$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/87722602-f222-3d3f-9cf1-6e82f0552bf7.roa File: 87722602-f222-3d3f-9cf1-6e82f0552bf7.roa (raw, json) Hash identifier: xIiZZhsZbpd+IAyZcLvLkr1RCDC3Ge+sgXvOC3zFHoo= Subject key identifier: A6:66:D5:23:E5:81:BB:97:90:D0:33:DD:49:08:96:52:78:4B:EB:51 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B394CDA7B75CF88DA4B2CDC00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/87722602-f222-3d3f-9cf1-6e82f0552bf7.roa Signing time: Wed 17 Sep 2025 11:03:38 +0000 ROA not before: Wed 17 Sep 2025 11:03:38 +0000 ROA not after: Tue 16 Dec 2025 12:03:38 +0000 asID: 9304 IP address blocks: 209.101.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:4c:da:7b:75:cf:88:da:4b:2c:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 17 11:03:38 2025 GMT Not After : Dec 16 12:03:38 2025 GMT Subject: CN=0369894d-d348-4002-b991-f60d5413f22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:0b:e8:56:3f:bf:8d:2e:74:bc:39:c4:20: 12:17:fd:a4:f2:5b:41:1f:09:d3:73:65:1e:24:c6: 20:c3:ba:1c:e1:98:f3:38:88:fd:00:f1:a4:ed:7b: f3:ac:b0:9f:14:20:d6:b9:d0:b4:f4:28:06:40:83: 3d:95:16:e2:26:f8:71:ce:43:97:2c:1a:1c:a3:b0: 66:5b:32:ad:7b:27:9c:5a:83:4e:de:78:2a:05:af: bd:23:23:9c:fc:cd:73:93:0b:6f:38:25:07:bf:5a: aa:96:b0:4c:a9:56:e3:30:67:fa:06:ed:67:7b:d1: 2f:aa:1b:60:c1:01:8e:76:3b:0c:74:57:5f:87:bf: 57:09:c7:ba:88:da:79:72:f3:c7:c9:ce:f5:c1:6a: 83:a4:09:a8:12:95:76:5f:a2:1c:bb:de:09:3f:ec: 87:74:4a:4f:59:35:35:1b:73:d5:7f:0f:8e:60:e7: 80:93:a5:d6:86:3f:0f:a9:00:5d:2c:42:ef:44:a9: 03:5e:8e:19:90:07:0f:b6:ad:bb:ec:22:ed:43:c2: c0:2f:91:a3:fa:90:05:c0:73:af:34:3c:99:10:46: 07:bb:3c:c2:13:d4:ed:95:1a:0f:aa:c2:73:d6:c0: b0:02:e6:a9:ab:ed:9d:3e:b0:2c:44:6f:2e:c3:9a: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:66:D5:23:E5:81:BB:97:90:D0:33:DD:49:08:96:52:78:4B:EB:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/87722602-f222-3d3f-9cf1-6e82f0552bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:92:9e:9c:cc:cb:84:5d:4f:f9:aa:69:66:61:e9:eb:b3:63: d9:b7:a5:db:5b:fb:23:66:e7:fd:6e:e9:1d:1c:c6:d5:db:6e: 7b:6e:80:b7:28:87:d2:b1:77:b8:c4:1c:a1:96:0a:2e:19:76: a8:8b:2d:1f:24:c1:bc:7c:71:4b:98:cd:ea:d4:bb:d2:01:2b: 60:a2:6e:78:09:d3:5a:7a:58:2d:3e:a2:5d:e9:40:3d:69:17: 2d:a6:74:92:f1:ee:28:45:29:30:cf:b1:98:bf:15:39:cf:fd: 36:0e:09:1c:d3:52:71:7e:46:e4:cb:d6:92:45:8e:34:30:77: 24:75:dc:06:8e:3c:b4:c1:ad:75:3b:51:a5:15:8a:b6:1b:1a: 97:e6:aa:70:23:52:7d:fd:61:80:9f:d3:c5:02:24:b3:9c:42: 7f:57:24:8e:04:da:d4:f7:ee:ad:8c:2c:ac:f4:a3:de:3b:af: a9:d3:45:88:aa:28:1e:f3:31:7e:68:3c:ad:9d:ea:31:88:84: 3c:4c:4f:35:3f:07:8d:86:bc:ef:ec:f4:6e:a6:27:fb:9f:1a: 6a:ff:47:b5:16:43:f9:b0:32:cf:18:30:c8:51:e6:b5:2a:5f: f3:70:0a:b7:19:0d:ff:cb:f4:9f:4b:c6:59:6e:2f:52:5e:9a: d1:da:d4:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5TNp7dc+I2kss3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNzExMDMzOFoXDTI1MTIxNjEyMDMzOFowLzEtMCsGA1UEAxMk MDM2OTg5NGQtZDM0OC00MDAyLWI5OTEtZjYwZDU0MTNmMjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A8L6FY/v40udLw5xCASF/2k8ltBHwnTc2Ue JMYgw7oc4ZjzOIj9APGk7XvzrLCfFCDWudC09CgGQIM9lRbiJvhxzkOXLBoco7Bm WzKteyecWoNO3ngqBa+9IyOc/M1zkwtvOCUHv1qqlrBMqVbjMGf6Bu1ne9Evqhtg wQGOdjsMdFdfh79XCce6iNp5cvPHyc71wWqDpAmoEpV2X6Icu94JP+yHdEpPWTU1 G3PVfw+OYOeAk6XWhj8PqQBdLELvRKkDXo4ZkAcPtq277CLtQ8LAL5Gj+pAFwHOv NDyZEEYHuzzCE9TtlRoPqsJz1sCwAuapq+2dPrAsRG8uw5owVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZm1SPlgbuXkNAz3UkIllJ4S+tRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODc3MjI2MDItZjIyMi0z ZDNmLTljZjEtNmU4MmYwNTUyYmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKSnpzMy4RdT/mqaWZh6euzY9m3pdtb+yNm5/1u6R0cxtXbbntugLco h9Kxd7jEHKGWCi4ZdqiLLR8kwbx8cUuYzerUu9IBK2CibngJ01p6WC0+ol3pQD1p Fy2mdJLx7ihFKTDPsZi/FTnP/TYOCRzTUnF+RuTL1pJFjjQwdyR13AaOPLTBrXU7 UaUVirYbGpfmqnAjUn39YYCf08UCJLOcQn9XJI4E2tT37q2MLKz0o947r6nTRYiq KB7zMX5oPK2d6jGIhDxMTzU/B42GvO/s9G6mJ/ufGmr/R7UWQ/mwMs8YMMhR5rUq X/NwCrcZDf/L9J9LxlluL1JemtHa1Hk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:59 2025 by rpki-client