$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/abb3e388-1d5c-38b7-8a2c-c43a7c6eef56.roa File: abb3e388-1d5c-38b7-8a2c-c43a7c6eef56.roa (raw, json) Hash identifier: iDWTQ+5rRdoJxklcMzxqWz/Ut0eRGhAWIFfw/eXN84c= Subject key identifier: 4D:0F:A5:C0:1C:78:36:B2:DD:BB:56:59:55:A1:A5:92:81:80:11:B8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B7993C9227B95F09964D05580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/abb3e388-1d5c-38b7-8a2c-c43a7c6eef56.roa Signing time: Fri 10 Oct 2025 11:38:17 +0000 ROA not before: Fri 10 Oct 2025 11:38:17 +0000 ROA not after: Thu 08 Jan 2026 12:38:17 +0000 asID: 9304 IP address blocks: 209.101.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:93:c9:22:7b:95:f0:99:64:d0:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 11:38:17 2025 GMT Not After : Jan 8 12:38:17 2026 GMT Subject: CN=48548f9b-fe4b-41cc-806a-d3d1d4900d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2e:12:d7:64:77:0f:55:80:b1:93:1a:e7:05: d0:f1:17:3d:92:39:f7:97:6b:55:80:4d:81:c2:e1: eb:d5:5b:76:8f:57:5a:07:ad:45:28:8f:58:33:57: 13:8d:f5:20:fb:d1:14:1c:b8:8d:1d:fb:95:10:81: 3b:7f:8b:50:8d:0d:82:d6:c2:83:8a:10:85:b6:26: 73:8b:ba:46:d8:3e:5e:3e:a0:a1:62:3f:f5:7f:0b: 04:8a:25:7d:74:27:49:9f:33:b9:91:2b:fa:4d:e5: 11:c2:87:c6:b6:41:49:1e:e3:35:88:72:00:16:1c: 59:a7:e3:33:4a:f8:ef:77:0b:10:f2:89:b8:99:23: 74:b0:c7:45:18:53:21:3f:0c:f8:c5:8f:a5:f7:0b: d2:27:ae:d8:3f:f4:87:af:f4:13:88:f5:41:b4:c7: 8e:5b:2e:96:ad:63:52:ba:1f:bc:ab:f9:d1:e4:7c: a4:5b:71:3d:08:2b:40:2f:47:27:4a:11:16:fe:16: 78:ec:c2:1b:42:a8:3a:7f:5c:5d:1b:1f:84:bc:43: 2e:06:99:b9:a3:01:44:e5:cb:3d:0c:bc:d9:80:da: 5b:c2:ab:a5:d2:b3:38:d8:17:a9:ff:b9:52:7a:90: d1:6b:13:cd:3f:66:85:85:d5:a3:aa:54:b0:51:eb: 1a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0F:A5:C0:1C:78:36:B2:DD:BB:56:59:55:A1:A5:92:81:80:11:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/abb3e388-1d5c-38b7-8a2c-c43a7c6eef56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:6b:53:ee:1a:73:ef:2d:6c:04:19:06:a7:dc:3d:90:82:f6: 68:c0:6e:d3:a4:dd:2a:64:1b:31:e9:b9:33:f0:3e:b2:69:b2: 56:93:92:68:c4:ea:58:95:47:45:b7:e3:3b:1d:68:3c:74:57: e6:cb:b9:df:c0:2f:59:dd:58:91:a3:d0:90:be:6e:54:f7:11: b5:67:99:eb:c1:19:93:74:a0:18:3f:b7:7f:d0:87:79:51:f4: db:b6:65:4b:a8:76:e4:bc:6c:71:78:ed:25:7a:dd:59:3f:d3: 55:81:5f:84:a9:63:71:d8:3c:29:84:13:92:9a:ff:a5:c4:30: be:6f:e0:44:4e:fc:71:d1:e4:f2:0d:ba:8b:04:3d:bc:25:21: 25:18:fb:4f:0c:81:b7:a4:bd:e7:01:c8:f4:85:3d:8c:6e:ae: 69:f1:8d:44:1b:d7:63:ba:19:5d:cf:a4:29:dc:d5:98:a8:13: 21:42:1f:85:1e:ea:78:68:38:bb:67:56:a9:03:56:46:f0:44: 72:79:8b:40:35:9d:5b:67:4c:21:9a:69:f3:89:25:27:37:da: b5:78:01:01:fb:83:be:74:c1:c7:e0:89:c2:8e:78:dc:a3:a4: 0a:64:a7:eb:cf:e2:3a:2d:e3:46:52:70:3e:ef:a8:ea:08:69: 9c:b4:4b:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5k8kie5XwmWTQVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDExMzgxN1oXDTI2MDEwODEyMzgxN1owLzEtMCsGA1UEAxMk NDg1NDhmOWItZmU0Yi00MWNjLTgwNmEtZDNkMWQ0OTAwZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC4S12R3D1WAsZMa5wXQ8Rc9kjn3l2tVgE2B wuHr1Vt2j1daB61FKI9YM1cTjfUg+9EUHLiNHfuVEIE7f4tQjQ2C1sKDihCFtiZz i7pG2D5ePqChYj/1fwsEiiV9dCdJnzO5kSv6TeURwofGtkFJHuM1iHIAFhxZp+Mz SvjvdwsQ8om4mSN0sMdFGFMhPwz4xY+l9wvSJ67YP/SHr/QTiPVBtMeOWy6WrWNS uh+8q/nR5HykW3E9CCtAL0cnShEW/hZ47MIbQqg6f1xdGx+EvEMuBpm5owFE5cs9 DLzZgNpbwqul0rM42Bep/7lSepDRaxPNP2aFhdWjqlSwUesaLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0PpcAceDay3btWWVWhpZKBgBG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWJiM2UzODgtMWQ1Yy0z OGI3LThhMmMtYzQzYTdjNmVlZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRrU+4ac+8tbAQZBqfcPZCC9mjAbtOk3SpkGzHpuTPwPrJpslaTkmjE 6liVR0W34zsdaDx0V+bLud/AL1ndWJGj0JC+blT3EbVnmevBGZN0oBg/t3/Qh3lR 9Nu2ZUuoduS8bHF47SV63Vk/01WBX4SpY3HYPCmEE5Ka/6XEML5v4ERO/HHR5PIN uosEPbwlISUY+08MgbekvecByPSFPYxurmnxjUQb12O6GV3PpCnc1ZioEyFCH4Ue 6nhoOLtnVqkDVkbwRHJ5i0A1nVtnTCGaafOJJSc32rV4AQH7g750wcfgicKOeNyj pApkp+vP4jot40ZScD7vqOoIaZy0SwI= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:51 2025 by rpki-client