$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/851de8d9-2750-3806-9435-cfbb2f36af2c.roa File: 851de8d9-2750-3806-9435-cfbb2f36af2c.roa (raw, json) Hash identifier: syUGO4IBt9MBgQBaAqUKaKiGm8chOZSYLoJFuoL7XOY= Subject key identifier: E5:98:C5:F6:29:24:88:4F:6E:FC:18:14:5D:45:0A:DE:89:95:8E:0C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBBCE5793CBEDF746375300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/851de8d9-2750-3806-9435-cfbb2f36af2c.roa Signing time: Mon 08 Sep 2025 07:16:10 +0000 ROA not before: Mon 08 Sep 2025 07:16:10 +0000 ROA not after: Sun 07 Dec 2025 08:16:10 +0000 asID: 401783 IP address blocks: 209.101.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bb:ce:57:93:cb:ed:f7:46:37:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:10 2025 GMT Not After : Dec 7 08:16:10 2025 GMT Subject: CN=824845ae-b3ef-41cc-8d78-bea785b23faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e8:50:f2:4e:84:fa:a7:9a:12:b3:9a:5f:6c: 08:41:fe:9c:70:f9:cf:9a:95:f1:d0:cc:3f:70:4b: 5f:67:a5:f5:af:d5:3c:53:6e:6e:a1:43:7c:1b:54: a9:0f:fb:c7:a2:08:45:dd:6e:7f:02:a1:e7:b6:fe: 0b:ed:2d:62:2c:ed:8e:d0:f3:c6:36:4c:5a:fa:77: c1:76:a0:1a:5a:4f:0f:c2:12:31:2c:c9:3f:23:f7: ff:90:62:1c:ff:38:a1:87:c6:90:9d:11:0e:26:44: ed:13:22:10:cb:5d:69:ae:46:6e:78:42:8a:0b:61: 92:7a:e6:0c:1e:e8:44:d2:5a:20:38:15:b5:68:aa: 96:24:2c:9d:ff:bb:66:7a:7e:9b:62:0a:45:7f:68: 3e:71:c7:c1:6b:e1:22:96:d6:9a:40:ce:9b:4f:29: a4:1f:a8:dc:89:62:6d:40:40:56:6a:26:f1:bf:53: 44:98:ef:64:e3:1f:77:62:5c:4c:cd:88:e7:b6:16: d6:e4:d1:a9:60:20:58:50:c2:84:7b:40:7f:21:f4: 42:c7:74:a7:9a:f7:47:b2:fa:81:2e:86:26:d7:13: 3e:cb:47:d3:de:f8:87:07:41:b7:54:48:e6:1e:37: c8:e5:5b:40:a4:79:16:a2:4e:3d:d9:ff:c5:fd:e8: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:98:C5:F6:29:24:88:4F:6E:FC:18:14:5D:45:0A:DE:89:95:8E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/851de8d9-2750-3806-9435-cfbb2f36af2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ef:23:d7:ca:00:a5:ab:2d:31:8b:e5:06:ea:5f:49:7e:5f: f0:a8:77:b6:ab:ea:a4:ab:a5:26:66:36:26:d5:90:d7:48:8c: 96:ae:7f:57:ce:94:cf:79:3e:08:83:f1:96:8f:60:f5:ba:30: ec:7b:d3:c4:b9:3e:da:8b:f8:19:35:c1:fe:87:c6:c7:37:f6: 90:e0:0c:4b:11:cb:1a:ec:9a:24:75:16:44:f8:e2:c5:36:5c: 9b:8d:33:06:eb:06:00:e4:a5:67:49:6f:0b:f9:37:1a:1d:8e: 5a:de:cf:f8:f2:5a:96:df:e8:98:a1:00:e1:ac:a9:5b:03:f2: f7:3f:76:1a:a0:d2:73:90:ab:46:c4:e5:91:0d:d7:20:ac:ab: 27:57:10:7c:b7:d9:03:77:2c:4c:91:d2:04:5b:41:ed:d5:f6: 46:87:65:3a:cd:bd:20:19:6a:65:11:25:3f:4d:02:f4:fd:ab: db:b7:5d:ef:98:7f:37:f0:26:31:4d:9b:c0:fe:eb:c6:6e:55: 31:14:fa:09:2b:e8:f7:80:ca:8e:f0:ed:6b:77:51:60:75:95: 90:76:9d:b0:da:a6:65:10:5b:63:bd:86:68:7c:8e:13:ea:68: a5:30:88:f9:39:91:fa:22:8d:98:a3:ed:b2:a3:f5:b3:57:c9: 27:2e:ad:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfu85Xk8vt90Y3UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTYxMFoXDTI1MTIwNzA4MTYxMFowLzEtMCsGA1UEAxMk ODI0ODQ1YWUtYjNlZi00MWNjLThkNzgtYmVhNzg1YjIzZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiehQ8k6E+qeaErOaX2wIQf6ccPnPmpXx0Mw/ cEtfZ6X1r9U8U25uoUN8G1SpD/vHoghF3W5/AqHntv4L7S1iLO2O0PPGNkxa+nfB dqAaWk8PwhIxLMk/I/f/kGIc/zihh8aQnREOJkTtEyIQy11prkZueEKKC2GSeuYM HuhE0logOBW1aKqWJCyd/7tmen6bYgpFf2g+ccfBa+EiltaaQM6bTymkH6jciWJt QEBWaibxv1NEmO9k4x93YlxMzYjnthbW5NGpYCBYUMKEe0B/IfRCx3SnmvdHsvqB LoYm1xM+y0fT3viHB0G3VEjmHjfI5VtApHkWok492f/F/ehRpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWYxfYpJIhPbvwYFF1FCt6JlY4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODUxZGU4ZDktMjc1MC0z ODA2LTk0MzUtY2ZiYjJmMzZhZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbvI9fKAKWrLTGL5QbqX0l+X/Cod7ar6qSrpSZmNibVkNdIjJauf1fO lM95PgiD8ZaPYPW6MOx708S5PtqL+Bk1wf6Hxsc39pDgDEsRyxrsmiR1FkT44sU2 XJuNMwbrBgDkpWdJbwv5Nxodjlrez/jyWpbf6JihAOGsqVsD8vc/dhqg0nOQq0bE 5ZEN1yCsqydXEHy32QN3LEyR0gRbQe3V9kaHZTrNvSAZamURJT9NAvT9q9u3Xe+Y fzfwJjFNm8D+68ZuVTEU+gkr6PeAyo7w7Wt3UWB1lZB2nbDapmUQW2O9hmh8jhPq aKUwiPk5kfoijZij7bKj9bNXyScurVs= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:56 2025 by rpki-client