$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8dabfae0-422f-36fc-b8a8-a1e4a92bf157.roa File: 8dabfae0-422f-36fc-b8a8-a1e4a92bf157.roa (raw, json) Hash identifier: TFQyTIJcElPjZYynrl6uALPkeNHdA5iySxQF4z1a7lI= Subject key identifier: 3C:B1:FF:53:78:BA:1E:92:B0:68:AC:58:79:29:28:14:D2:25:15:64 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC1EAFF4F3B88C30248C00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8dabfae0-422f-36fc-b8a8-a1e4a92bf157.roa Signing time: Mon 08 Sep 2025 07:16:48 +0000 ROA not before: Mon 08 Sep 2025 07:16:48 +0000 ROA not after: Sun 07 Dec 2025 08:16:48 +0000 asID: 401783 IP address blocks: 209.101.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:1e:af:f4:f3:b8:8c:30:24:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:48 2025 GMT Not After : Dec 7 08:16:48 2025 GMT Subject: CN=0391e41f-0522-4165-9805-65736ee5c578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:08:ca:07:53:8c:d3:ca:4d:a8:6d:0d:74: ce:5f:b4:43:4a:a9:4b:5e:a4:33:b3:c2:19:d0:8f: 70:cf:f3:06:b5:ff:f1:60:5e:3c:5c:1c:11:83:be: cc:19:35:30:5b:04:1b:6a:42:bf:bd:5d:d2:a5:b5: 9a:31:81:2a:57:9c:61:07:ae:97:c4:b0:c7:80:42: f0:ce:41:fa:18:f0:ad:ea:29:c5:3a:dd:80:8e:6d: cd:43:7b:55:fc:c3:f1:a4:47:77:54:74:97:07:b0: b2:cf:6d:2c:bb:7b:7f:cb:b3:19:72:df:9e:c6:6b: b3:7b:14:0f:38:35:8f:c9:45:83:56:76:5a:63:74: 55:b1:fd:63:30:28:f1:1c:5c:1a:31:76:e5:b4:34: b8:1f:f4:d6:fa:1a:41:0e:e5:3d:c5:4b:60:3a:0f: 3d:16:a6:46:14:3b:8b:3b:96:e9:3a:14:dc:3b:92: 7c:1a:89:9f:23:5a:c4:06:a3:7a:34:63:c4:09:3f: 60:f5:8b:7a:3a:e0:ee:f5:a5:86:66:9c:90:32:9c: 7c:5a:d8:50:7f:5d:2a:9d:77:eb:29:8a:ad:2e:3e: d1:db:63:60:fb:10:3c:fc:4a:25:af:61:06:6e:45: 07:ea:6c:76:3c:25:60:aa:5a:31:66:30:5f:c8:24: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B1:FF:53:78:BA:1E:92:B0:68:AC:58:79:29:28:14:D2:25:15:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8dabfae0-422f-36fc-b8a8-a1e4a92bf157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:9a:64:bf:bb:51:09:36:1c:b5:25:fd:7f:c0:c6:61:d4:06: 86:7e:a3:e1:81:cb:6a:f4:bf:9e:d5:f3:69:af:c0:11:ac:85: b5:b7:34:99:2a:91:b9:05:b1:60:e1:f6:47:f6:6a:ce:1d:69: 71:d6:7f:53:c4:3a:9b:93:8d:26:8f:87:e1:49:7e:14:14:af: b5:d3:e4:1f:73:60:21:3f:e4:07:69:ff:d5:bb:ea:c8:f8:a8: 6f:ac:5e:36:69:7e:18:d2:1d:99:17:b8:42:20:98:12:bd:80: 77:8a:fa:0f:3c:37:b5:4a:4e:7f:95:3d:65:3a:a5:c6:b5:e4: 5c:b9:a4:ed:58:c3:5a:29:a7:f0:b8:49:ef:67:4d:8a:00:02: 30:cb:67:d8:d5:06:a0:bc:c1:1f:e9:c4:19:a0:63:29:7f:d7: 23:ba:dd:ed:7c:45:4d:0e:58:d3:3a:cc:a2:36:2f:68:df:1d: 89:ac:71:dd:b0:36:c6:0b:ad:64:c9:f9:f4:97:43:75:23:b9: 12:8d:00:ac:55:34:63:af:4a:0e:07:7b:6d:f4:59:3b:2a:ac: 57:f7:67:3b:74:23:e3:58:88:38:2d:ad:72:ce:e9:6b:3e:7e: 7a:e5:5f:8f:6d:f6:0d:c4:bc:43:40:57:06:f5:cc:c0:58:60: 8b:24:f9:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvB6v9PO4jDAkjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTY0OFoXDTI1MTIwNzA4MTY0OFowLzEtMCsGA1UEAxMk MDM5MWU0MWYtMDUyMi00MTY1LTk4MDUtNjU3MzZlZTVjNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltoIygdTjNPKTahtDXTOX7RDSqlLXqQzs8IZ 0I9wz/MGtf/xYF48XBwRg77MGTUwWwQbakK/vV3SpbWaMYEqV5xhB66XxLDHgELw zkH6GPCt6inFOt2Ajm3NQ3tV/MPxpEd3VHSXB7Cyz20su3t/y7MZct+exmuzexQP ODWPyUWDVnZaY3RVsf1jMCjxHFwaMXbltDS4H/TW+hpBDuU9xUtgOg89FqZGFDuL O5bpOhTcO5J8GomfI1rEBqN6NGPECT9g9Yt6OuDu9aWGZpyQMpx8WthQf10qnXfr KYqtLj7R22Ng+xA8/Eolr2EGbkUH6mx2PCVgqloxZjBfyCQnLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyx/1N4uh6SsGisWHkpKBTSJRVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGRhYmZhZTAtNDIyZi0z NmZjLWI4YTgtYTFlNGE5MmJmMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiaZL+7UQk2HLUl/X/AxmHUBoZ+o+GBy2r0v57V82mvwBGshbW3NJkq kbkFsWDh9kf2as4daXHWf1PEOpuTjSaPh+FJfhQUr7XT5B9zYCE/5Adp/9W76sj4 qG+sXjZpfhjSHZkXuEIgmBK9gHeK+g88N7VKTn+VPWU6pca15Fy5pO1Yw1opp/C4 Se9nTYoAAjDLZ9jVBqC8wR/pxBmgYyl/1yO63e18RU0OWNM6zKI2L2jfHYmscd2w NsYLrWTJ+fSXQ3UjuRKNAKxVNGOvSg4He230WTsqrFf3Zzt0I+NYiDgtrXLO6Ws+ fnrlX49t9g3EvENAVwb1zMBYYIsk+eM= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:13 2025 by rpki-client