$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38a6b7d7-e56d-39ca-9ab1-055af39b9f29.roa File: 38a6b7d7-e56d-39ca-9ab1-055af39b9f29.roa (raw, json) Hash identifier: 10aKDblT8Eesz8Aj5wu2NWfyBb5ay6WNxO0C/nt4jcg= Subject key identifier: 3C:17:D9:65:31:87:22:BA:39:C5:FF:EB:55:40:2C:9F:52:F7:EE:0B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B7993D958CEAC72CD1EC0B980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38a6b7d7-e56d-39ca-9ab1-055af39b9f29.roa Signing time: Fri 10 Oct 2025 11:38:24 +0000 ROA not before: Fri 10 Oct 2025 11:38:24 +0000 ROA not after: Thu 08 Jan 2026 12:38:24 +0000 asID: 9304 IP address blocks: 209.101.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:93:d9:58:ce:ac:72:cd:1e:c0:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 11:38:24 2025 GMT Not After : Jan 8 12:38:24 2026 GMT Subject: CN=e2db5a7f-6311-4d16-8ffe-a86d28313c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1d:a3:fd:f7:08:56:37:e6:87:13:5c:30:79: 96:5c:ce:98:a8:c4:b8:9c:6e:01:ed:41:13:c4:15: b5:19:b1:00:99:d0:45:bf:fa:b9:53:97:5f:f8:ab: 66:47:f4:c3:66:bb:9b:ac:fa:e8:6f:b3:d0:b5:79: f0:19:6c:6c:5d:0b:8c:d3:6e:25:c6:45:64:a2:c9: ad:aa:66:f5:f6:04:c9:1d:55:7c:3a:ba:9a:13:cb: 36:0a:14:a7:e1:59:78:65:a7:58:3e:d0:44:88:5f: 22:82:1f:f9:62:2a:a6:92:75:56:aa:2d:65:b1:66: 48:a3:cc:8f:3d:13:6d:ad:5f:81:43:75:4d:41:a3: c9:54:c1:bb:9e:4d:6a:41:d9:a3:72:12:46:29:12: b4:8a:48:7a:79:c9:bd:bb:6c:e6:05:53:81:d7:56: c6:0c:25:8b:c3:25:c1:81:a4:68:fd:79:21:5e:d9: cd:94:76:25:e6:9e:43:f4:20:bc:e4:11:5b:4c:77: 5a:a1:fd:11:b4:69:93:7f:b7:16:87:23:ec:af:08: d2:be:eb:fb:50:4b:79:9a:ca:72:11:81:b1:57:36: 68:47:8d:0a:bd:96:c2:4b:13:28:78:0c:9e:63:1b: 81:4d:ee:3c:44:c6:4d:52:5e:5f:2f:78:3a:f9:15: e6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:17:D9:65:31:87:22:BA:39:C5:FF:EB:55:40:2C:9F:52:F7:EE:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38a6b7d7-e56d-39ca-9ab1-055af39b9f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:03:d1:fb:b4:1f:57:01:02:0c:a0:4f:20:3e:aa:1e:26:52: d9:16:9d:cf:4e:33:74:3e:c1:7f:e4:bb:74:3f:37:ee:4f:4d: da:e7:0f:f4:83:58:a9:47:b6:b1:c3:97:39:4c:d8:93:0e:ba: 26:78:ad:cb:7a:3a:7a:43:bf:ca:90:8f:bb:32:34:9f:28:76: 97:d7:c1:2e:1b:d0:26:e3:84:62:43:ba:88:bc:17:f6:3f:6a: 8a:1e:81:b6:0f:a6:77:f3:44:34:04:d8:5f:cf:0c:66:de:ae: 3b:1e:91:87:00:07:b3:ce:fa:3a:17:e5:5e:d3:c8:94:97:8d: 8a:42:fe:47:67:83:9a:9b:41:54:da:2e:a6:cc:b6:30:01:33: 12:19:e2:b1:75:f7:1a:58:e0:03:47:be:70:78:62:4d:0d:06: 74:53:2b:c0:7e:c9:fa:73:cf:34:4b:c2:23:1c:19:c1:7d:dc: d4:fa:76:81:8e:1c:b9:3c:57:a4:2b:51:3a:6e:48:2a:bf:ef: 03:4a:e0:c1:24:89:bb:aa:2f:4f:32:8e:0a:f5:80:8f:68:ab: 82:cb:9d:0e:21:e7:83:59:45:c8:32:ee:e4:28:a6:0e:2d:72: d6:26:68:2f:82:bb:70:52:4b:48:df:f0:9b:08:ec:61:b9:ec: 3b:dd:d5:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5k9lYzqxyzR7AuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDExMzgyNFoXDTI2MDEwODEyMzgyNFowLzEtMCsGA1UEAxMk ZTJkYjVhN2YtNjMxMS00ZDE2LThmZmUtYTg2ZDI4MzEzYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB2j/fcIVjfmhxNcMHmWXM6YqMS4nG4B7UET xBW1GbEAmdBFv/q5U5df+KtmR/TDZrubrProb7PQtXnwGWxsXQuM024lxkVkosmt qmb19gTJHVV8OrqaE8s2ChSn4Vl4ZadYPtBEiF8igh/5YiqmknVWqi1lsWZIo8yP PRNtrV+BQ3VNQaPJVMG7nk1qQdmjchJGKRK0ikh6ecm9u2zmBVOB11bGDCWLwyXB gaRo/XkhXtnNlHYl5p5D9CC85BFbTHdaof0RtGmTf7cWhyPsrwjSvuv7UEt5mspy EYGxVzZoR40KvZbCSxMoeAyeYxuBTe48RMZNUl5fL3g6+RXmRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwX2WUxhyK6OcX/61VALJ9S9+4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzhhNmI3ZDctZTU2ZC0z OWNhLTlhYjEtMDU1YWYzOWI5ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkD0fu0H1cBAgygTyA+qh4mUtkWnc9OM3Q+wX/ku3Q/N+5PTdrnD/SD WKlHtrHDlzlM2JMOuiZ4rct6OnpDv8qQj7syNJ8odpfXwS4b0CbjhGJDuoi8F/Y/ aooegbYPpnfzRDQE2F/PDGberjsekYcAB7PO+joX5V7TyJSXjYpC/kdng5qbQVTa LqbMtjABMxIZ4rF19xpY4ANHvnB4Yk0NBnRTK8B+yfpzzzRLwiMcGcF93NT6doGO HLk8V6QrUTpuSCq/7wNK4MEkibuqL08yjgr1gI9oq4LLnQ4h54NZRcgy7uQopg4t ctYmaC+Cu3BSS0jf8JsI7GG57Dvd1RA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:26 2025 by rpki-client