$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa File: 8703fce2-71f2-3ab4-962f-b12e334f9207.roa (raw, json) Hash identifier: PM358YpOKblW6ANk+yKy7p1gWPhr1FUtH4ZqYVp5WEc= Subject key identifier: 88:96:E4:FD:BF:F3:DA:80:94:9E:B6:4A:8E:D4:62:D5:F0:79:8F:EF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBCD2818B92052791D59140 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa Signing time: Mon 08 Sep 2025 07:18:13 +0000 ROA not before: Mon 08 Sep 2025 07:18:13 +0000 ROA not after: Sun 07 Dec 2025 08:18:13 +0000 asID: 401783 IP address blocks: 209.101.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:d2:81:8b:92:05:27:91:d5:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:18:13 2025 GMT Not After : Dec 7 08:18:13 2025 GMT Subject: CN=ec84aae7-3833-400f-9e96-4076a71d7629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:a8:e6:3a:0b:20:01:3b:b8:e0:8a:8d:3a: 8c:ad:4d:a3:0f:e0:ed:74:af:c1:d0:0d:b9:3c:6b: 6d:a0:d8:7c:05:1f:1e:fa:41:43:63:ad:b6:33:91: 4e:f4:aa:af:51:ca:6d:cf:fb:f9:d2:eb:c9:a6:7f: 41:68:33:1a:3e:44:4e:92:7e:44:96:4f:01:93:a0: 37:d9:67:58:e6:82:b1:9e:27:ec:ec:50:fb:a0:32: e5:f4:56:5d:49:41:35:70:8a:b9:5c:28:25:cc:33: e8:03:6c:49:76:a9:07:51:5c:9b:15:f9:12:71:80: 37:b9:45:03:8a:fc:ca:b2:eb:3c:0b:56:5f:16:ad: 3f:d7:df:32:f1:76:40:e6:2e:94:34:13:64:31:f6: d1:ae:88:2b:27:12:90:03:b1:86:20:69:ed:16:36: 27:69:11:f4:32:65:5e:cd:9b:2c:d5:f8:c5:3d:bb: 06:f1:8c:9e:23:f7:89:8a:b2:83:cc:27:a4:4d:2a: ce:49:1e:68:0b:d4:95:b6:ae:b4:c3:00:87:06:7b: 2d:a2:f3:65:94:c3:47:04:20:b2:77:72:a1:b4:67: 76:19:67:07:bd:89:f1:47:40:fc:34:a6:ad:7e:5d: a1:f4:d2:8e:60:f1:00:d8:d2:0f:41:79:0a:19:38: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:96:E4:FD:BF:F3:DA:80:94:9E:B6:4A:8E:D4:62:D5:F0:79:8F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c3:09:0a:32:af:fa:d8:5a:79:ad:31:ab:86:7b:97:36:0d: 4d:c4:4e:9d:f2:56:fb:2f:10:41:d7:02:9c:64:fd:64:91:70: 10:2f:f1:4d:54:7e:1c:5f:13:ed:71:13:ae:9f:70:59:4a:3d: 21:c2:88:95:6f:ad:bd:db:63:b1:3b:5e:77:64:94:da:2a:61: d8:f5:a1:91:ed:d4:a4:f3:85:37:ff:66:7a:3e:e8:e0:39:50: 8e:15:3f:7e:a7:95:17:4a:27:86:72:33:ec:67:22:01:06:44: a1:69:94:a8:19:16:2a:fa:29:2f:4e:00:c8:e6:a1:0b:a6:5f: 0a:68:16:c7:de:49:85:b3:85:ff:f3:8c:0e:3e:41:aa:fd:40: 99:0b:e9:e9:80:0a:2d:e4:5a:4a:45:43:76:1e:b6:83:0f:4f: 8a:96:46:22:8c:7f:23:c1:2b:a8:69:56:e9:ee:de:a4:32:bd: 56:b3:bf:52:04:6e:49:7b:35:65:73:fb:94:9a:40:ce:2c:92: 95:02:d4:62:68:65:15:30:6b:5d:09:9f:5c:3d:d4:bb:e4:d0: bd:2a:75:1d:b6:24:11:65:ae:4c:ad:2a:91:b8:a8:91:76:f4: 18:05:05:b6:18:e1:59:67:ac:ea:a3:2d:9d:75:71:ec:37:78: 77:c1:ba:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvNKBi5IFJ5HVkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTgxM1oXDTI1MTIwNzA4MTgxM1owLzEtMCsGA1UEAxMk ZWM4NGFhZTctMzgzMy00MDBmLTllOTYtNDA3NmE3MWQ3NjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdao5joLIAE7uOCKjTqMrU2jD+DtdK/B0A25 PGttoNh8BR8e+kFDY622M5FO9KqvUcptz/v50uvJpn9BaDMaPkROkn5Elk8Bk6A3 2WdY5oKxnifs7FD7oDLl9FZdSUE1cIq5XCglzDPoA2xJdqkHUVybFfkScYA3uUUD ivzKsus8C1ZfFq0/198y8XZA5i6UNBNkMfbRrogrJxKQA7GGIGntFjYnaRH0MmVe zZss1fjFPbsG8YyeI/eJirKDzCekTSrOSR5oC9SVtq60wwCHBnstovNllMNHBCCy d3KhtGd2GWcHvYnxR0D8NKatfl2h9NKOYPEA2NIPQXkKGTjoSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiW5P2/89qAlJ62So7UYtXweY/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODcwM2ZjZTItNzFmMi0z YWI0LTk2MmYtYjEyZTMzNGY5MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbDCQoyr/rYWnmtMauGe5c2DU3ETp3yVvsvEEHXApxk/WSRcBAv8U1U fhxfE+1xE66fcFlKPSHCiJVvrb3bY7E7XndklNoqYdj1oZHt1KTzhTf/Zno+6OA5 UI4VP36nlRdKJ4ZyM+xnIgEGRKFplKgZFir6KS9OAMjmoQumXwpoFsfeSYWzhf/z jA4+Qar9QJkL6emACi3kWkpFQ3YetoMPT4qWRiKMfyPBK6hpVunu3qQyvVazv1IE bkl7NWVz+5SaQM4skpUC1GJoZRUwa10Jn1w91Lvk0L0qdR22JBFlrkytKpG4qJF2 9BgFBbYY4VlnrOqjLZ11cew3eHfBuiE= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:11 2025 by rpki-client