$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/15255f12-5824-322f-99d3-ee0143c8faba.roa File: 15255f12-5824-322f-99d3-ee0143c8faba.roa (raw, json) Hash identifier: RL+6UwqxydK0kG2iExKN9oAV4KLWlEK6Tgw1XBD7Z3M= Subject key identifier: DB:13:2B:E7:B5:82:93:E4:31:B7:26:97:F9:7B:0B:AC:57:B8:4E:F8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC8CD897455B2DD4F08BC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/15255f12-5824-322f-99d3-ee0143c8faba.roa Signing time: Mon 08 Sep 2025 07:17:40 +0000 ROA not before: Mon 08 Sep 2025 07:17:40 +0000 ROA not after: Sun 07 Dec 2025 08:17:40 +0000 asID: 401783 IP address blocks: 209.101.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:8c:d8:97:45:5b:2d:d4:f0:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:40 2025 GMT Not After : Dec 7 08:17:40 2025 GMT Subject: CN=c2e4feb6-d6c7-426d-af07-94d2d0904ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:44:1c:69:20:9b:f9:e5:b1:4e:03:0e:1c:29: bf:2f:bc:62:32:f6:e9:27:63:1d:a4:52:c0:51:31: 7a:7e:1c:2f:e0:9c:dd:49:48:07:a6:14:84:89:3d: 81:8c:fa:39:65:cf:6e:2e:2e:c8:77:d2:35:1c:23: 53:22:51:1d:42:72:f9:c0:de:d2:8f:48:7f:56:5a: 90:30:1f:92:de:c4:fa:b9:9e:bc:8e:2a:1e:81:cc: fc:be:d5:c1:0f:95:ad:00:51:ee:a0:9a:da:29:7a: 11:06:16:77:72:d4:2a:da:0d:cc:c5:4c:e0:06:94: 19:91:b8:70:35:26:5b:87:c1:35:be:fa:6f:44:65: 91:c7:a5:00:f3:26:40:dd:76:15:df:95:9c:85:bc: 9c:92:fe:15:f9:b9:d1:3d:9e:5e:77:68:72:52:1c: b0:60:ba:2a:52:48:d8:00:78:73:6f:f8:96:23:3f: 83:60:d0:40:8d:ba:bd:27:aa:60:81:13:c1:44:72: 8e:80:1e:5e:37:17:3c:f7:01:b8:38:a8:8d:d5:5e: c8:83:68:d0:48:a9:f0:dc:82:22:84:a6:80:e5:50: 32:de:d7:f1:87:b1:a8:ff:9f:16:e9:c7:db:2c:42: e6:8d:49:a4:e3:55:ba:e8:95:c6:f7:d0:29:35:5d: 87:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:13:2B:E7:B5:82:93:E4:31:B7:26:97:F9:7B:0B:AC:57:B8:4E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/15255f12-5824-322f-99d3-ee0143c8faba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:fe:de:c0:b9:2a:3b:e2:52:87:c9:75:b8:6f:07:80:8c:f1: bf:6b:1f:99:eb:21:87:95:bc:3f:d7:23:eb:21:4b:0f:d8:44: 25:55:02:c6:cf:08:a3:8d:31:17:de:28:92:40:4f:38:09:2e: a6:dd:d5:91:49:25:74:24:09:5d:1e:ab:5a:b5:3e:a4:6b:8e: 60:63:fc:76:72:f9:31:b3:b4:e7:29:53:33:9e:8a:78:0f:96: 0e:44:a5:d8:ec:64:97:84:c2:9b:df:ee:c2:d2:fd:42:5c:b7: ca:07:4b:96:6c:c2:c7:d5:71:1b:79:f1:20:1a:ad:6c:3e:fa: e9:1d:72:25:22:31:47:36:2a:ac:b8:f0:d6:05:b3:00:63:f5: 5d:b4:83:5b:6e:88:c6:c3:8c:4f:fa:b1:c2:6f:a9:46:fc:94: 96:ee:25:51:77:ef:40:7b:76:c3:3c:7e:62:f8:12:d5:dd:d3: 22:0f:4e:11:58:a9:6b:06:15:c0:18:b7:36:33:91:65:1e:a8: 57:34:04:79:44:0b:31:f5:ec:88:6e:a0:5a:eb:be:82:02:cc: 4c:79:7c:5b:28:49:5b:34:39:8b:92:65:ad:a8:0d:78:c1:e4: 0e:b0:4d:be:01:aa:df:ae:9d:68:4b:56:fa:c1:bb:34:b8:ff: a0:41:9e:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvIzYl0VbLdTwi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTc0MFoXDTI1MTIwNzA4MTc0MFowLzEtMCsGA1UEAxMk YzJlNGZlYjYtZDZjNy00MjZkLWFmMDctOTRkMmQwOTA0ZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20QcaSCb+eWxTgMOHCm/L7xiMvbpJ2MdpFLA UTF6fhwv4JzdSUgHphSEiT2BjPo5Zc9uLi7Id9I1HCNTIlEdQnL5wN7Sj0h/VlqQ MB+S3sT6uZ68jioegcz8vtXBD5WtAFHuoJraKXoRBhZ3ctQq2g3MxUzgBpQZkbhw NSZbh8E1vvpvRGWRx6UA8yZA3XYV35Wchbyckv4V+bnRPZ5ed2hyUhywYLoqUkjY AHhzb/iWIz+DYNBAjbq9J6pggRPBRHKOgB5eNxc89wG4OKiN1V7Ig2jQSKnw3IIi hKaA5VAy3tfxh7Go/58W6cfbLELmjUmk41W66JXG99ApNV2HCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsTK+e1gpPkMbcml/l7C6xXuE74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTUyNTVmMTItNTgyNC0z MjJmLTk5ZDMtZWUwMTQzYzhmYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMb+3sC5KjviUofJdbhvB4CM8b9rH5nrIYeVvD/XI+shSw/YRCVVAsbP CKONMRfeKJJATzgJLqbd1ZFJJXQkCV0eq1q1PqRrjmBj/HZy+TGztOcpUzOeingP lg5EpdjsZJeEwpvf7sLS/UJct8oHS5ZswsfVcRt58SAarWw++ukdciUiMUc2Kqy4 8NYFswBj9V20g1tuiMbDjE/6scJvqUb8lJbuJVF370B7dsM8fmL4EtXd0yIPThFY qWsGFcAYtzYzkWUeqFc0BHlECzH17IhuoFrrvoICzEx5fFsoSVs0OYuSZa2oDXjB 5A6wTb4Bqt+unWhLVvrBuzS4/6BBnnw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:29 2025 by rpki-client