:92:c5:d7:3a:c0:97:fd: c5:df:3e:63:18:e7:92:7c:d0:53:00:16:64:36:7c:4f:c9:08: 00:3b:56:3e:c5:b6:ab:89:a4:7a:8f:6e:a3:c6:f3:80:13:4e: cf:b9:5e:9d:33:8d:9a:fa:6f:70:d0:cf:a7:0e:18:12:70:97: fe:85:61:ca:4e:e3:20:88:22:11:8b:ba:65:6f:ba:62:e4:69: 6c:de:fa:71:8b:00:ca:b7:3b:2a:f6:ae:cf:9b:91:fc:e3:82: de:b3:de:fb:a6:4e:f9:77:7a:9c:16:98:e4:8b:8a:4e:b1:85: 94:8f:9d:3e:7a:79:00:0e:7a:80:d0:81:bd:66:8a:16:fc:13: f8:25:3b:10:03:89:90:af:8f:48:f2:a5:35:c7:c9:97:13:22: 13:9c:89:cc:70:c1:a8:14:0d:e5:f0:c6:21:81:10:8b:1a:7c: 4f:6e:71:c7:6c:34:3b:3c:a0:2d:07:8f:32:a3:7f:37:3c:4b: 31:f7:a1:13:02:c6:f0:7d:58:98:e0:0c:74:cf:2c:0c:9a:28: 7c:e4:94:d2:da:88:ef:04:eb:31:cd:c9:ca:84:c3:08:cd:62: aa:79:15:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSvexE7/2lQEIrcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNjEzNDYzOVoXDTI1MTIyNTE0NDYzOVowLzEtMCsGA1UEAxMk MDMwY2NlMjYtNzhmYS00ZmIxLTk4ZDAtNzE0YjQ1MGJlNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou2IZ4JT9DqhgIk6/3HRdVeHKxLq/gzvK29W GpG5xvWEhn3QSEX1dfj1O8h2jKUPVdkI4WALXqHG+WbQ4X1hERDD0eHEwxNqgsRW ul3B5bxj/63EhIUvhE+tHLTW0YB5/XIbcCKI0bSVlG2CjTf7Vd2iTQyScZW4mbA0 mgyb6JzIvwPUHInh1psYIih393VQqf88iz5PFCxVLr540imopP536G8rLF9P/8Zk vDDRcNEg0iIY9EJbivLSU5rJwcIool07mMqwDA/ZIgGnW/nNhH5aBd6TqBh0EdGu I7leG6XB/HbHoNGcmQE5WDRgI1q3+C2OCCVFt0Bsx0Vcuv2a8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIuYkDySukBNtesA9GjAd8Fy1n/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDY2NzljYjEtZmNmOS0z ZmUxLTk3OWMtNTI2MTA3MzRmODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWwJi6m6FKDqGnY5ErYXAdoB1VYRJOvhA+03hX0ksXXOsCX/cXfPmMY 55J80FMAFmQ2fE/JCAA7Vj7FtquJpHqPbqPG84ATTs+5Xp0zjZr6b3DQz6cOGBJw l/6FYcpO4yCIIhGLumVvumLkaWze+nGLAMq3Oyr2rs+bkfzjgt6z3vumTvl3epwW mOSLik6xhZSPnT56eQAOeoDQgb1mihb8E/glOxADiZCvj0jypTXHyZcTIhOcicxw wagUDeXwxiGBEIsafE9uccdsNDs8oC0HjzKjfzc8SzH3oRMCxvB9WJjgDHTPLAya KHzklNLaiO8E6zHNycqEwwjNYqp5FVI= -----END CERTIFICATE-----Generated at Sat Oct 11 09:00:00 2025 by rpki-client