$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c0895b7-5b87-3c4f-aa17-bf07666ce11b.roa File: 8c0895b7-5b87-3c4f-aa17-bf07666ce11b.roa (raw, json) Hash identifier: NqjnFNbpECu1vtxAZwdFyExCKRdEYAgxNwPoMIJiPgc= Subject key identifier: C2:EE:57:0A:77:30:DF:76:81:78:EC:77:C8:66:68:24:D3:08:13:65 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBA6A08003AEE1172D36E40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c0895b7-5b87-3c4f-aa17-bf07666ce11b.roa Signing time: Mon 08 Sep 2025 07:13:22 +0000 ROA not before: Mon 08 Sep 2025 07:13:22 +0000 ROA not after: Sun 07 Dec 2025 08:13:22 +0000 asID: 9304 IP address blocks: 209.101.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:ba:6a:08:00:3a:ee:11:72:d3:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:13:22 2025 GMT Not After : Dec 7 08:13:22 2025 GMT Subject: CN=1e4ee6d0-ecf9-430d-a722-29248846a9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:5a:ea:86:5e:29:e8:c3:74:28:eb:75:05: 99:cc:28:96:aa:88:85:4d:4f:a5:ba:9a:e6:8b:e9: e3:72:20:a2:9d:a8:e9:49:38:63:0d:81:db:27:66: 9f:13:67:6a:e1:87:d0:5a:8e:97:17:34:a4:d8:2c: 78:c1:f7:53:cd:0d:18:73:3b:61:59:b7:a4:4d:72: f5:a9:47:2e:8a:1f:c4:cd:de:5e:c7:90:41:2b:38: df:27:15:3d:9a:88:af:ee:39:dc:91:66:35:71:da: 0f:44:61:8a:12:d0:ab:53:00:ee:e2:b2:35:b7:05: 9c:bd:67:84:7f:42:fc:7d:3b:f5:59:9d:77:7d:bb: 60:cf:6b:27:49:f9:eb:07:ef:94:a4:dd:6d:45:f5: c9:aa:d6:3a:16:73:ce:fe:de:ed:55:0d:af:10:87: ad:a6:72:62:33:4f:e9:3f:5f:d5:68:e7:85:e4:5f: a0:99:02:5e:b1:a9:70:2c:b8:11:ce:26:4f:9f:c1: 98:7e:ef:e3:0f:1d:df:fa:0b:d2:01:19:df:f8:87: 96:40:93:c9:b6:f2:cb:ca:25:87:7e:b6:4f:73:6c: dd:82:bf:4f:d9:ae:e7:84:7c:7b:ee:14:23:fc:c8: 34:28:80:a3:76:34:cb:91:b0:9d:2f:1e:e2:0f:5f: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EE:57:0A:77:30:DF:76:81:78:EC:77:C8:66:68:24:D3:08:13:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c0895b7-5b87-3c4f-aa17-bf07666ce11b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1e:d2:2b:83:86:3b:fe:9b:31:64:98:41:93:e4:43:ef:8e: 0c:dd:ea:26:3d:75:9d:15:2b:f0:26:2d:f3:ca:2f:16:40:af: 0d:ca:ff:f4:5b:68:b6:df:ea:11:7e:cf:12:cd:8f:b6:18:5c: 54:17:46:a8:63:d7:a1:6f:09:97:5d:3e:cf:32:86:93:3e:22: 50:b1:35:4b:a8:3f:71:92:44:20:0a:30:50:63:a3:84:b5:f6: 16:d0:c9:02:4b:17:72:3e:ef:81:ea:7a:e1:46:5d:95:f9:b3: b3:82:0e:3f:f0:f4:ea:f3:f7:39:ed:3b:e2:bc:be:14:91:d1: 64:83:e7:a0:ad:9a:b7:7b:d5:b0:f5:c0:7b:ae:b8:d8:74:1e: 4c:45:e7:49:22:ac:23:ad:08:c0:2f:7b:95:d4:98:bf:ee:9e: 66:4c:db:12:19:04:87:d3:2c:a4:39:2c:8c:d7:2b:90:d5:25: 26:30:85:e9:ca:7c:e5:bf:4d:75:a9:18:f4:8a:52:c7:6e:4f: c9:d0:5e:d5:1c:97:83:4a:83:d0:68:17:78:8f:0d:8b:b2:a2: 24:8c:8c:73:d5:7b:c2:68:d0:1f:6a:a8:aa:75:38:62:e4:f4: fb:d3:a5:99:bb:b7:2a:cc:4f:ed:64:d0:e2:28:5e:3b:ea:ef: 08:2b:79:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfumoIADruEXLTbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTMyMloXDTI1MTIwNzA4MTMyMlowLzEtMCsGA1UEAxMk MWU0ZWU2ZDAtZWNmOS00MzBkLWE3MjItMjkyNDg4NDZhOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfBa6oZeKejDdCjrdQWZzCiWqoiFTU+luprm i+njciCinajpSThjDYHbJ2afE2dq4YfQWo6XFzSk2Cx4wfdTzQ0YczthWbekTXL1 qUcuih/Ezd5ex5BBKzjfJxU9moiv7jnckWY1cdoPRGGKEtCrUwDu4rI1twWcvWeE f0L8fTv1WZ13fbtgz2snSfnrB++UpN1tRfXJqtY6FnPO/t7tVQ2vEIetpnJiM0/p P1/VaOeF5F+gmQJesalwLLgRziZPn8GYfu/jDx3f+gvSARnf+IeWQJPJtvLLyiWH frZPc2zdgr9P2a7nhHx77hQj/Mg0KICjdjTLkbCdLx7iD1+wkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLuVwp3MN92gXjsd8hmaCTTCBNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGMwODk1YjctNWI4Ny0z YzRmLWFhMTctYmYwNzY2NmNlMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4e0iuDhjv+mzFkmEGT5EPvjgzd6iY9dZ0VK/AmLfPKLxZArw3K//Rb aLbf6hF+zxLNj7YYXFQXRqhj16FvCZddPs8yhpM+IlCxNUuoP3GSRCAKMFBjo4S1 9hbQyQJLF3I+74HqeuFGXZX5s7OCDj/w9Orz9zntO+K8vhSR0WSD56Ctmrd71bD1 wHuuuNh0HkxF50kirCOtCMAve5XUmL/unmZM2xIZBIfTLKQ5LIzXK5DVJSYwhenK fOW/TXWpGPSKUsduT8nQXtUcl4NKg9BoF3iPDYuyoiSMjHPVe8Jo0B9qqKp1OGLk 9PvTpZm7tyrMT+1k0OIoXjvq7wgreXk= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:14 2025 by rpki-client