$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa File: 854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa (raw, json) Hash identifier: DR5rqhqJc8zXXAvBPnIA2thzfxIDc+jVTyIJsJqJIe8= Subject key identifier: E3:E6:EF:66:68:56:4A:20:1F:AE:FB:DF:98:A6:2B:40:49:A2:3B:6B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B79ABC39A8A5868640DD74B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa Signing time: Fri 10 Oct 2025 12:26:36 +0000 ROA not before: Fri 10 Oct 2025 12:26:36 +0000 ROA not after: Thu 08 Jan 2026 13:26:36 +0000 asID: 397630 IP address blocks: 209.101.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:ab:c3:9a:8a:58:68:64:0d:d7:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 12:26:36 2025 GMT Not After : Jan 8 13:26:36 2026 GMT Subject: CN=f2b22de6-9a7a-4ac5-a4f2-9405b5bdf8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2b:81:ab:45:aa:b8:4b:fa:ad:06:9c:df:d1: 1e:ae:7f:37:23:4c:b0:82:73:9a:57:4c:0a:b3:90: 5f:8b:d6:a4:77:78:8d:48:d9:68:c1:ab:d3:5a:12: 54:46:fd:87:08:b5:fe:c7:34:09:cc:f8:4b:9a:94: 1b:16:c8:5c:c1:37:6a:7f:99:54:8e:e2:d5:17:90: 4a:34:1f:21:a1:98:8f:c7:a9:f2:61:bb:4e:44:a6: ab:86:06:df:72:ca:23:4f:b2:b4:a8:0e:01:8a:13: fd:a0:a1:97:27:65:44:3a:c7:0f:51:ca:da:cb:7d: 8c:c4:92:f1:48:6b:3e:96:a9:c6:08:48:81:98:1e: 61:25:b9:b0:f1:75:25:ea:e0:c9:fb:93:2f:75:90: 7c:4c:34:5a:2a:27:ef:bb:02:38:00:07:77:9a:c0: 61:8a:72:03:bb:ac:ce:33:3e:1f:40:c1:23:84:8e: 65:05:78:65:1b:aa:d2:be:ac:f5:60:76:b9:b5:5e: f2:ee:8c:bb:6c:d2:3f:cf:37:56:ac:f6:f6:9b:c7: d3:00:07:75:a3:0a:9b:48:42:a8:3c:7a:92:cc:6b: 9c:b8:b3:95:41:5c:b3:d4:26:a6:5e:63:c8:4e:49: 47:a9:c8:c8:ca:de:d1:4b:28:9d:98:de:03:be:b0: ea:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E6:EF:66:68:56:4A:20:1F:AE:FB:DF:98:A6:2B:40:49:A2:3B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d7:3c:c2:dc:f4:0d:e9:da:38:20:40:31:ce:56:24:53:a1: b0:25:5c:c6:30:86:fb:62:c7:f2:b2:ca:14:45:31:2e:ef:34: 06:ef:85:60:16:48:1d:67:7f:09:19:fb:f0:0e:f3:b7:9e:0f: 1f:d0:a6:15:e6:21:4a:11:0e:68:2e:be:ca:cd:9e:08:0d:77: d6:59:89:6c:ad:2a:77:eb:1d:a4:10:bb:12:ab:8f:7f:c6:13: c2:42:c1:64:89:26:dd:d1:d9:c3:42:de:4a:e9:33:b1:b6:f0: a2:c8:15:c1:21:63:ae:35:43:c4:94:ac:66:fe:4f:f0:74:c7: 7e:08:aa:a2:a7:20:f9:6c:97:31:c4:40:fa:cd:3d:40:72:81: c8:7f:81:57:76:05:83:5c:64:e8:94:d9:82:a2:c1:f6:cf:9d: a7:d6:dd:00:63:43:ec:c0:3d:e5:8c:51:b7:2e:d1:9a:34:e1: 6e:ba:39:c9:8f:af:44:28:1e:7e:e9:65:7d:38:e1:63:72:2a: 0d:c0:67:39:1b:de:43:b7:c4:10:56:b2:a8:66:a7:41:c8:87: 40:e3:1e:25:aa:ed:7d:13:85:9d:c8:72:55:52:b8:75:29:ce: c0:36:98:93:c4:b7:d2:e4:f2:ee:50:d4:8d:15:73:81:bb:92: 22:89:66:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5q8OailhoZA3XS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDEyMjYzNloXDTI2MDEwODEzMjYzNlowLzEtMCsGA1UEAxMk ZjJiMjJkZTYtOWE3YS00YWM1LWE0ZjItOTQwNWI1YmRmOGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyuBq0WquEv6rQac39Eern83I0ywgnOaV0wK s5Bfi9akd3iNSNlowavTWhJURv2HCLX+xzQJzPhLmpQbFshcwTdqf5lUjuLVF5BK NB8hoZiPx6nyYbtORKarhgbfcsojT7K0qA4BihP9oKGXJ2VEOscPUcray32MxJLx SGs+lqnGCEiBmB5hJbmw8XUl6uDJ+5MvdZB8TDRaKifvuwI4AAd3msBhinIDu6zO Mz4fQMEjhI5lBXhlG6rSvqz1YHa5tV7y7oy7bNI/zzdWrPb2m8fTAAd1owqbSEKo PHqSzGucuLOVQVyz1CamXmPITklHqcjIyt7RSyidmN4DvrDq/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPm72ZoVkogH67735imK0BJojtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODU0ZmNhODUtYzVlYi0z YjRhLWFlZTYtOTJiOTRjODNlOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvXPMLc9A3p2jggQDHOViRTobAlXMYwhvtix/KyyhRFMS7vNAbvhWAW SB1nfwkZ+/AO87eeDx/QphXmIUoRDmguvsrNnggNd9ZZiWytKnfrHaQQuxKrj3/G E8JCwWSJJt3R2cNC3krpM7G28KLIFcEhY641Q8SUrGb+T/B0x34IqqKnIPlslzHE QPrNPUBygch/gVd2BYNcZOiU2YKiwfbPnafW3QBjQ+zAPeWMUbcu0Zo04W66OcmP r0QoHn7pZX044WNyKg3AZzkb3kO3xBBWsqhmp0HIh0DjHiWq7X0ThZ3IclVSuHUp zsA2mJPEt9Lk8u5Q1I0Vc4G7kiKJZh0= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:50 2025 by rpki-client