$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/16704ece-2d89-3842-b3af-7521e8c43ad0.roa File: 16704ece-2d89-3842-b3af-7521e8c43ad0.roa (raw, json) Hash identifier: m9vnNhHw/Gw/6mI6AtqwB0FI5LP0x9Ee0ltKpROXV9g= Subject key identifier: 2A:50:C9:59:D7:22:34:D7:3E:3B:32:F9:8B:CF:19:A7:6F:2D:E4:44 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4CB83BA90AC9A499C932F440 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/16704ece-2d89-3842-b3af-7521e8c43ad0.roa Signing time: Wed 24 Sep 2025 10:00:20 +0000 ROA not before: Wed 24 Sep 2025 10:00:20 +0000 ROA not after: Tue 23 Dec 2025 11:00:20 +0000 asID: 400031 IP address blocks: 209.101.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4c:b8:3b:a9:0a:c9:a4:99:c9:32:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 24 10:00:20 2025 GMT Not After : Dec 23 11:00:20 2025 GMT Subject: CN=870e44d7-116f-4a35-8d10-291717b43994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:56:c0:f6:49:32:7c:8c:d1:fc:08:07:a5:05: 6a:2d:38:9a:1c:33:5b:c8:27:f3:30:ed:21:bd:17: 60:8a:a5:c4:ee:01:bf:8d:70:3a:cf:c6:4f:12:4b: e4:0d:f6:93:63:47:e3:db:4d:26:7e:db:2d:af:3a: 2d:11:8c:dd:e1:64:ba:9c:ad:fb:d3:54:40:54:51: 9d:40:c3:58:31:ce:18:e7:52:5c:c7:fa:4a:16:80: 63:3c:59:38:a3:58:ab:a6:b3:ee:6f:54:1f:6c:9d: 05:05:a0:68:28:00:30:9e:f1:70:5b:48:8d:b6:4f: e8:c4:48:1e:0e:ca:e8:71:2a:d9:3d:9e:e5:c7:e6: 59:b9:98:c9:bb:73:cb:1a:68:ee:10:ba:9a:3c:be: 29:04:a4:fd:62:dd:6b:21:e4:9e:ae:cb:c4:88:f7: be:3b:87:da:41:b4:2b:d1:ae:a5:f9:f8:1d:1d:3a: 0f:c1:e9:da:29:b2:d3:fb:2e:c1:30:5c:1e:23:db: 35:bb:c9:22:f8:fd:db:ba:e3:0b:09:0e:ae:f5:f5: 1a:9a:3d:75:a8:59:1e:dd:49:93:00:58:e4:90:c0: b1:49:ad:89:c4:03:47:dc:d1:70:be:7e:ca:fe:8d: 86:0e:a5:dd:64:3b:5c:eb:a8:0a:b3:a9:7d:b9:36: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:50:C9:59:D7:22:34:D7:3E:3B:32:F9:8B:CF:19:A7:6F:2D:E4:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/16704ece-2d89-3842-b3af-7521e8c43ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:dc:00:60:78:0d:7a:80:53:88:c1:dc:f1:a2:7c:f4:f8:f5: 96:43:2d:42:59:4a:38:bb:01:8b:00:1f:b0:6e:77:bf:b5:b1: af:65:8e:38:ee:69:ee:0a:0c:b1:07:f2:73:21:b2:12:54:31: 8d:84:a7:67:0c:c5:10:61:b9:d3:5d:f4:2a:bb:ed:ee:e9:dc: 98:cb:c8:3a:b8:54:49:23:a7:39:6c:af:26:4b:f4:62:29:56: b9:b1:a7:10:4e:5f:55:c0:3e:aa:40:ec:40:70:7d:3f:1f:e5: f6:0c:54:71:da:6d:a4:a2:53:4c:76:a2:6c:2f:ac:3c:58:28: e0:f0:df:97:c6:bd:2e:da:a1:a1:0f:20:ad:6b:83:96:2f:b5: cf:d3:a1:28:6a:c7:7c:62:0e:9f:28:0d:d9:bf:94:c6:de:64: 18:90:61:a4:b8:7c:e2:5e:54:a4:25:17:48:b2:3c:4e:65:ac: 5d:42:db:dd:fc:a8:8f:79:51:37:eb:ae:36:58:38:49:37:2d: d5:57:53:27:79:70:7d:13:b6:93:09:9a:e6:c7:e1:70:bc:b1: cc:2c:41:ad:65:2b:0c:2a:8a:1a:9a:6d:2b:53:48:41:18:d0: 75:4b:f7:69:b6:58:6c:34:6f:6b:88:49:60:09:ae:9e:f2:91: 87:4c:b4:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtMuDupCsmkmcky9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNDEwMDAyMFoXDTI1MTIyMzExMDAyMFowLzEtMCsGA1UEAxMk ODcwZTQ0ZDctMTE2Zi00YTM1LThkMTAtMjkxNzE3YjQzOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolbA9kkyfIzR/AgHpQVqLTiaHDNbyCfzMO0h vRdgiqXE7gG/jXA6z8ZPEkvkDfaTY0fj200mftstrzotEYzd4WS6nK3701RAVFGd QMNYMc4Y51Jcx/pKFoBjPFk4o1irprPub1QfbJ0FBaBoKAAwnvFwW0iNtk/oxEge DsrocSrZPZ7lx+ZZuZjJu3PLGmjuELqaPL4pBKT9Yt1rIeSersvEiPe+O4faQbQr 0a6l+fgdHToPwenaKbLT+y7BMFweI9s1u8ki+P3buuMLCQ6u9fUamj11qFke3UmT AFjkkMCxSa2JxANH3NFwvn7K/o2GDqXdZDtc66gKs6l9uTZE5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpQyVnXIjTXPjsy+YvPGadvLeREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTY3MDRlY2UtMmQ4OS0z ODQyLWIzYWYtNzUyMWU4YzQzYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvcAGB4DXqAU4jB3PGifPT49ZZDLUJZSji7AYsAH7Bud7+1sa9ljjju ae4KDLEH8nMhshJUMY2Ep2cMxRBhudNd9Cq77e7p3JjLyDq4VEkjpzlsryZL9GIp VrmxpxBOX1XAPqpA7EBwfT8f5fYMVHHabaSiU0x2omwvrDxYKODw35fGvS7aoaEP IK1rg5Yvtc/ToShqx3xiDp8oDdm/lMbeZBiQYaS4fOJeVKQlF0iyPE5lrF1C2938 qI95UTfrrjZYOEk3LdVXUyd5cH0TtpMJmubH4XC8scwsQa1lKwwqihqabStTSEEY 0HVL92m2WGw0b2uISWAJrp7ykYdMtP0= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:36 2025 by rpki-client