$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2724a296-9349-343f-b548-9a82464c7209.roa File: 2724a296-9349-343f-b548-9a82464c7209.roa (raw, json) Hash identifier: oTTMlGEAPSzIhGr6rdwDAWRvutEyI1JiNGsBOvCba1w= Subject key identifier: 76:9B:78:CE:64:36:BA:BB:2F:7C:BC:F0:A0:A7:48:02:55:29:E4:5C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC14C88D28128412CDF180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2724a296-9349-343f-b548-9a82464c7209.roa Signing time: Mon 08 Sep 2025 07:16:43 +0000 ROA not before: Mon 08 Sep 2025 07:16:43 +0000 ROA not after: Sun 07 Dec 2025 08:16:43 +0000 asID: 401783 IP address blocks: 209.101.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:14:c8:8d:28:12:84:12:cd:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:43 2025 GMT Not After : Dec 7 08:16:43 2025 GMT Subject: CN=ca3f7e71-7d39-4391-98d9-28e215d190ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6e:bd:5d:fa:43:a2:ec:0f:3c:e9:ed:d7:f8: f7:db:38:8b:dd:56:a9:96:0d:d9:41:2e:75:03:64: fe:58:34:83:e0:50:99:f6:77:6c:8e:32:d3:f5:fd: e6:09:46:89:6d:8a:14:b4:f4:21:c4:d8:36:13:e0: 60:3a:89:54:d2:76:d9:eb:a1:87:8c:ca:f1:47:5d: 9f:e6:2f:58:cb:ed:66:f5:44:2e:48:e5:70:27:5e: 1c:e8:2f:4a:31:07:17:8e:df:5f:0c:dc:13:43:8c: aa:9f:b1:dd:7b:98:9f:24:53:95:26:b1:e1:f9:73: 1a:fb:ee:9f:bd:32:b4:ff:4e:37:75:41:5e:6c:99: 20:8b:aa:5d:58:21:3f:c0:33:43:76:28:6f:4b:92: 14:a8:bd:c4:2f:33:5a:6d:28:0a:e4:62:9f:06:ce: 24:7e:4b:56:ca:76:eb:e5:1b:68:81:59:32:7c:ed: 98:a9:03:40:7d:fb:e3:eb:ca:0d:5e:dc:28:9c:f1: d9:27:4b:a8:b6:8d:77:66:bf:ab:ae:ec:4d:be:ac: 31:94:f6:b1:37:55:bd:2a:c9:5b:b3:7f:9e:34:da: 39:02:02:db:0d:f8:70:44:bc:eb:6a:f2:fc:a5:cb: 20:7f:17:80:e5:9a:62:be:6e:10:48:9b:2a:d2:6b: 51:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9B:78:CE:64:36:BA:BB:2F:7C:BC:F0:A0:A7:48:02:55:29:E4:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2724a296-9349-343f-b548-9a82464c7209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:35:74:0d:54:ea:fa:5f:64:1d:a6:08:f5:6e:ea:39:7e:c6: cc:93:90:68:f6:32:a9:4d:92:ba:6b:a4:e0:9b:5b:0f:99:37: db:a0:a3:28:8b:2c:0a:e8:24:36:9e:62:fc:7f:ae:76:9f:95: c1:e1:0f:f2:fa:a5:62:bf:83:ca:fb:20:56:0c:7b:f2:61:61: 98:04:8c:9b:c3:9b:fc:a4:82:60:9c:48:06:ff:a0:e8:e2:e6: e1:39:54:30:4c:81:8d:3d:03:ca:e0:0c:0a:3b:0b:4b:ac:c0: ae:07:26:ea:ea:84:9b:35:49:3c:c0:41:40:2d:c4:81:4b:70: b2:96:c6:59:68:80:d6:f0:49:2f:46:84:36:09:59:13:1d:92: e3:c7:cd:7a:78:88:a6:77:f0:f6:f3:3b:1b:e6:ae:c5:eb:38: 31:8b:d1:7f:a3:b9:08:d9:a6:a7:3c:d6:bd:f0:b9:bf:e2:e8: 21:e9:65:53:d6:17:7b:9d:c5:23:ae:cd:45:a1:88:3e:2d:84: 67:ca:91:2e:a8:04:d3:10:54:e3:01:bd:9f:0c:64:b3:bd:4e: 78:46:73:e1:db:d6:fc:11:8a:82:48:9e:2a:fe:92:7f:bd:14: 25:44:0d:8e:0f:7c:b0:9c:f7:9b:9b:e8:b1:df:ad:14:74:8d: 60:2a:3b:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvBTIjSgShBLN8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTY0M1oXDTI1MTIwNzA4MTY0M1owLzEtMCsGA1UEAxMk Y2EzZjdlNzEtN2QzOS00MzkxLTk4ZDktMjhlMjE1ZDE5MGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm69XfpDouwPPOnt1/j32ziL3Vaplg3ZQS51 A2T+WDSD4FCZ9ndsjjLT9f3mCUaJbYoUtPQhxNg2E+BgOolU0nbZ66GHjMrxR12f 5i9Yy+1m9UQuSOVwJ14c6C9KMQcXjt9fDNwTQ4yqn7Hde5ifJFOVJrHh+XMa++6f vTK0/043dUFebJkgi6pdWCE/wDNDdihvS5IUqL3ELzNabSgK5GKfBs4kfktWynbr 5RtogVkyfO2YqQNAffvj68oNXtwonPHZJ0uoto13Zr+rruxNvqwxlPaxN1W9Kslb s3+eNNo5AgLbDfhwRLzravL8pcsgfxeA5Zpivm4QSJsq0mtRGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHabeM5kNrq7L3y88KCnSAJVKeRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjcyNGEyOTYtOTM0OS0z NDNmLWI1NDgtOWE4MjQ2NGM3MjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALo1dA1U6vpfZB2mCPVu6jl+xsyTkGj2MqlNkrprpOCbWw+ZN9ugoyiL LAroJDaeYvx/rnaflcHhD/L6pWK/g8r7IFYMe/JhYZgEjJvDm/ykgmCcSAb/oOji 5uE5VDBMgY09A8rgDAo7C0uswK4HJurqhJs1STzAQUAtxIFLcLKWxllogNbwSS9G hDYJWRMdkuPHzXp4iKZ38PbzOxvmrsXrODGL0X+juQjZpqc81r3wub/i6CHpZVPW F3udxSOuzUWhiD4thGfKkS6oBNMQVOMBvZ8MZLO9TnhGc+Hb1vwRioJInir+kn+9 FCVEDY4PfLCc95ub6LHfrRR0jWAqOxc= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:33 2025 by rpki-client