$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa File: 22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa (raw, json) Hash identifier: 8uIGOE5rs3Eu2nhrF8POuuHQd+pVzSF+BM7/QrPIH1U= Subject key identifier: 91:06:B2:ED:D3:01:09:5B:9B:FC:EF:4E:1D:CF:2A:C3:B4:81:FD:F0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC7374CCA6F3AC5A895BC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa Signing time: Mon 08 Sep 2025 07:17:28 +0000 ROA not before: Mon 08 Sep 2025 07:17:28 +0000 ROA not after: Sun 07 Dec 2025 08:17:28 +0000 asID: 401783 IP address blocks: 209.101.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:73:74:cc:a6:f3:ac:5a:89:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:28 2025 GMT Not After : Dec 7 08:17:28 2025 GMT Subject: CN=961ae461-bc14-4689-b44a-bdb108db9dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:84:f2:ad:51:61:cc:e2:e2:9b:af:62:36: 25:b7:93:f9:e5:ec:8e:f3:a6:f4:bd:8e:4f:cc:8d: c5:1b:63:e7:18:5c:f6:0e:2c:3d:38:6b:4f:c0:d0: 1d:ca:64:e5:8c:09:29:0c:5a:89:51:98:1a:b2:c2: eb:79:78:b6:6a:88:8b:fd:97:9a:fa:12:b9:bd:a1: 48:08:fb:67:28:d7:72:af:aa:eb:d2:73:09:55:20: 2a:75:a5:f4:17:62:b0:d6:fe:e8:83:56:19:81:6f: 58:d3:f1:e9:25:ec:f3:c4:36:c6:9b:11:4a:4e:70: 74:dd:cf:d1:c1:54:3c:e6:ee:00:85:d1:49:69:36: 5d:10:11:e5:40:47:17:5a:ca:c5:b0:c8:8c:c4:6e: 79:50:12:97:7e:38:9d:a9:2c:89:e5:7b:19:9c:bd: 2c:2d:46:62:39:b9:fa:0b:bd:ff:2a:56:e1:ec:2a: 66:27:db:38:4f:d2:c2:84:b3:33:1e:91:fb:41:77: ed:54:83:ba:3a:23:06:d4:03:fd:89:6f:cb:98:ac: 01:f7:84:ad:1f:43:19:f1:4e:09:45:1a:cc:a1:29: 31:9c:d1:ae:78:7b:c5:f0:0a:c9:66:5f:e6:62:f5: a9:de:15:0e:0d:7c:c9:72:ca:3d:65:ad:be:14:b8: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:06:B2:ED:D3:01:09:5B:9B:FC:EF:4E:1D:CF:2A:C3:B4:81:FD:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b2:f9:34:d6:30:a7:c4:ff:06:0a:b4:37:7d:a1:9e:fb:74: 95:e8:bf:a7:25:e5:75:af:f6:33:d5:a8:9c:86:05:17:42:b9: 5c:bb:b9:f7:cc:8b:d8:ea:cf:d2:61:c5:3c:23:b0:19:71:b6: 1d:1b:1c:86:fc:2f:1a:4a:d2:ca:c3:be:76:b8:32:db:f1:7b: a6:51:bd:c1:69:3e:26:db:31:74:c6:ff:f7:70:c5:f8:5e:f3: 30:7a:37:a3:60:6d:a2:3e:b6:04:06:1f:9a:06:e5:ce:ab:bf: 25:4c:ee:bb:81:dd:81:41:7b:39:95:23:e3:9b:7d:56:c4:65: c5:30:b3:00:58:6f:ba:55:64:45:48:15:6b:93:a5:21:fe:85: df:3e:05:a9:7a:b0:50:ce:1b:6d:56:c2:6e:68:a8:cc:e6:f7: a1:db:9a:32:3f:45:f7:2e:c3:64:c4:39:9e:74:98:7c:17:2b: 58:23:95:9a:0c:0a:84:ce:67:40:5c:6f:b8:05:78:c7:73:05: b1:bc:30:c2:0d:e7:34:63:90:e1:88:8a:85:66:6f:d7:12:01: 6d:25:b3:82:4b:7d:13:4c:16:b9:6b:0a:c9:e5:7e:f4:0b:bb: bd:33:32:11:fd:95:ec:52:3f:80:87:20:55:bf:f8:31:37:27: 5f:aa:44:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvHN0zKbzrFqJW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTcyOFoXDTI1MTIwNzA4MTcyOFowLzEtMCsGA1UEAxMk OTYxYWU0NjEtYmMxNC00Njg5LWI0NGEtYmRiMTA4ZGI5ZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzuE8q1RYczi4puvYjYlt5P55eyO86b0vY5P zI3FG2PnGFz2Diw9OGtPwNAdymTljAkpDFqJUZgassLreXi2aoiL/Zea+hK5vaFI CPtnKNdyr6rr0nMJVSAqdaX0F2Kw1v7og1YZgW9Y0/HpJezzxDbGmxFKTnB03c/R wVQ85u4AhdFJaTZdEBHlQEcXWsrFsMiMxG55UBKXfjidqSyJ5XsZnL0sLUZiObn6 C73/Klbh7CpmJ9s4T9LChLMzHpH7QXftVIO6OiMG1AP9iW/LmKwB94StH0MZ8U4J RRrMoSkxnNGueHvF8ArJZl/mYvWp3hUODXzJcso9Za2+FLg+xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEGsu3TAQlbm/zvTh3PKsO0gf3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjJiMGJmYTAtYmNhZS0z MWM0LWFjM2MtOWExNDJhNjgzOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuy+TTWMKfE/wYKtDd9oZ77dJXov6cl5XWv9jPVqJyGBRdCuVy7uffM i9jqz9JhxTwjsBlxth0bHIb8LxpK0srDvna4Mtvxe6ZRvcFpPibbMXTG//dwxfhe 8zB6N6NgbaI+tgQGH5oG5c6rvyVM7ruB3YFBezmVI+ObfVbEZcUwswBYb7pVZEVI FWuTpSH+hd8+Bal6sFDOG21Wwm5oqMzm96HbmjI/Rfcuw2TEOZ50mHwXK1gjlZoM CoTOZ0Bcb7gFeMdzBbG8MMIN5zRjkOGIioVmb9cSAW0ls4JLfRNMFrlrCsnlfvQL u70zMhH9lexSP4CHIFW/+DE3J1+qRJ0= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:27 2025 by rpki-client