$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0e9d803-9673-33b7-a8c8-b44cb309bbc5.roa File: a0e9d803-9673-33b7-a8c8-b44cb309bbc5.roa (raw, json) Hash identifier: s9TQJ+o45qIZEDxalxJNIcFiFIuxQIIQiYsLM9LvDj0= Subject key identifier: C6:BA:35:F2:65:69:0D:90:1F:E9:FA:60:32:C8:CA:53:EA:31:96:6F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B7993B976E84A22771D2A7B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0e9d803-9673-33b7-a8c8-b44cb309bbc5.roa Signing time: Fri 10 Oct 2025 11:38:09 +0000 ROA not before: Fri 10 Oct 2025 11:38:09 +0000 ROA not after: Thu 08 Jan 2026 12:38:09 +0000 asID: 9304 IP address blocks: 209.101.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:93:b9:76:e8:4a:22:77:1d:2a:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 11:38:09 2025 GMT Not After : Jan 8 12:38:09 2026 GMT Subject: CN=207f6bd3-226c-49af-808f-a7b153b8a766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:18:6b:c3:8b:22:f8:be:01:77:1e:51:73: 9a:7f:93:09:cc:19:78:68:99:29:8f:cf:f3:98:45: a1:9a:72:5c:90:b1:a6:1b:f4:42:ac:a4:c5:8d:5b: 43:19:2b:dd:2f:68:18:fc:19:da:15:e5:aa:0e:3b: 3b:e3:a5:3b:f7:e3:7a:d3:aa:68:16:01:8b:7f:2c: 41:c8:c2:2d:e3:72:47:7c:08:4b:62:7a:15:91:e4: aa:a5:c2:0a:e2:6a:b9:72:05:14:33:a4:a0:50:90: d9:5a:f6:60:33:83:4f:f1:ec:79:bf:58:ef:0a:09: 7b:16:d5:5e:a3:ad:7d:e5:ca:61:fe:79:ea:72:4d: 5c:cb:60:07:cf:3e:28:86:d1:ef:14:59:26:fb:7e: 19:bd:5b:b4:5f:4b:80:56:02:09:27:72:ab:eb:cf: 31:7d:6f:21:87:5d:47:28:c9:12:62:49:d7:25:02: 4b:dc:b8:03:69:58:d8:78:3a:60:f7:fd:61:94:d8: bb:be:7a:09:27:36:2b:65:ce:f3:86:c6:23:48:3d: aa:bd:92:31:bf:ec:89:72:63:b1:4c:d8:2e:e7:40: 0f:6e:a3:85:1f:48:72:72:28:14:61:3a:90:cc:8b: 72:2b:d2:78:2f:12:1f:20:58:69:40:1d:b6:7e:ec: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BA:35:F2:65:69:0D:90:1F:E9:FA:60:32:C8:CA:53:EA:31:96:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0e9d803-9673-33b7-a8c8-b44cb309bbc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f9:9d:dc:ba:02:e5:f1:8a:37:72:fe:6e:30:07:d2:c4:6d: fa:07:ff:b8:0a:f1:64:8e:f7:a8:0d:72:bf:c3:2c:c0:75:5d: e7:6f:d0:cd:18:dc:d8:b8:3f:ae:88:75:5b:7b:d7:db:2a:4c: a8:8e:fd:7a:28:b7:2c:94:19:06:f2:16:a8:bc:9b:d0:27:56: 7a:df:8f:62:cf:db:ac:bb:0e:80:24:46:5d:9d:75:ff:e9:da: 7e:db:18:3d:e3:e3:a4:bf:3b:6e:c1:f7:fd:e8:d8:51:68:00: 33:83:2b:a8:1b:b4:e6:e0:5d:c0:82:17:46:03:a5:8b:57:f1: 00:32:77:d2:9b:eb:6e:9b:3a:a4:9b:17:11:ba:f9:fe:92:0d: 80:fb:ff:ee:4d:20:83:77:a1:ae:0a:96:67:d5:c0:6c:84:af: b6:9c:ac:f7:96:00:d8:b1:36:82:6c:43:2a:ef:aa:9d:71:ba: ce:e6:06:e5:db:ea:c7:1b:ee:0e:d9:b1:a9:d6:cc:41:5d:ec: 13:76:6d:a1:cd:8f:cc:12:82:d4:f5:ac:b1:0f:2e:fd:66:7a: a3:cc:46:50:9a:62:9b:45:67:fa:48:0d:b6:13:f3:02:6e:89: df:05:6c:c8:3c:36:4b:9e:6f:b9:38:1d:e4:d6:28:41:83:d5: 9a:11:6b:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5k7l26Eoidx0qe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDExMzgwOVoXDTI2MDEwODEyMzgwOVowLzEtMCsGA1UEAxMk MjA3ZjZiZDMtMjI2Yy00OWFmLTgwOGYtYTdiMTUzYjhhNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1UYa8OLIvi+AXceUXOaf5MJzBl4aJkpj8/z mEWhmnJckLGmG/RCrKTFjVtDGSvdL2gY/BnaFeWqDjs746U79+N606poFgGLfyxB yMIt43JHfAhLYnoVkeSqpcIK4mq5cgUUM6SgUJDZWvZgM4NP8ex5v1jvCgl7FtVe o6195cph/nnqck1cy2AHzz4ohtHvFFkm+34ZvVu0X0uAVgIJJ3Kr688xfW8hh11H KMkSYknXJQJL3LgDaVjYeDpg9/1hlNi7vnoJJzYrZc7zhsYjSD2qvZIxv+yJcmOx TNgu50APbqOFH0hycigUYTqQzItyK9J4LxIfIFhpQB22fuzQGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMa6NfJlaQ2QH+n6YDLIylPqMZZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTBlOWQ4MDMtOTY3My0z M2I3LWE4YzgtYjQ0Y2IzMDliYmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC75ndy6AuXxijdy/m4wB9LEbfoH/7gK8WSO96gNcr/DLMB1Xedv0M0Y 3Ni4P66IdVt719sqTKiO/XootyyUGQbyFqi8m9AnVnrfj2LP26y7DoAkRl2ddf/p 2n7bGD3j46S/O27B9/3o2FFoADODK6gbtObgXcCCF0YDpYtX8QAyd9Kb626bOqSb FxG6+f6SDYD7/+5NIIN3oa4KlmfVwGyEr7acrPeWANixNoJsQyrvqp1xus7mBuXb 6scb7g7ZsanWzEFd7BN2baHNj8wSgtT1rLEPLv1meqPMRlCaYptFZ/pIDbYT8wJu id8FbMg8Nkueb7k4HeTWKEGD1ZoRa9U= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:30 2025 by rpki-client