$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9e9e968f-f8f2-3d1e-8bf5-91f4b899c553.roa File: 9e9e968f-f8f2-3d1e-8bf5-91f4b899c553.roa (raw, json) Hash identifier: e3XIiVnNf8Uo0AeoKtpfOKSa1mpV+7vGjMqg+m5/gXo= Subject key identifier: F3:5D:F2:63:06:EB:FA:D2:31:40:47:DF:22:E8:75:98:21:70:72:40 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBCDB63AEBAB916108F1C00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9e9e968f-f8f2-3d1e-8bf5-91f4b899c553.roa Signing time: Mon 08 Sep 2025 07:18:17 +0000 ROA not before: Mon 08 Sep 2025 07:18:17 +0000 ROA not after: Sun 07 Dec 2025 08:18:17 +0000 asID: 401783 IP address blocks: 209.101.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:db:63:ae:ba:b9:16:10:8f:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:18:17 2025 GMT Not After : Dec 7 08:18:17 2025 GMT Subject: CN=35e56827-4812-4f20-8121-158fb4545e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:93:f3:4e:3d:70:b5:9f:26:6c:2d:16:b6:4e: 6c:fa:de:5e:8d:2a:49:27:ae:ab:c4:cf:45:4b:c1: 0c:1a:94:df:32:a2:96:93:94:67:89:f1:3f:85:87: 75:4e:f8:24:30:ad:5a:56:b3:a5:45:14:96:ff:e9: 51:57:c7:98:6c:a9:7b:64:03:d3:3e:b3:3a:ac:c7: ab:3e:98:4b:1b:20:ae:9c:dc:80:cb:16:41:14:04: 9d:bf:e3:3b:db:77:18:82:dd:dc:8c:f9:5d:24:1f: 85:d6:5d:65:f7:7a:ff:67:23:b3:2d:54:72:92:fe: 74:0d:77:14:d4:fa:99:19:24:9a:e4:d4:00:1e:7e: 5e:99:fb:55:4f:1d:e8:9c:27:7a:f1:2e:44:a3:45: 22:2d:97:0e:f1:58:10:66:90:c6:67:c0:2c:80:22: 9f:54:23:26:db:80:bb:42:9a:56:91:20:fd:2b:97: b3:f2:7a:57:8b:6f:f5:cc:a3:b8:70:f3:7b:40:bc: 37:81:51:bc:fe:da:21:cb:8a:e4:c0:64:27:c2:77: 43:6f:76:a7:a7:86:a1:47:b9:f8:e3:a1:25:9c:49: e4:01:7c:e1:30:59:c4:da:11:6d:33:a8:67:2c:ec: 64:52:9c:e8:77:96:9f:12:d2:a6:fd:0b:ff:e2:9f: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5D:F2:63:06:EB:FA:D2:31:40:47:DF:22:E8:75:98:21:70:72:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9e9e968f-f8f2-3d1e-8bf5-91f4b899c553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ad:56:21:92:99:9e:53:02:4a:ff:81:5a:69:e4:90:f4:e4: ea:3f:cc:9e:af:e0:84:e5:38:27:68:d6:c4:00:e4:a4:49:c5: 8e:90:f8:d3:ee:a9:1d:e5:6d:79:b3:c7:da:0d:6e:37:db:3a: 61:a0:49:fe:81:41:33:81:5d:ec:09:6b:ed:44:f4:1a:c2:ac: 82:54:6d:3d:ab:ca:80:6d:c8:13:bb:10:1f:1c:b6:3e:60:a5: 6e:0c:8c:62:4e:b0:8d:38:c0:47:a2:f2:ab:fd:4e:e1:4b:25: 08:4e:36:d0:83:5c:87:6c:19:4b:b7:2b:9a:45:b1:02:6e:70: 4a:fe:b7:26:38:70:25:2b:d7:a2:0a:93:2e:39:32:41:f9:5c: 73:3a:b1:14:90:ed:17:a2:63:1b:c2:97:0f:bc:44:d7:a2:72: a1:84:a4:b9:7e:86:8e:1d:ce:8b:17:7c:62:9f:22:b9:00:a4: 13:0c:6b:08:73:a9:e2:8a:04:4f:22:e8:5a:86:2a:91:ad:6e: 5e:08:ec:4f:11:37:f6:5c:3f:1d:75:bc:e1:da:14:fa:5f:60: c9:be:3a:6c:51:e3:c5:c0:b5:df:2c:a3:20:04:b8:29:9d:f8: 70:e1:8d:e0:0c:91:ef:5e:c3:6e:18:f0:01:7e:d6:84:a7:9d: 68:69:a4:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvNtjrrq5FhCPHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTgxN1oXDTI1MTIwNzA4MTgxN1owLzEtMCsGA1UEAxMk MzVlNTY4MjctNDgxMi00ZjIwLTgxMjEtMTU4ZmI0NTQ1ZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5PzTj1wtZ8mbC0Wtk5s+t5ejSpJJ66rxM9F S8EMGpTfMqKWk5RnifE/hYd1TvgkMK1aVrOlRRSW/+lRV8eYbKl7ZAPTPrM6rMer PphLGyCunNyAyxZBFASdv+M723cYgt3cjPldJB+F1l1l93r/ZyOzLVRykv50DXcU 1PqZGSSa5NQAHn5emftVTx3onCd68S5Eo0UiLZcO8VgQZpDGZ8AsgCKfVCMm24C7 QppWkSD9K5ez8npXi2/1zKO4cPN7QLw3gVG8/tohy4rkwGQnwndDb3anp4ahR7n4 46ElnEnkAXzhMFnE2hFtM6hnLOxkUpzod5afEtKm/Qv/4p+2TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNd8mMG6/rSMUBH3yLodZghcHJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWU5ZTk2OGYtZjhmMi0z ZDFlLThiZjUtOTFmNGI4OTljNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqtViGSmZ5TAkr/gVpp5JD05Oo/zJ6v4ITlOCdo1sQA5KRJxY6Q+NPu qR3lbXmzx9oNbjfbOmGgSf6BQTOBXewJa+1E9BrCrIJUbT2ryoBtyBO7EB8ctj5g pW4MjGJOsI04wEei8qv9TuFLJQhONtCDXIdsGUu3K5pFsQJucEr+tyY4cCUr16IK ky45MkH5XHM6sRSQ7ReiYxvClw+8RNeicqGEpLl+ho4dzosXfGKfIrkApBMMawhz qeKKBE8i6FqGKpGtbl4I7E8RN/ZcPx11vOHaFPpfYMm+OmxR48XAtd8soyAEuCmd +HDhjeAMke9ew24Y8AF+1oSnnWhppKM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:45 2025 by rpki-client