$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa File: 33bcd53a-1310-3cd5-91f3-46979f980f8e.roa (raw, json) Hash identifier: fpYl9+Zk6m9nsqX6nZvsoVSnNGkJN0wpGU9fqTIKI14= Subject key identifier: 13:E5:E9:19:9D:23:F1:E4:9D:71:AF:5D:1C:24:A1:65:F1:80:1F:E5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBCA16527DCC29B6AF36D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa Signing time: Mon 08 Sep 2025 07:17:50 +0000 ROA not before: Mon 08 Sep 2025 07:17:50 +0000 ROA not after: Sun 07 Dec 2025 08:17:50 +0000 asID: 401783 IP address blocks: 209.101.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:a1:65:27:dc:c2:9b:6a:f3:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:50 2025 GMT Not After : Dec 7 08:17:50 2025 GMT Subject: CN=2123c3fa-2a8b-46aa-bf09-7ebf7489e709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a5:5e:53:83:4e:a8:86:58:e5:be:b2:a0:c1: 0c:23:44:e7:08:76:74:75:9a:1f:48:90:30:02:fd: 3b:19:c3:05:0a:8c:fa:bb:9e:41:40:58:6d:8b:4b: 60:22:7f:43:50:a6:7f:94:73:26:b9:a3:e3:ae:c3: 88:a4:83:bd:3c:52:7b:60:98:9a:c7:2b:64:ea:32: e3:d8:a2:df:b9:cf:69:7e:ee:1e:06:e8:74:c7:a8: ad:5d:40:ff:49:e8:1f:a8:e3:11:5f:b6:4a:21:8d: 0b:64:b6:67:fd:27:9b:45:b1:58:1c:e5:b7:0c:32: 91:ba:98:93:4d:98:ab:66:92:79:ea:c0:c3:a8:28: 73:7c:16:6c:14:3a:27:e2:3a:1b:07:c9:70:91:b5: 95:1b:e2:ca:13:0b:e4:81:c3:d7:5c:69:b0:11:0d: 89:6d:94:22:b2:23:42:91:b8:3a:b7:d8:28:bc:61: b7:30:2a:4a:f6:43:47:a5:68:ed:5e:4d:3c:0b:69: e7:ed:90:a0:3a:89:55:55:79:db:f3:8b:ce:f0:d2: fe:99:dc:a6:52:7e:ec:84:23:ec:33:f5:0e:14:06: a6:4f:16:ff:f4:92:7f:62:b5:45:22:9a:61:47:f9: a7:e7:5d:1f:39:d4:b8:4a:3d:2d:54:64:2f:44:22: f0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E5:E9:19:9D:23:F1:E4:9D:71:AF:5D:1C:24:A1:65:F1:80:1F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c5:30:55:cb:22:53:ac:ac:e2:e1:ec:e0:e9:8a:f7:52:96: e5:8d:bd:49:f1:9c:1e:2c:3d:46:98:65:17:69:8a:0d:c0:44: 14:34:73:90:73:c7:f4:f4:30:af:b2:21:25:64:d9:4e:78:ea: 67:95:24:17:b2:6c:b8:19:c5:31:23:ff:83:9d:c0:f8:f6:51: f8:0f:3e:7b:1e:01:bf:86:f5:37:d1:42:0f:f5:a7:e6:2c:67: 2b:d1:90:02:de:84:e4:f1:e9:ee:da:1f:00:bb:80:6e:a6:93: b7:21:75:9e:bb:53:fd:9c:4e:30:1d:99:e6:17:56:33:62:3a: 71:86:d0:c4:57:6a:56:9a:c9:e2:dc:4f:59:ff:33:75:81:27: 77:03:59:48:be:2e:96:1a:97:bf:0f:64:1c:6c:b0:4b:c2:fb: a4:63:a0:39:26:de:04:74:0e:f7:86:9f:3f:28:1b:60:6c:73: d7:6a:c7:e7:bd:ce:61:f8:33:cf:01:b9:17:27:5d:23:62:fa: be:da:5a:74:af:e1:0f:39:7b:e3:a5:b5:eb:03:c7:79:77:83: b7:91:7f:c3:40:74:9e:c8:6d:ba:7d:4c:6b:a4:0f:8f:c1:d5: a5:f7:44:97:da:d6:a0:0c:eb:59:1d:c4:da:58:7e:15:fa:b1: 08:86:a9:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvKFlJ9zCm2rzbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTc1MFoXDTI1MTIwNzA4MTc1MFowLzEtMCsGA1UEAxMk MjEyM2MzZmEtMmE4Yi00NmFhLWJmMDktN2ViZjc0ODllNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KVeU4NOqIZY5b6yoMEMI0TnCHZ0dZofSJAw Av07GcMFCoz6u55BQFhti0tgIn9DUKZ/lHMmuaPjrsOIpIO9PFJ7YJiaxytk6jLj 2KLfuc9pfu4eBuh0x6itXUD/SegfqOMRX7ZKIY0LZLZn/SebRbFYHOW3DDKRupiT TZirZpJ56sDDqChzfBZsFDon4jobB8lwkbWVG+LKEwvkgcPXXGmwEQ2JbZQisiNC kbg6t9govGG3MCpK9kNHpWjtXk08C2nn7ZCgOolVVXnb84vO8NL+mdymUn7shCPs M/UOFAamTxb/9JJ/YrVFIpphR/mn510fOdS4Sj0tVGQvRCLwXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPl6RmdI/HknXGvXRwkoWXxgB/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzNiY2Q1M2EtMTMxMC0z Y2Q1LTkxZjMtNDY5NzlmOTgwZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzFMFXLIlOsrOLh7ODpivdSluWNvUnxnB4sPUaYZRdpig3ARBQ0c5Bz x/T0MK+yISVk2U546meVJBeybLgZxTEj/4OdwPj2UfgPPnseAb+G9TfRQg/1p+Ys ZyvRkALehOTx6e7aHwC7gG6mk7chdZ67U/2cTjAdmeYXVjNiOnGG0MRXalaayeLc T1n/M3WBJ3cDWUi+LpYal78PZBxssEvC+6RjoDkm3gR0DveGnz8oG2Bsc9dqx+e9 zmH4M88BuRcnXSNi+r7aWnSv4Q85e+OltesDx3l3g7eRf8NAdJ7Ibbp9TGukD4/B 1aX3RJfa1qAM61kdxNpYfhX6sQiGqV8= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:59 2025 by rpki-client