$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4811f8b7-58fb-3229-9ffa-92bea6971ce3.roa File: 4811f8b7-58fb-3229-9ffa-92bea6971ce3.roa (raw, json) Hash identifier: AV2Ah2euBv71+D1Oh0yXQQKf25NdzHgRFBEu6OXr42M= Subject key identifier: A1:56:10:58:A3:AB:CB:04:1A:30:4D:F9:21:72:B2:56:01:80:B4:B1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4CB82BB2B6534973DC9B2700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4811f8b7-58fb-3229-9ffa-92bea6971ce3.roa Signing time: Wed 24 Sep 2025 10:00:13 +0000 ROA not before: Wed 24 Sep 2025 10:00:13 +0000 ROA not after: Tue 23 Dec 2025 11:00:13 +0000 asID: 400031 IP address blocks: 209.101.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4c:b8:2b:b2:b6:53:49:73:dc:9b:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 24 10:00:13 2025 GMT Not After : Dec 23 11:00:13 2025 GMT Subject: CN=504b03de-7208-438f-98bd-f87465bd9253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:07:e1:fc:88:c9:6e:20:37:70:35:83:c2: 38:02:d3:ed:41:1e:83:36:72:66:06:1b:f5:12:2e: 2a:51:ef:28:bd:f5:da:a0:d6:cc:87:b2:21:09:2d: d4:f9:29:9b:1e:e8:9a:c9:cc:db:ac:61:38:c5:de: 95:0e:aa:27:25:33:d5:32:2f:98:09:10:4c:b0:3e: 9b:5f:b3:55:0d:4c:68:4a:4e:4c:5a:8f:2c:09:22: 4f:c1:3c:d1:6a:fe:1d:9a:30:24:fa:6c:09:11:f5: 44:9d:80:f4:a3:21:af:13:a7:1f:0f:be:ba:cc:78: 29:65:95:56:c1:ac:1f:1a:cc:03:37:81:d4:b7:f0: cd:aa:f7:af:de:98:78:29:7a:46:67:0d:1f:0b:3b: 19:46:fd:d2:65:8c:84:7a:a3:6b:be:d8:36:8e:fb: 9e:a3:6d:12:d8:d3:a5:61:ab:82:2e:c9:45:d7:ed: 20:de:62:44:18:3d:06:54:70:63:6e:ea:1d:bb:d5: b1:62:5e:b1:d9:ae:39:96:38:b2:69:fe:07:d8:70: f3:d3:ca:c9:1a:8a:b6:64:90:93:ca:3c:c5:c6:cc: 68:6e:e9:4e:2b:de:51:89:b0:1c:eb:f6:07:f4:92: 0f:d8:4e:40:d9:9c:6c:85:3c:b3:6c:a3:dc:14:f7: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:10:58:A3:AB:CB:04:1A:30:4D:F9:21:72:B2:56:01:80:B4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4811f8b7-58fb-3229-9ffa-92bea6971ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e4:ea:2f:88:97:48:96:93:66:80:f4:c9:47:9d:16:44:9f: 94:06:62:5b:91:ed:5d:34:66:a0:d1:8e:43:55:d6:24:fd:28: 4c:d2:fd:e7:39:46:7f:2a:d9:ef:fd:ec:37:58:6b:ba:4b:59: 11:a2:12:e7:d8:be:ff:b9:36:3d:36:c0:2b:00:56:2e:bd:7a: 51:63:33:81:69:1f:1e:be:a3:e9:2e:ea:e7:5a:bd:50:b6:93: db:be:83:46:33:8e:ec:ef:21:fa:65:01:06:41:8b:af:49:36: 51:c7:4e:3a:90:44:db:5d:73:67:76:9e:22:fa:79:31:47:ae: ce:ef:b7:31:d0:ec:57:10:f5:1b:93:e0:5d:63:9f:46:a1:c5: da:59:9a:26:9b:ef:06:49:53:a0:4b:7e:fd:0b:56:af:a4:a6: 33:de:66:dd:13:f1:bc:02:c5:3b:08:18:45:3b:eb:54:e2:10: 1d:2d:e9:cb:5e:d3:42:e1:30:fb:60:07:8c:ca:ff:de:7a:68: 41:49:0e:e8:b8:c2:c0:52:b5:af:f6:e1:35:02:de:c0:4b:c9: 20:31:33:4a:22:64:81:88:b2:2a:e9:59:d2:5b:20:60:75:78: b0:f8:73:72:ef:0c:c3:6e:d4:96:2f:6d:78:4a:f9:8d:d4:8d: 3e:76:f6:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtMuCuytlNJc9ybJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNDEwMDAxM1oXDTI1MTIyMzExMDAxM1owLzEtMCsGA1UEAxMk NTA0YjAzZGUtNzIwOC00MzhmLTk4YmQtZjg3NDY1YmQ5MjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiIH4fyIyW4gN3A1g8I4AtPtQR6DNnJmBhv1 Ei4qUe8ovfXaoNbMh7IhCS3U+SmbHuiayczbrGE4xd6VDqonJTPVMi+YCRBMsD6b X7NVDUxoSk5MWo8sCSJPwTzRav4dmjAk+mwJEfVEnYD0oyGvE6cfD766zHgpZZVW wawfGswDN4HUt/DNqvev3ph4KXpGZw0fCzsZRv3SZYyEeqNrvtg2jvueo20S2NOl YauCLslF1+0g3mJEGD0GVHBjbuodu9WxYl6x2a45ljiyaf4H2HDz08rJGoq2ZJCT yjzFxsxobulOK95RibAc6/YH9JIP2E5A2ZxshTyzbKPcFPdhdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFWEFijq8sEGjBN+SFyslYBgLSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDgxMWY4YjctNThmYi0z MjI5LTlmZmEtOTJiZWE2OTcxY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WW8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnk6i+Il0iWk2aA9MlHnRZEn5QGYluR7V00ZqDRjkNV1iT9KEzS/ec5 Rn8q2e/97DdYa7pLWRGiEufYvv+5Nj02wCsAVi69elFjM4FpHx6+o+ku6udavVC2 k9u+g0YzjuzvIfplAQZBi69JNlHHTjqQRNtdc2d2niL6eTFHrs7vtzHQ7FcQ9RuT 4F1jn0ahxdpZmiab7wZJU6BLfv0LVq+kpjPeZt0T8bwCxTsIGEU761TiEB0t6cte 00LhMPtgB4zK/956aEFJDui4wsBSta/24TUC3sBLySAxM0oiZIGIsirpWdJbIGB1 eLD4c3LvDMNu1JYvbXhK+Y3UjT529o8= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:46 2025 by rpki-client