$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a3e2938-b599-3768-9323-b1d23b5e42fd.roa File: 2a3e2938-b599-3768-9323-b1d23b5e42fd.roa (raw, json) Hash identifier: bOgKXSe9d3CBZk07SB48FSwHLBwrBBxaS7nMDCBBQl8= Subject key identifier: 21:B0:2A:C9:D6:1A:80:63:46:68:E3:3E:9F:33:5E:C8:D8:F5:B1:0E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBBF8533A91EBD42B175590 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a3e2938-b599-3768-9323-b1d23b5e42fd.roa Signing time: Mon 08 Sep 2025 07:16:30 +0000 ROA not before: Mon 08 Sep 2025 07:16:30 +0000 ROA not after: Sun 07 Dec 2025 08:16:30 +0000 asID: 401783 IP address blocks: 209.101.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bb:f8:53:3a:91:eb:d4:2b:17:55:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:30 2025 GMT Not After : Dec 7 08:16:30 2025 GMT Subject: CN=d6a7efae-5da1-4e04-808b-2cfc28ba5951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:96:51:8f:cf:4b:89:0f:34:db:a8:5b:25: a9:9c:81:f0:8e:93:85:80:9b:da:57:ba:d8:1c:3c: 9a:aa:1e:5f:a8:4a:64:34:b0:ef:96:23:eb:99:2d: ef:39:dd:4a:83:88:fb:52:bb:93:3a:32:25:d4:77: 78:c1:25:f7:ea:2f:a7:97:98:8b:83:a4:3b:34:2e: 06:4e:4e:db:0f:f7:18:55:de:17:71:86:e4:d6:a5: 0e:5b:d6:36:2e:c9:cc:cb:0e:27:04:72:42:4a:14: b8:6b:85:5e:48:b8:60:40:f2:6c:9f:f4:c3:35:b4: a2:62:27:03:fc:3d:3b:32:8d:a4:ee:03:25:bf:0f: 52:17:e2:b2:50:e9:86:c8:ab:20:25:8a:a4:61:7c: 89:54:6d:10:c2:9c:3c:7c:cf:29:ec:07:64:08:f7: e1:7c:6a:05:ec:23:97:be:d6:71:ed:97:f6:c2:43: 58:70:4b:54:b0:80:8c:8e:68:2e:b0:ba:40:2b:83: 1d:0d:f5:21:04:38:11:03:4e:01:ab:8b:45:5e:22: cd:e9:23:4f:ca:70:fc:41:3c:b7:11:c7:b0:8a:d4: c8:54:cf:9e:3d:da:14:e6:ba:ee:4a:73:c2:57:80: 23:4f:28:f7:54:46:fc:27:d8:5e:57:b8:15:c1:b0: 34:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B0:2A:C9:D6:1A:80:63:46:68:E3:3E:9F:33:5E:C8:D8:F5:B1:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a3e2938-b599-3768-9323-b1d23b5e42fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d4:a6:aa:d6:97:3f:a2:69:8c:4f:0f:1c:14:65:8f:f6:00: 2a:45:6a:8e:db:99:3d:d8:3e:1d:04:70:ce:c1:7d:ec:89:87: f4:0b:67:70:8c:9e:e2:17:57:ae:c7:2a:a5:f1:3b:69:fd:dd: a6:81:c3:46:8d:fd:ae:f1:fb:65:23:6b:c6:90:f3:dd:79:b4: 1b:62:20:b9:07:02:35:8a:4e:e9:74:a8:47:60:ad:5b:14:34: ed:6e:09:08:5b:59:99:f9:3c:59:3f:8f:7c:b5:c0:2a:14:00: 56:90:50:f2:e6:0c:53:c5:86:90:52:16:3d:15:b5:4b:b3:b0: d3:c3:ec:0c:3e:9f:90:b4:bd:e5:15:57:53:91:71:43:78:08: 6b:06:1b:df:ff:27:07:e7:71:8e:31:6a:26:63:19:4c:e3:7f: 6b:40:09:85:54:12:4a:af:4e:c8:35:37:d6:fb:53:89:95:91: a5:ec:20:61:99:b6:60:af:45:a8:d8:c6:90:6d:a2:c5:32:11: c2:e8:3e:10:94:40:b0:24:e0:02:b4:21:95:17:aa:a4:1e:b0: 1f:dc:0a:7f:86:26:bc:a5:99:e7:8f:d3:db:98:5c:a5:eb:08: 85:e9:cd:15:94:4c:4b:19:50:7a:18:46:11:35:8e:f8:b5:78: f0:71:d2:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfu/hTOpHr1CsXVZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTYzMFoXDTI1MTIwNzA4MTYzMFowLzEtMCsGA1UEAxMk ZDZhN2VmYWUtNWRhMS00ZTA0LTgwOGItMmNmYzI4YmE1OTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse2WUY/PS4kPNNuoWyWpnIHwjpOFgJvaV7rY HDyaqh5fqEpkNLDvliPrmS3vOd1Kg4j7UruTOjIl1Hd4wSX36i+nl5iLg6Q7NC4G Tk7bD/cYVd4XcYbk1qUOW9Y2LsnMyw4nBHJCShS4a4VeSLhgQPJsn/TDNbSiYicD /D07Mo2k7gMlvw9SF+KyUOmGyKsgJYqkYXyJVG0Qwpw8fM8p7AdkCPfhfGoF7COX vtZx7Zf2wkNYcEtUsICMjmgusLpAK4MdDfUhBDgRA04Bq4tFXiLN6SNPynD8QTy3 EcewitTIVM+ePdoU5rruSnPCV4AjTyj3VEb8J9heV7gVwbA0IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGwKsnWGoBjRmjjPp8zXsjY9bEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmEzZTI5MzgtYjU5OS0z NzY4LTkzMjMtYjFkMjNiNWU0MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrUpqrWlz+iaYxPDxwUZY/2ACpFao7bmT3YPh0EcM7BfeyJh/QLZ3CM nuIXV67HKqXxO2n93aaBw0aN/a7x+2Uja8aQ8915tBtiILkHAjWKTul0qEdgrVsU NO1uCQhbWZn5PFk/j3y1wCoUAFaQUPLmDFPFhpBSFj0VtUuzsNPD7Aw+n5C0veUV V1ORcUN4CGsGG9//JwfncY4xaiZjGUzjf2tACYVUEkqvTsg1N9b7U4mVkaXsIGGZ tmCvRajYxpBtosUyEcLoPhCUQLAk4AK0IZUXqqQesB/cCn+GJrylmeeP09uYXKXr CIXpzRWUTEsZUHoYRhE1jvi1ePBx0nE= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:38 2025 by rpki-client