$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/69020e06-e623-3e47-92f6-0b5ba902ad45.roa File: 69020e06-e623-3e47-92f6-0b5ba902ad45.roa (raw, json) Hash identifier: DrH0BL3O1e9xcV8d/xUNJoV4bA5/QDVlaAOXb26FSyY= Subject key identifier: 47:F5:4F:71:01:2E:84:D7:14:96:D9:02:03:98:10:65:27:EE:39:64 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBCCE0C6D00513CAB790FC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/69020e06-e623-3e47-92f6-0b5ba902ad45.roa Signing time: Mon 08 Sep 2025 07:18:11 +0000 ROA not before: Mon 08 Sep 2025 07:18:11 +0000 ROA not after: Sun 07 Dec 2025 08:18:11 +0000 asID: 401783 IP address blocks: 209.101.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:ce:0c:6d:00:51:3c:ab:79:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:18:11 2025 GMT Not After : Dec 7 08:18:11 2025 GMT Subject: CN=6f3cba36-1eff-4e6a-83e2-6b2c93352482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:a9:9e:44:e3:ea:f6:84:4d:6a:da:f0:ac: ba:19:76:ea:f0:d0:99:91:cf:c6:18:27:22:b9:54: bc:f4:71:7f:78:ef:5d:a2:d1:99:d1:45:2f:b0:fa: bc:39:1d:9c:0d:1c:53:54:d4:f3:75:7e:16:45:db: 59:1f:3d:ea:03:56:a4:91:56:7d:d8:93:49:c3:2e: 5d:ff:8e:b9:df:91:47:c5:01:b4:e1:9f:15:61:19: e6:70:64:c7:51:9f:ec:fe:f2:8e:53:6a:0f:0c:7f: f7:30:a9:e9:c0:d3:46:a7:8d:bf:36:32:ce:df:47: bb:55:da:fa:71:47:03:e9:65:7d:ed:91:82:c8:72: 39:ce:7b:fd:0a:88:87:84:b5:db:cc:61:f6:7c:62: b0:16:9a:c4:65:31:01:1b:6d:a1:ff:51:34:a7:2e: e9:97:02:6a:08:2d:a6:2e:c2:7b:07:1e:6a:92:2a: 72:3b:a9:50:ac:4e:c8:b0:70:ec:5a:bd:b0:f2:a3: bc:1b:7a:67:11:52:14:48:15:73:ed:de:85:c2:8a: 9e:16:2e:d7:93:c7:28:d0:71:03:85:1b:68:06:65: 4d:f3:06:05:6f:95:37:ac:70:5d:0f:b0:6d:61:14: 0b:5e:3b:0b:eb:d6:6a:2c:93:8a:98:98:85:c4:a6: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F5:4F:71:01:2E:84:D7:14:96:D9:02:03:98:10:65:27:EE:39:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/69020e06-e623-3e47-92f6-0b5ba902ad45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:09:eb:8f:bb:f2:5e:d3:90:45:b2:d7:24:d1:8a:51:a3:90: 51:8d:d7:36:f7:9e:db:7e:3e:3e:7c:7c:c2:97:ae:cf:20:18: db:0e:99:2b:b5:cc:cc:8c:a2:87:23:ae:f4:31:53:79:df:62: 66:a3:02:55:e9:ea:c0:75:7d:af:4d:20:16:b5:0b:77:c1:15: 52:0d:a0:4d:18:ce:ae:65:8b:b0:fd:4d:dc:75:e3:ef:e9:d8: 1a:a0:6e:b1:f7:9e:ad:b5:15:91:29:c7:79:e9:c9:dc:b4:7d: 77:2f:44:9a:82:b4:61:39:5c:1f:5a:0a:2e:a9:e0:62:dd:1d: 3e:f0:e6:1f:df:f5:b4:04:33:76:cb:72:f7:3b:3a:21:1e:a4: b8:1d:6b:b6:83:0c:36:23:e9:a5:46:11:1f:28:22:49:d9:4c: e5:a6:a3:d8:da:7d:32:b7:61:ec:5e:5f:d9:d7:20:a3:8b:ba: 7c:bf:51:3d:e6:4f:1c:4f:cf:41:6f:9d:38:db:b0:cf:04:ee: 98:35:43:df:39:96:68:dc:f4:80:f8:3d:52:2b:81:21:34:c3: da:14:de:ef:08:c5:91:8c:53:ce:7b:b1:a5:d4:9b:3f:41:3f: 4d:ab:59:3e:5b:61:49:45:97:29:eb:7d:c3:20:df:49:45:7a: 70:8a:8d:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvM4MbQBRPKt5D8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTgxMVoXDTI1MTIwNzA4MTgxMVowLzEtMCsGA1UEAxMk NmYzY2JhMzYtMWVmZi00ZTZhLTgzZTItNmIyYzkzMzUyNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYmpnkTj6vaETWra8Ky6GXbq8NCZkc/GGCci uVS89HF/eO9dotGZ0UUvsPq8OR2cDRxTVNTzdX4WRdtZHz3qA1akkVZ92JNJwy5d /46535FHxQG04Z8VYRnmcGTHUZ/s/vKOU2oPDH/3MKnpwNNGp42/NjLO30e7Vdr6 cUcD6WV97ZGCyHI5znv9CoiHhLXbzGH2fGKwFprEZTEBG22h/1E0py7plwJqCC2m LsJ7Bx5qkipyO6lQrE7IsHDsWr2w8qO8G3pnEVIUSBVz7d6FwoqeFi7Xk8co0HED hRtoBmVN8wYFb5U3rHBdD7BtYRQLXjsL69ZqLJOKmJiFxKbfWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf1T3EBLoTXFJbZAgOYEGUn7jlkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjkwMjBlMDYtZTYyMy0z ZTQ3LTkyZjYtMGI1YmE5MDJhZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwJ64+78l7TkEWy1yTRilGjkFGN1zb3ntt+Pj58fMKXrs8gGNsOmSu1 zMyMoocjrvQxU3nfYmajAlXp6sB1fa9NIBa1C3fBFVINoE0Yzq5li7D9Tdx14+/p 2BqgbrH3nq21FZEpx3npydy0fXcvRJqCtGE5XB9aCi6p4GLdHT7w5h/f9bQEM3bL cvc7OiEepLgda7aDDDYj6aVGER8oIknZTOWmo9jafTK3YexeX9nXIKOLuny/UT3m TxxPz0FvnTjbsM8E7pg1Q985lmjc9ID4PVIrgSE0w9oU3u8IxZGMU857saXUmz9B P02rWT5bYUlFlynrfcMg30lFenCKjb4= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:12 2025 by rpki-client