$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e9e8a7a-bcbd-3b77-9848-807cc29fe228.roa File: 4e9e8a7a-bcbd-3b77-9848-807cc29fe228.roa (raw, json) Hash identifier: Mlzu7VfO95N/alghBgOBM/6GLHeH6B7ED7nHqVnHt2k= Subject key identifier: 14:10:04:8B:AD:D2:24:48:D0:E8:97:CF:C0:33:8F:DB:2C:02:62:07 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B53F4F01E7F20A1E61BD8AD80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e9e8a7a-bcbd-3b77-9848-807cc29fe228.roa Signing time: Sat 27 Sep 2025 00:13:19 +0000 ROA not before: Sat 27 Sep 2025 00:13:19 +0000 ROA not after: Fri 26 Dec 2025 01:13:19 +0000 asID: 5650 IP address blocks: 209.101.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:53:f4:f0:1e:7f:20:a1:e6:1b:d8:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 27 00:13:19 2025 GMT Not After : Dec 26 01:13:19 2025 GMT Subject: CN=58493db8-96d2-48ae-b881-a3e74621fb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:ea:a0:c4:7a:31:86:03:0c:0c:ff:00:38: bd:37:e7:69:b5:01:07:3c:08:6a:57:60:47:29:a6: 76:70:ce:58:34:c6:d3:1b:0f:47:b8:6b:59:be:e9: c6:df:47:d8:6c:b2:6f:3c:90:74:64:fe:f8:80:79: e9:0d:44:a8:5a:dc:56:8c:87:8f:7b:cd:76:05:0d: 98:44:39:3e:c1:37:3f:4a:f3:43:f2:2d:b1:73:b2: 74:96:94:e3:7d:c3:c7:d9:41:c7:6c:2b:d4:6b:9a: b0:07:7d:7f:e7:76:8d:7b:49:59:9b:c8:bf:ae:23: a2:be:b5:4a:64:62:d2:59:73:a3:96:20:78:17:68: 62:81:97:53:64:52:05:5e:a7:26:c3:26:85:f2:76: fb:8f:68:64:64:f8:7f:da:69:3d:ca:14:02:13:05: f2:4e:ab:6f:19:4d:f0:ca:1e:9a:cc:cb:ef:7e:c0: aa:89:58:fd:0f:f8:88:11:92:b9:d6:11:0a:a0:c9: 58:08:0d:a7:0d:6a:89:ad:13:13:da:29:d4:ab:cc: 9a:1a:a9:62:11:d5:f3:96:11:3f:8f:c9:4e:bb:6a: 78:88:cf:ef:30:bd:fe:13:f4:68:94:46:55:4d:be: c4:9a:f9:b6:ff:ba:a4:86:ac:29:39:4f:82:d4:bf: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:10:04:8B:AD:D2:24:48:D0:E8:97:CF:C0:33:8F:DB:2C:02:62:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e9e8a7a-bcbd-3b77-9848-807cc29fe228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:38:10:37:94:8d:1d:44:db:f5:0a:32:f7:ba:05:61:d8:b6: ca:96:b6:4c:78:11:72:ab:20:b8:a4:db:18:13:28:8b:18:f8: 7b:6b:17:b6:c3:b3:1c:3d:f1:c4:01:f0:a0:28:d1:e5:fa:bd: b1:f4:57:05:c5:71:e5:15:51:f9:fb:ce:3d:83:24:98:01:84: 26:6b:8c:11:7f:6b:28:11:26:52:54:30:03:b1:1d:bd:20:b5: 74:d6:25:84:49:21:e4:b4:51:df:cc:75:37:f2:38:72:40:8e: f2:d2:09:24:9f:70:26:99:b2:03:c3:3c:7c:bd:9f:08:e5:ca: f7:38:12:0e:a7:a5:07:dd:4b:54:65:20:d1:f9:83:ff:81:a1: 28:8a:2f:4e:59:1e:cd:b9:e7:0e:96:ef:d7:48:61:ae:21:c6: 2b:f1:19:26:51:1d:bc:4f:92:73:c1:bc:1a:62:a4:cb:14:3e: d8:df:c9:f7:71:57:79:4a:15:8e:b3:ec:cf:27:2b:32:ee:ae: 74:77:5e:c2:b1:a4:50:d9:40:09:c7:67:6d:de:72:2a:7d:e9: ba:9e:3a:c0:88:cf:62:d9:ee:a2:aa:a6:e1:b0:98:68:b6:32: 5e:25:4f:ae:f8:08:e1:af:7f:84:8b:b2:95:b4:fd:84:e5:4d: d8:09:2b:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtT9PAefyCh5hvYrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNzAwMTMxOVoXDTI1MTIyNjAxMTMxOVowLzEtMCsGA1UEAxMk NTg0OTNkYjgtOTZkMi00OGFlLWI4ODEtYTNlNzQ2MjFmYjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslLqoMR6MYYDDAz/ADi9N+dptQEHPAhqV2BH KaZ2cM5YNMbTGw9HuGtZvunG30fYbLJvPJB0ZP74gHnpDUSoWtxWjIePe812BQ2Y RDk+wTc/SvND8i2xc7J0lpTjfcPH2UHHbCvUa5qwB31/53aNe0lZm8i/riOivrVK ZGLSWXOjliB4F2higZdTZFIFXqcmwyaF8nb7j2hkZPh/2mk9yhQCEwXyTqtvGU3w yh6azMvvfsCqiVj9D/iIEZK51hEKoMlYCA2nDWqJrRMT2inUq8yaGqliEdXzlhE/ j8lOu2p4iM/vML3+E/RolEZVTb7Emvm2/7qkhqwpOU+C1L/S1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQQBIut0iRI0OiXz8Azj9ssAmIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGU5ZThhN2EtYmNiZC0z Yjc3LTk4NDgtODA3Y2MyOWZlMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI4EDeUjR1E2/UKMve6BWHYtsqWtkx4EXKrILik2xgTKIsY+HtrF7bD sxw98cQB8KAo0eX6vbH0VwXFceUVUfn7zj2DJJgBhCZrjBF/aygRJlJUMAOxHb0g tXTWJYRJIeS0Ud/MdTfyOHJAjvLSCSSfcCaZsgPDPHy9nwjlyvc4Eg6npQfdS1Rl INH5g/+BoSiKL05ZHs255w6W79dIYa4hxivxGSZRHbxPknPBvBpipMsUPtjfyfdx V3lKFY6z7M8nKzLurnR3XsKxpFDZQAnHZ23ecip96bqeOsCIz2LZ7qKqpuGwmGi2 Ml4lT674COGvf4SLspW0/YTlTdgJK6U= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:09 2025 by rpki-client