$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/483d718a-06cd-3aaa-8877-5984252296e1.roa File: 483d718a-06cd-3aaa-8877-5984252296e1.roa (raw, json) Hash identifier: sO12StXG6Jy7wzDMENJ0nHK8CNZLwINCfCnGP7JzYfY= Subject key identifier: A5:7B:F9:C4:9D:00:FD:A8:B7:A3:9C:04:DE:90:1D:E5:46:94:F5:5C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B7993C13671F2EF21E48840C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/483d718a-06cd-3aaa-8877-5984252296e1.roa Signing time: Fri 10 Oct 2025 11:38:13 +0000 ROA not before: Fri 10 Oct 2025 11:38:13 +0000 ROA not after: Thu 08 Jan 2026 12:38:13 +0000 asID: 9304 IP address blocks: 209.101.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:93:c1:36:71:f2:ef:21:e4:88:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 11:38:13 2025 GMT Not After : Jan 8 12:38:13 2026 GMT Subject: CN=128d1315-4503-4ce6-9a30-82ed98164e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b6:09:6f:60:fe:ad:f7:ea:f1:19:bd:36:f8: f5:3a:da:fd:50:9a:68:f2:7e:a6:0d:df:89:5a:07: cb:ac:b7:49:a0:74:c7:39:d9:23:92:c0:c9:92:87: 79:12:15:b8:c8:11:d6:b3:eb:c7:05:91:50:61:81: f3:3b:86:b3:a6:07:76:e5:9c:d4:72:7e:b2:44:64: 4a:31:ee:b4:73:6c:19:6a:73:c6:f4:69:1f:d9:55: 50:b3:19:e3:d3:a6:ad:50:5e:4c:cd:cf:78:78:74: 12:9d:59:d3:5f:5b:04:2a:1c:42:d0:c5:11:b3:5f: 55:bc:30:56:a1:dc:59:a6:5d:cf:3f:4f:cf:00:f7: 04:f9:c7:5e:a8:f9:e4:ba:32:1c:be:44:23:d3:3d: 7d:bd:1a:b0:1c:fc:b2:9b:15:5a:2e:59:38:31:22: d9:9b:3a:d6:a8:d6:01:df:af:58:ef:11:4a:3c:45: 46:dc:cb:cf:28:6c:40:e5:30:8c:85:1c:10:35:db: ef:49:10:ad:9f:bb:e4:37:c7:8e:c7:ea:82:3b:50: 55:31:aa:eb:9d:26:94:d0:fb:25:12:78:20:1e:37: d3:b3:9f:5c:87:b9:93:84:7d:90:cc:58:25:4f:39: bd:c4:e7:73:fb:e5:f4:2d:52:9e:88:58:63:e4:0b: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7B:F9:C4:9D:00:FD:A8:B7:A3:9C:04:DE:90:1D:E5:46:94:F5:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/483d718a-06cd-3aaa-8877-5984252296e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:87:0a:a3:8d:7f:aa:65:34:76:45:89:ff:15:ba:ef:40:03: d4:b0:45:cc:b4:44:9a:8f:74:ba:25:15:ef:df:2c:39:64:2c: 49:82:61:0c:c2:fb:6d:35:81:54:ee:86:ad:6f:76:1a:8d:73: 92:57:24:57:7c:ba:d3:69:a5:cd:0e:78:29:a9:ec:7f:27:0a: ab:1a:b5:7b:bb:04:14:f3:fe:08:52:fc:57:e7:f7:5c:4c:ba: 8e:1c:98:b8:9d:7d:06:5d:30:fd:52:89:79:0d:eb:3e:e5:d2: b0:e4:5f:be:9b:05:31:bb:21:83:cc:66:e9:e2:bc:57:a2:02: d4:58:54:bd:9d:42:97:b1:7f:fc:d1:c4:d4:42:47:12:68:ad: 74:7c:5e:41:f1:d5:3c:1d:b6:37:06:25:36:35:18:a7:14:90: 0f:6f:3b:69:81:c2:20:cb:0e:07:b9:ca:87:42:80:b2:7f:a0: 9a:b4:60:2a:f3:6b:37:9d:b9:73:e9:48:16:e4:0a:26:25:e3: fb:e8:35:5c:67:a6:03:93:39:dc:dc:f6:98:b6:33:2f:f9:72: 43:e3:a9:45:57:dd:43:8c:8d:39:5e:bf:98:cc:93:f2:50:c7: 3c:08:99:17:85:f9:b7:0c:8c:7e:17:71:82:2b:47:83:51:12: e6:da:4f:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5k8E2cfLvIeSIQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDExMzgxM1oXDTI2MDEwODEyMzgxM1owLzEtMCsGA1UEAxMk MTI4ZDEzMTUtNDUwMy00Y2U2LTlhMzAtODJlZDk4MTY0ZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLYJb2D+rffq8Rm9Nvj1Otr9UJpo8n6mDd+J WgfLrLdJoHTHOdkjksDJkod5EhW4yBHWs+vHBZFQYYHzO4azpgd25ZzUcn6yRGRK Me60c2wZanPG9Gkf2VVQsxnj06atUF5Mzc94eHQSnVnTX1sEKhxC0MURs19VvDBW odxZpl3PP0/PAPcE+cdeqPnkujIcvkQj0z19vRqwHPyymxVaLlk4MSLZmzrWqNYB 369Y7xFKPEVG3MvPKGxA5TCMhRwQNdvvSRCtn7vkN8eOx+qCO1BVMarrnSaU0Psl EnggHjfTs59ch7mThH2QzFglTzm9xOdz++X0LVKeiFhj5AvfAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV7+cSdAP2ot6OcBN6QHeVGlPVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDgzZDcxOGEtMDZjZC0z YWFhLTg4NzctNTk4NDI1MjI5NmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOHCqONf6plNHZFif8Vuu9AA9SwRcy0RJqPdLolFe/fLDlkLEmCYQzC +201gVTuhq1vdhqNc5JXJFd8utNppc0OeCmp7H8nCqsatXu7BBTz/ghS/Ffn91xM uo4cmLidfQZdMP1SiXkN6z7l0rDkX76bBTG7IYPMZunivFeiAtRYVL2dQpexf/zR xNRCRxJorXR8XkHx1TwdtjcGJTY1GKcUkA9vO2mBwiDLDge5yodCgLJ/oJq0YCrz azeduXPpSBbkCiYl4/voNVxnpgOTOdzc9pi2My/5ckPjqUVX3UOMjTlev5jMk/JQ xzwImReF+bcMjH4XcYIrR4NREubaTxo= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:32 2025 by rpki-client