$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2f2d0804-c643-36bc-bff2-43fd33327470.roa File: 2f2d0804-c643-36bc-bff2-43fd33327470.roa (raw, json) Hash identifier: +L0toey1wKgf5BYYAf9+1LpWc10Sa8fIRzQ5+B7JQjo= Subject key identifier: 18:38:11:CA:7B:3A:F3:6A:26:05:77:DA:C2:16:A1:05:07:51:BD:4F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B3F623029E4261C9A6FB51500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2f2d0804-c643-36bc-bff2-43fd33327470.roa Signing time: Fri 19 Sep 2025 15:21:28 +0000 ROA not before: Fri 19 Sep 2025 15:21:28 +0000 ROA not after: Thu 18 Dec 2025 16:21:28 +0000 asID: 5650 IP address blocks: 209.101.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:62:30:29:e4:26:1c:9a:6f:b5:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 19 15:21:28 2025 GMT Not After : Dec 18 16:21:28 2025 GMT Subject: CN=b7c35118-e78d-4866-b0a9-d1a2f04da1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:cc:97:be:77:13:e0:6d:0e:91:db:de:c6: c1:58:20:f0:f9:59:54:a0:47:b0:28:00:ba:ae:63: 52:38:b5:73:54:86:0a:f4:32:8f:c6:96:64:1a:5e: 18:18:a8:92:60:e9:a8:fa:fd:9d:e9:89:9f:6b:02: d0:54:3a:8e:5d:41:ce:12:6e:85:f2:e0:56:f6:47: d3:e4:c6:90:17:17:0f:57:ba:45:35:90:e2:29:f5: f2:ed:23:42:81:6a:74:59:4b:05:22:df:30:e8:21: f2:6e:e0:4a:8a:ec:3f:04:3d:14:d9:cf:55:33:0d: ae:f6:9a:2b:b8:51:2d:f5:7e:27:00:f4:78:a8:78: 97:23:85:b1:1b:77:73:cc:46:ec:c6:bb:85:3c:84: 0c:4a:c5:3b:6a:b5:f7:76:01:92:0d:e0:d0:60:db: 29:86:d7:0d:0d:51:03:b4:89:13:5c:85:f5:ec:4b: 61:53:52:6d:4c:36:f2:a7:c4:ac:98:22:98:cb:41: 4e:d1:70:7f:b5:5a:5c:e9:8f:99:c7:7d:87:ca:df: 3a:c9:d8:85:31:84:28:da:76:53:e4:b7:f7:b1:1b: dd:5d:5e:09:59:e2:76:c3:20:85:b5:58:ad:c2:a3: 9f:0f:be:9c:60:1c:2a:c9:35:d3:c7:7e:6d:25:6f: 02:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:38:11:CA:7B:3A:F3:6A:26:05:77:DA:C2:16:A1:05:07:51:BD:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2f2d0804-c643-36bc-bff2-43fd33327470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:85:0e:c1:e4:41:bf:d2:51:c1:e6:27:69:93:51:5f:57:cf: b9:43:8a:90:df:21:b9:8b:11:38:60:6a:21:35:08:e4:87:12: c2:49:18:31:e4:b7:16:73:ac:37:b0:fd:e7:45:88:a2:ec:e9: 55:15:b7:69:2d:29:88:a7:08:3e:6c:02:d5:c6:6f:04:7c:da: 7f:1f:e1:90:95:ad:92:19:a4:aa:a1:e7:93:33:e2:0d:6a:3b: ab:1a:69:f1:88:ec:f3:43:22:d0:53:bb:15:01:b7:59:98:46: 3c:9a:99:52:f0:71:f2:a2:ed:bf:4b:a7:a5:c7:8f:f7:e8:ba: 75:bb:84:6b:82:a8:bf:75:6f:dc:1b:99:10:e4:44:da:09:79: 64:e4:13:f2:c8:02:4a:e3:0e:00:e4:b4:79:18:07:cd:13:5b: 49:04:02:08:32:4a:1f:b3:33:d6:7e:72:f2:c5:49:4c:d8:fb: 5a:82:0f:e1:99:2d:69:64:19:ca:07:89:68:af:5f:1d:53:96: 88:6c:82:c5:41:8b:39:be:81:6f:01:3e:dd:a3:38:eb:19:0d: 15:09:be:91:d0:8c:bb:70:f8:87:c2:e3:91:b9:77:fa:8f:14: c9:73:5d:a4:a2:83:bc:10:27:61:52:c8:b3:59:93:46:b0:c6: 5e:2d:5b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/YjAp5CYcmm+1FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxOTE1MjEyOFoXDTI1MTIxODE2MjEyOFowLzEtMCsGA1UEAxMk YjdjMzUxMTgtZTc4ZC00ODY2LWIwYTktZDFhMmYwNGRhMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL3Ml753E+BtDpHb3sbBWCDw+VlUoEewKAC6 rmNSOLVzVIYK9DKPxpZkGl4YGKiSYOmo+v2d6YmfawLQVDqOXUHOEm6F8uBW9kfT 5MaQFxcPV7pFNZDiKfXy7SNCgWp0WUsFIt8w6CHybuBKiuw/BD0U2c9VMw2u9por uFEt9X4nAPR4qHiXI4WxG3dzzEbsxruFPIQMSsU7arX3dgGSDeDQYNsphtcNDVED tIkTXIX17EthU1JtTDbyp8SsmCKYy0FO0XB/tVpc6Y+Zx32Hyt86ydiFMYQo2nZT 5Lf3sRvdXV4JWeJ2wyCFtVitwqOfD76cYBwqyTXTx35tJW8C8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBg4Ecp7OvNqJgV32sIWoQUHUb1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmYyZDA4MDQtYzY0My0z NmJjLWJmZjItNDNmZDMzMzI3NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqFDsHkQb/SUcHmJ2mTUV9Xz7lDipDfIbmLEThgaiE1COSHEsJJGDHk txZzrDew/edFiKLs6VUVt2ktKYinCD5sAtXGbwR82n8f4ZCVrZIZpKqh55Mz4g1q O6saafGI7PNDItBTuxUBt1mYRjyamVLwcfKi7b9Lp6XHj/founW7hGuCqL91b9wb mRDkRNoJeWTkE/LIAkrjDgDktHkYB80TW0kEAggySh+zM9Z+cvLFSUzY+1qCD+GZ LWlkGcoHiWivXx1TlohsgsVBizm+gW8BPt2jOOsZDRUJvpHQjLtw+IfC45G5d/qP FMlzXaSig7wQJ2FSyLNZk0awxl4tW60= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:35 2025 by rpki-client