$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8ebd7835-8a02-3287-a229-e464d8043fb6.roa File: 8ebd7835-8a02-3287-a229-e464d8043fb6.roa (raw, json) Hash identifier: r9MYcPSLFlMwYpeJhBUzlbRb556ZXRFCw7KOFf3+e3o= Subject key identifier: B9:62:FE:79:CC:0A:C2:74:D2:8F:21:C4:8E:12:D9:1E:AC:3A:BF:0C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBCDFD9D917305744E92410 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8ebd7835-8a02-3287-a229-e464d8043fb6.roa Signing time: Mon 08 Sep 2025 07:18:19 +0000 ROA not before: Mon 08 Sep 2025 07:18:19 +0000 ROA not after: Sun 07 Dec 2025 08:18:19 +0000 asID: 401783 IP address blocks: 209.101.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:df:d9:d9:17:30:57:44:e9:24:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:18:19 2025 GMT Not After : Dec 7 08:18:19 2025 GMT Subject: CN=6412c4fd-0623-4844-8961-1db9ce1e6033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d5:7d:78:ad:ed:e4:16:6a:a4:cd:ca:39:89: 57:08:94:e7:81:d8:a6:63:6d:5e:ce:b9:1c:43:19: 4a:7d:5d:9f:8a:0f:4c:c6:ff:65:81:de:2a:36:5e: ac:5c:24:50:68:fa:50:e4:2b:a6:20:39:30:e0:60: db:be:8b:73:2d:ff:c3:0d:8a:22:b3:8b:a1:95:93: f9:d3:50:56:85:33:1a:8e:c6:57:d4:bc:dc:84:78: 84:49:15:d7:07:d2:5f:08:44:50:2e:39:4c:43:cb: 42:81:d5:ed:c1:96:c1:77:06:a4:56:65:93:f3:42: c9:80:68:95:6e:5c:95:e0:9e:43:81:30:3b:02:47: 5d:2c:cb:d1:a1:cb:68:6e:1c:21:79:67:14:70:6f: 0b:98:d0:21:a4:00:89:a4:90:8c:68:8b:94:50:4c: da:10:0a:d0:bf:13:aa:b5:69:2a:6b:5e:34:5e:c3: 19:28:90:3b:92:6a:07:51:d5:2b:4e:8b:53:8f:c6: 87:fb:6d:f7:67:02:21:e6:93:ad:cc:77:b4:2b:45: cb:7f:75:7c:ff:81:f4:b8:95:57:62:21:74:04:fd: cf:ac:73:1a:15:8e:4e:7a:e3:cd:02:af:0f:e2:bc: db:7e:a7:45:1c:34:19:79:03:70:f5:99:d2:7f:ea: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:62:FE:79:CC:0A:C2:74:D2:8F:21:C4:8E:12:D9:1E:AC:3A:BF:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8ebd7835-8a02-3287-a229-e464d8043fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8b:6c:51:88:5c:f9:73:d3:f8:a5:05:93:81:34:d8:af:8d: fe:bd:50:ac:1c:a0:c8:3e:e7:71:d4:41:83:36:6e:88:f6:1f: 51:6a:fe:9e:2b:b6:db:be:4c:9f:46:8d:89:cd:c6:c9:9d:b7: 85:dd:fe:b8:de:f3:54:c9:ad:98:79:b2:10:7f:58:02:53:19: 19:e5:a6:a8:19:a4:8f:5b:68:d0:09:da:f1:7a:64:b7:e8:f0: 5a:57:03:30:ff:07:b9:62:5c:97:8c:c8:d1:37:b2:77:1e:d3: 36:b4:6a:ef:1a:e8:77:32:eb:89:a2:66:83:67:01:13:5c:fc: be:13:10:7d:bf:52:94:47:cd:e8:7a:d1:86:e7:3d:72:ad:89: c7:b2:b8:1e:6c:5d:03:c3:f3:40:ce:60:c2:c9:4e:30:f3:db: 5d:d8:e7:74:72:e9:54:84:ce:c1:0c:f2:42:c7:09:82:c8:61: 52:dd:82:8a:d3:a4:c1:c3:5d:fc:bd:2f:aa:3f:0d:56:81:07: 48:b0:0a:9f:bd:fd:b0:8f:75:f9:fa:64:69:9b:fb:4e:01:dd: 2d:93:af:1f:96:45:fa:b9:95:26:1b:e2:d4:ac:9d:ac:e0:aa: fc:5a:53:e0:09:a0:02:0d:9e:42:fd:b2:73:7d:3f:3f:ca:4d: c8:f7:32:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvN/Z2RcwV0TpJBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTgxOVoXDTI1MTIwNzA4MTgxOVowLzEtMCsGA1UEAxMk NjQxMmM0ZmQtMDYyMy00ODQ0LTg5NjEtMWRiOWNlMWU2MDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNV9eK3t5BZqpM3KOYlXCJTngdimY21ezrkc QxlKfV2fig9Mxv9lgd4qNl6sXCRQaPpQ5CumIDkw4GDbvotzLf/DDYois4uhlZP5 01BWhTMajsZX1LzchHiESRXXB9JfCERQLjlMQ8tCgdXtwZbBdwakVmWT80LJgGiV blyV4J5DgTA7AkddLMvRoctobhwheWcUcG8LmNAhpACJpJCMaIuUUEzaEArQvxOq tWkqa140XsMZKJA7kmoHUdUrTotTj8aH+233ZwIh5pOtzHe0K0XLf3V8/4H0uJVX YiF0BP3PrHMaFY5OeuPNAq8P4rzbfqdFHDQZeQNw9ZnSf+rnqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLli/nnMCsJ00o8hxI4S2R6sOr8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGViZDc4MzUtOGEwMi0z Mjg3LWEyMjktZTQ2NGQ4MDQzZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+LbFGIXPlz0/ilBZOBNNivjf69UKwcoMg+53HUQYM2boj2H1Fq/p4r ttu+TJ9GjYnNxsmdt4Xd/rje81TJrZh5shB/WAJTGRnlpqgZpI9baNAJ2vF6ZLfo 8FpXAzD/B7liXJeMyNE3snce0za0au8a6Hcy64miZoNnARNc/L4TEH2/UpRHzeh6 0YbnPXKticeyuB5sXQPD80DOYMLJTjDz213Y53Ry6VSEzsEM8kLHCYLIYVLdgorT pMHDXfy9L6o/DVaBB0iwCp+9/bCPdfn6ZGmb+04B3S2Trx+WRfq5lSYb4tSsnazg qvxaU+AJoAINnkL9snN9Pz/KTcj3Mmk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:59 2025 by rpki-client