$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f4b230f-b552-310b-83dc-034e6fbe5ffe.roa File: 4f4b230f-b552-310b-83dc-034e6fbe5ffe.roa (raw, json) Hash identifier: X/Pp7DTkainsG04c1BOL2oFzLUXIJsmzPE9tUig0rUE= Subject key identifier: 0A:87:6D:4E:35:38:D0:B5:D0:79:54:2C:11:06:8D:04:D7:8B:A2:A5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B5DBFB8192FB30C7504ABD7A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f4b230f-b552-310b-83dc-034e6fbe5ffe.roa Signing time: Tue 30 Sep 2025 12:24:10 +0000 ROA not before: Tue 30 Sep 2025 12:24:10 +0000 ROA not after: Mon 29 Dec 2025 13:24:10 +0000 asID: 9304 IP address blocks: 209.101.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:bf:b8:19:2f:b3:0c:75:04:ab:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 30 12:24:10 2025 GMT Not After : Dec 29 13:24:10 2025 GMT Subject: CN=fecf8ff3-ab48-4a13-8a62-13f518ebc432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dc:cb:56:2f:dd:8d:25:38:37:7d:91:68:fa: cb:89:3d:74:1a:2c:9f:c0:f4:bf:f0:1d:12:0e:0b: 8e:43:86:ac:ec:f8:28:8b:5e:62:7e:79:45:10:df: 41:84:98:52:41:29:e7:54:1d:2d:77:37:e8:6f:2c: 9b:ea:63:1e:9b:ee:4b:22:f9:2d:c4:91:9a:52:66: 46:86:ce:c8:60:97:6a:d9:71:2c:4e:40:bf:9d:6d: cd:82:4b:44:de:43:b9:f5:fd:0c:84:14:e2:3b:46: 30:a5:09:f7:02:3b:18:f9:c3:82:37:a7:b2:e2:be: 26:74:12:cd:88:a5:13:09:07:22:36:3e:db:40:0b: b7:5c:ee:97:58:8e:55:d1:18:11:ba:3c:c0:fa:a4: 81:36:07:22:52:8e:9b:03:64:15:99:4a:75:e6:83: 9b:cb:3a:6b:d2:c5:8c:a7:b9:31:67:37:e9:04:71: 30:50:51:f7:27:ac:41:07:59:2e:72:1e:8f:82:9f: 6e:7e:1a:e8:a6:2f:64:16:ac:25:ab:8c:95:b6:1e: 1e:2c:25:ff:10:90:82:11:77:b2:eb:45:81:66:37: 24:0e:54:ba:b2:b6:14:dd:0e:4b:af:58:ec:57:5a: 6a:b0:9d:94:f1:fb:a1:fe:34:69:68:f8:b6:ef:a2: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:87:6D:4E:35:38:D0:B5:D0:79:54:2C:11:06:8D:04:D7:8B:A2:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f4b230f-b552-310b-83dc-034e6fbe5ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:1c:8f:b5:3d:60:64:93:25:46:83:7f:09:a8:ef:76:44:31: 7f:e8:e1:fd:a4:fb:a9:09:8f:6c:4c:b3:2f:15:2a:fe:16:38: bc:d0:57:55:df:26:5b:c8:20:90:7a:89:6a:44:e8:3c:87:83: f5:16:36:39:d2:ea:4d:80:f9:c5:d8:d7:ac:51:67:13:38:54: 87:af:ff:22:fb:9e:ae:46:b7:3a:97:f3:fc:2e:dd:4c:94:a4: fe:c4:83:b4:dd:9c:ee:7e:3b:cd:82:a2:69:92:30:3c:03:15: f1:3c:7f:3b:4b:81:33:db:cd:f8:01:60:2b:f3:04:28:34:11: f1:5d:d8:4d:5c:2e:a5:46:bb:cf:27:5f:52:3a:24:67:3b:e2: 56:ac:86:9b:2e:29:56:6d:e0:5c:c7:6a:28:c5:94:fe:b9:27: 08:0b:6b:34:40:cf:68:66:7c:fd:ca:3a:e8:12:68:0f:eb:a5: 44:20:6c:b8:62:8e:4f:ff:b5:3d:17:a1:41:92:72:62:e1:3c: 02:f9:5c:ea:10:c3:54:eb:9c:e7:c7:e2:1b:18:09:89:b8:aa: f0:59:47:e5:76:b1:02:04:10:ce:a0:6e:f1:c7:2c:b0:ad:27: 2a:5d:66:40:d6:7d:f2:32:bd:d2:68:10:a1:d5:e9:cd:2c:79: 03:32:40:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtdv7gZL7MMdQSr16AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkzMDEyMjQxMFoXDTI1MTIyOTEzMjQxMFowLzEtMCsGA1UEAxMk ZmVjZjhmZjMtYWI0OC00YTEzLThhNjItMTNmNTE4ZWJjNDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9zLVi/djSU4N32RaPrLiT10GiyfwPS/8B0S DguOQ4as7Pgoi15ifnlFEN9BhJhSQSnnVB0tdzfobyyb6mMem+5LIvktxJGaUmZG hs7IYJdq2XEsTkC/nW3NgktE3kO59f0MhBTiO0YwpQn3AjsY+cOCN6ey4r4mdBLN iKUTCQciNj7bQAu3XO6XWI5V0RgRujzA+qSBNgciUo6bA2QVmUp15oObyzpr0sWM p7kxZzfpBHEwUFH3J6xBB1kuch6Pgp9ufhropi9kFqwlq4yVth4eLCX/EJCCEXey 60WBZjckDlS6srYU3Q5Lr1jsV1pqsJ2U8fuh/jRpaPi276JukQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqHbU41ONC10HlULBEGjQTXi6KlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGY0YjIzMGYtYjU1Mi0z MTBiLTgzZGMtMDM0ZTZmYmU1ZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIcj7U9YGSTJUaDfwmo73ZEMX/o4f2k+6kJj2xMsy8VKv4WOLzQV1Xf JlvIIJB6iWpE6DyHg/UWNjnS6k2A+cXY16xRZxM4VIev/yL7nq5GtzqX8/wu3UyU pP7Eg7TdnO5+O82CommSMDwDFfE8fztLgTPbzfgBYCvzBCg0EfFd2E1cLqVGu88n X1I6JGc74lashpsuKVZt4FzHaijFlP65JwgLazRAz2hmfP3KOugSaA/rpUQgbLhi jk//tT0XoUGScmLhPAL5XOoQw1TrnOfH4hsYCYm4qvBZR+V2sQIEEM6gbvHHLLCt JypdZkDWffIyvdJoEKHV6c0seQMyQCU= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:15 2025 by rpki-client