$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36e3e4e6-480f-38aa-b256-4c1a6e117c83.roa File: 36e3e4e6-480f-38aa-b256-4c1a6e117c83.roa (raw, json) Hash identifier: fcNRRa3kS1i1jupPmuMG+SifRbBbChUU6aj44AI+1IM= Subject key identifier: 45:9B:7B:EE:D9:21:97:6F:3F:B3:F7:D4:22:0D:3A:57:E0:C7:23:77 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBCBAA415CDFCB85983D500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36e3e4e6-480f-38aa-b256-4c1a6e117c83.roa Signing time: Mon 08 Sep 2025 07:18:01 +0000 ROA not before: Mon 08 Sep 2025 07:18:01 +0000 ROA not after: Sun 07 Dec 2025 08:18:01 +0000 asID: 401783 IP address blocks: 209.101.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:ba:a4:15:cd:fc:b8:59:83:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:18:01 2025 GMT Not After : Dec 7 08:18:01 2025 GMT Subject: CN=fab33e2b-cbbb-4e6f-9410-a9c8a6032bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:cc:e9:76:4f:56:9b:9e:82:6f:64:c7:63: be:c9:5c:40:63:ce:45:b6:b1:e1:40:9c:11:3b:b2: cc:9d:02:b0:19:b2:86:c7:d4:1d:82:94:81:be:f3: bc:69:7a:c6:76:19:79:e6:3e:27:71:c1:f5:07:51: da:4f:46:dd:d4:67:68:b0:22:28:a8:d7:18:40:58: ce:a8:9d:fe:54:5b:5f:0a:75:5c:14:da:a4:f2:f7: 85:c8:f7:32:c2:91:94:5e:6a:58:92:ed:07:47:0d: f8:55:6e:90:ee:ff:04:f9:b3:db:68:92:43:1a:70: 66:6a:ae:fa:79:1a:db:c1:e3:45:73:06:dd:e7:a7: 8f:de:7f:00:dc:7e:19:4d:af:a2:bc:4b:a6:d7:fd: 64:cb:a5:e8:fc:e8:1b:da:ca:ab:a2:96:dd:0c:97: 09:42:67:2e:93:cb:30:eb:79:a9:27:0f:30:cc:fc: 92:f3:0b:77:06:ea:80:87:df:d3:d6:38:5e:f9:f6: 9a:f4:36:b0:9e:57:ad:72:bf:d3:2a:86:05:bf:db: 81:9d:d6:2a:e2:23:97:c2:69:e8:40:13:52:02:e9: ea:8c:e1:34:01:4e:e3:31:e3:df:d9:04:3d:de:8a: d4:73:99:0b:ca:1d:77:30:a0:70:e2:b6:97:ef:8b: dc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9B:7B:EE:D9:21:97:6F:3F:B3:F7:D4:22:0D:3A:57:E0:C7:23:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36e3e4e6-480f-38aa-b256-4c1a6e117c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:cb:e7:6c:98:98:d3:c0:bb:22:f1:e2:da:7c:1b:43:bb:5b: 10:99:ee:26:26:8a:82:63:8f:f6:46:26:48:13:6b:69:32:10: ea:0b:07:c8:c0:60:98:9c:07:e4:e0:5c:7f:72:cc:0b:72:c4: d9:3c:42:c5:a6:6e:ae:81:23:54:02:b3:9a:e6:1e:58:a5:d2: 84:65:4e:85:07:eb:b9:5e:9f:bc:49:d3:b1:a4:24:9a:37:7d: 81:78:24:32:5a:ee:76:4f:8c:e2:35:29:c4:01:ea:44:f3:93: 38:91:17:e3:b2:34:ab:20:52:65:97:d3:1d:61:c1:cc:67:76: a2:1d:5f:b8:98:98:d6:5b:da:48:93:d7:22:4d:00:15:45:f9: f7:d5:a9:52:0e:8c:26:2b:50:39:7a:9b:37:e1:9f:6b:c8:f0: 46:04:7b:81:1f:9e:c5:16:38:23:09:98:54:07:f9:0e:6a:62: ae:d2:80:91:ee:15:22:c1:11:c5:54:5e:53:71:25:77:a0:8c: 4a:3e:c2:34:fd:33:ac:d0:46:4a:56:b4:d3:0f:2b:f6:e5:6d: 6c:bb:fb:4a:cb:0d:7f:61:ef:19:ca:a0:d8:bd:f1:5a:53:ec: c9:2b:7d:a4:ad:95:9f:79:56:be:76:da:96:0e:ef:77:07:6b: 9d:fc:ea:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvLqkFc38uFmD1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTgwMVoXDTI1MTIwNzA4MTgwMVowLzEtMCsGA1UEAxMk ZmFiMzNlMmItY2JiYi00ZTZmLTk0MTAtYTljOGE2MDMyYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfLM6XZPVpuegm9kx2O+yVxAY85FtrHhQJwR O7LMnQKwGbKGx9QdgpSBvvO8aXrGdhl55j4nccH1B1HaT0bd1GdosCIoqNcYQFjO qJ3+VFtfCnVcFNqk8veFyPcywpGUXmpYku0HRw34VW6Q7v8E+bPbaJJDGnBmaq76 eRrbweNFcwbd56eP3n8A3H4ZTa+ivEum1/1ky6Xo/Ogb2sqropbdDJcJQmcuk8sw 63mpJw8wzPyS8wt3BuqAh9/T1jhe+faa9Dawnletcr/TKoYFv9uBndYq4iOXwmno QBNSAunqjOE0AU7jMePf2QQ93orUc5kLyh13MKBw4raX74vcswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWbe+7ZIZdvP7P31CINOlfgxyN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzZlM2U0ZTYtNDgwZi0z OGFhLWIyNTYtNGMxYTZlMTE3YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHL52yYmNPAuyLx4tp8G0O7WxCZ7iYmioJjj/ZGJkgTa2kyEOoLB8jA YJicB+TgXH9yzAtyxNk8QsWmbq6BI1QCs5rmHlil0oRlToUH67len7xJ07GkJJo3 fYF4JDJa7nZPjOI1KcQB6kTzkziRF+OyNKsgUmWX0x1hwcxndqIdX7iYmNZb2kiT 1yJNABVF+ffVqVIOjCYrUDl6mzfhn2vI8EYEe4EfnsUWOCMJmFQH+Q5qYq7SgJHu FSLBEcVUXlNxJXegjEo+wjT9M6zQRkpWtNMPK/blbWy7+0rLDX9h7xnKoNi98VpT 7MkrfaStlZ95Vr522pYO73cHa5386p0= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:57 2025 by rpki-client