$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ab0af8c-06a6-3698-add8-4692816fe6c3.roa File: 1ab0af8c-06a6-3698-add8-4692816fe6c3.roa (raw, json) Hash identifier: 2aAXA7cVSkpAa3EDca7QE7FgaYuSiz9YWvhETmyRPaQ= Subject key identifier: F3:B0:6F:5B:32:9C:5D:08:EE:C6:9A:21:2A:AE:CF:4B:E2:65:36:80 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC78AAE88561F78131EF00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ab0af8c-06a6-3698-add8-4692816fe6c3.roa Signing time: Mon 08 Sep 2025 07:17:30 +0000 ROA not before: Mon 08 Sep 2025 07:17:30 +0000 ROA not after: Sun 07 Dec 2025 08:17:30 +0000 asID: 401783 IP address blocks: 209.101.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:78:aa:e8:85:61:f7:81:31:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:30 2025 GMT Not After : Dec 7 08:17:30 2025 GMT Subject: CN=a4a95a18-bbdc-4016-8a3b-fa73e199cf66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:86:2f:c0:ea:2a:7f:09:d5:35:74:50:3c: 18:75:7b:44:61:82:e0:6c:05:50:e0:3b:12:8e:47: 77:cc:36:fa:90:b9:42:45:03:6d:fc:02:06:d1:ee: 92:79:c7:b5:7a:56:21:ce:39:6b:f9:90:04:cc:1b: 82:ab:00:86:e5:1f:20:41:25:1a:ba:18:52:6d:ef: 72:ef:79:8a:59:35:ba:61:ea:15:30:68:f5:aa:e9: 2e:55:49:6f:cd:61:a4:a8:35:08:41:af:a7:ff:83: bb:c1:72:45:46:51:74:a6:7c:6a:22:84:fe:d2:81: 49:f7:74:ea:76:e9:c3:8a:54:6f:5a:fa:d4:df:f2: c6:0a:eb:69:38:bc:57:36:bd:11:bf:7d:7a:0f:b9: 1e:50:69:8c:d1:b9:64:53:ed:79:40:fa:4d:57:8a: 3e:ca:79:50:67:b3:58:c8:8c:a8:07:9d:4f:0c:ad: 49:41:a5:86:13:7d:7c:f7:12:ce:4f:1d:b5:58:ab: 16:84:12:6e:1d:3a:b6:e6:f1:1b:e6:74:2c:b5:f2: 1a:94:bb:a2:6e:dd:14:6e:d2:0c:fe:06:b9:e7:d6: 94:7a:e0:6e:43:b3:5a:75:44:54:9e:a6:18:56:38: 31:de:8e:32:27:4b:86:5b:1d:24:60:bb:ef:d8:ce: f8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B0:6F:5B:32:9C:5D:08:EE:C6:9A:21:2A:AE:CF:4B:E2:65:36:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ab0af8c-06a6-3698-add8-4692816fe6c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:0c:c2:70:40:d5:ee:6e:c5:bb:de:58:86:67:25:da:cf:e0: 79:14:ba:e2:8d:7e:4f:71:3e:49:f1:f3:01:d3:af:d7:65:bc: 38:28:30:3c:6f:9e:01:93:18:76:69:96:3c:fe:8c:8c:5f:93: 66:68:05:6c:67:77:3b:83:7d:65:f0:4f:37:12:7f:62:8a:3c: ef:55:7c:eb:44:c5:43:13:52:72:f9:2c:51:b6:48:1a:ad:ef: 81:83:1b:f4:39:a9:e6:94:c3:4f:34:69:78:70:d9:1d:c9:0d: 2d:04:3d:14:15:c1:94:e9:cb:98:a4:33:07:18:dc:f7:db:12: 1d:ad:0e:dd:b4:11:7b:a8:0e:fe:22:64:a6:7f:6f:67:2c:1f: 62:93:2c:55:d0:bc:50:52:f9:16:8a:a7:6d:e3:4e:f5:2b:a6: 6f:72:c6:0c:93:d0:1c:31:9b:0a:1c:da:62:4a:67:b1:b5:ae: a1:b0:ff:db:f7:de:58:68:29:3c:a4:ff:6b:09:ad:e6:08:7c: 26:7a:b8:e2:28:09:1a:7a:e1:6e:ec:a0:3d:b6:83:88:dc:54: 31:5a:55:e6:e9:8f:7d:5c:b8:19:bc:8f:01:7e:1b:50:2a:c5: 67:1a:81:47:67:2f:77:81:6c:45:63:cd:bd:61:db:0e:07:49: 01:4e:00:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvHiq6IVh94Ex7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTczMFoXDTI1MTIwNzA4MTczMFowLzEtMCsGA1UEAxMk YTRhOTVhMTgtYmJkYy00MDE2LThhM2ItZmE3M2UxOTljZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijCGL8DqKn8J1TV0UDwYdXtEYYLgbAVQ4DsS jkd3zDb6kLlCRQNt/AIG0e6Sece1elYhzjlr+ZAEzBuCqwCG5R8gQSUauhhSbe9y 73mKWTW6YeoVMGj1qukuVUlvzWGkqDUIQa+n/4O7wXJFRlF0pnxqIoT+0oFJ93Tq dunDilRvWvrU3/LGCutpOLxXNr0Rv316D7keUGmM0blkU+15QPpNV4o+ynlQZ7NY yIyoB51PDK1JQaWGE3189xLOTx21WKsWhBJuHTq25vEb5nQstfIalLuibt0UbtIM /ga559aUeuBuQ7NadURUnqYYVjgx3o4yJ0uGWx0kYLvv2M74XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOwb1synF0I7saaISquz0viZTaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWFiMGFmOGMtMDZhNi0z Njk4LWFkZDgtNDY5MjgxNmZlNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsMwnBA1e5uxbveWIZnJdrP4HkUuuKNfk9xPknx8wHTr9dlvDgoMDxv ngGTGHZpljz+jIxfk2ZoBWxndzuDfWXwTzcSf2KKPO9VfOtExUMTUnL5LFG2SBqt 74GDG/Q5qeaUw080aXhw2R3JDS0EPRQVwZTpy5ikMwcY3PfbEh2tDt20EXuoDv4i ZKZ/b2csH2KTLFXQvFBS+RaKp23jTvUrpm9yxgyT0Bwxmwoc2mJKZ7G1rqGw/9v3 3lhoKTyk/2sJreYIfCZ6uOIoCRp64W7soD22g4jcVDFaVebpj31cuBm8jwF+G1Aq xWcagUdnL3eBbEVjzb1h2w4HSQFOALY= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:31 2025 by rpki-client