$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b355827e-6754-328b-82c3-a9c33e7ee766.roa File: b355827e-6754-328b-82c3-a9c33e7ee766.roa (raw, json) Hash identifier: AfC2AZ92X8SHwEWay/68/K2FrliNVIQSn4lXzL2falc= Subject key identifier: AA:BE:56:CA:07:67:19:DE:1E:27:85:13:DC:5C:43:DD:0C:6B:43:64 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC372A1599C0AB6F205DE0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b355827e-6754-328b-82c3-a9c33e7ee766.roa Signing time: Mon 08 Sep 2025 07:16:59 +0000 ROA not before: Mon 08 Sep 2025 07:16:59 +0000 ROA not after: Sun 07 Dec 2025 08:16:59 +0000 asID: 401783 IP address blocks: 209.101.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:37:2a:15:99:c0:ab:6f:20:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:59 2025 GMT Not After : Dec 7 08:16:59 2025 GMT Subject: CN=711b6431-ed60-468f-9a78-26e1b736bc6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:57:41:06:1b:24:52:38:b6:7e:41:e8:23: 64:65:69:eb:25:ff:c4:0a:09:db:53:14:60:37:cf: b3:11:ef:33:68:75:a4:63:01:0b:9c:13:b9:f9:4d: bf:2d:b7:a9:e9:a6:9d:50:67:10:d1:8d:16:e7:87: 2c:27:01:a8:b0:90:db:df:75:f0:48:5a:15:8f:90: 3e:1a:b0:88:4c:4f:a6:ab:51:18:cf:59:56:b0:5a: 33:e1:4a:07:8f:7a:7f:81:43:83:c8:56:36:7c:21: 57:2d:53:c1:c4:52:7b:98:4d:62:df:69:38:e0:33: 4a:d8:05:7a:0b:c5:27:6e:3f:e9:1c:24:7a:c4:3a: 4b:50:e5:c5:e8:d2:77:c3:3e:bb:f8:81:d0:30:f3: 51:1d:8f:d3:21:49:03:d8:32:73:a7:ea:76:13:77: f9:8d:aa:e0:04:c8:b8:aa:9e:87:3e:c9:6b:b3:f5: 9a:aa:56:9b:ea:c8:77:02:81:26:f9:a7:2c:5f:86: 46:38:2f:e7:08:0f:3a:d1:28:05:1a:9a:b4:c1:2e: cf:71:0f:5c:b2:9b:8c:ca:1a:fb:5f:4d:5b:7b:6f: 66:41:ca:e5:95:a6:0a:55:f3:0e:df:0f:15:16:ba: bd:0f:ef:32:d8:07:0d:94:2c:e0:22:ac:f0:14:86: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BE:56:CA:07:67:19:DE:1E:27:85:13:DC:5C:43:DD:0C:6B:43:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b355827e-6754-328b-82c3-a9c33e7ee766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e4:fa:17:ff:b4:b1:5a:d8:fb:e7:58:aa:24:dd:15:72:21: 8c:d2:c0:76:bf:9f:32:78:c0:2b:6f:3c:56:58:ad:ab:82:54: 90:91:ee:6f:3d:86:4b:3a:70:f3:22:c5:03:c1:fa:47:83:51: 96:7a:bf:30:dd:37:8c:8e:17:21:1f:df:8b:90:f5:8d:28:3e: d9:d0:b6:6c:d8:38:94:2f:82:e1:a3:3f:e7:03:50:ba:68:9d: e7:0b:62:ae:5d:ca:11:eb:54:15:24:80:25:4c:c1:e8:fb:3d: aa:5e:c7:36:73:68:1c:70:e8:17:cc:27:1b:b0:8d:b2:1f:7f: d2:f6:4a:d5:2b:32:e2:a0:6a:9c:b6:d1:42:7f:95:6f:9d:a9: e7:29:69:09:50:a1:b5:72:7f:dd:5b:ba:19:91:57:1a:8c:97: ad:cc:86:d9:93:33:75:bc:85:cb:71:ba:8e:e8:cd:bf:6a:0b: b4:20:3c:d7:3c:e1:3d:03:86:39:d6:74:40:cb:52:d6:e2:d8: 80:b3:02:5e:c7:cc:5e:01:16:fd:bf:47:16:8f:3a:12:3f:d9: 3f:b9:13:0e:89:8d:30:ec:37:22:cd:bb:d0:ea:f3:02:61:c3: 77:a2:ee:3c:24:2a:f2:2f:7b:f0:6c:c6:bb:c7:08:ae:4e:b0: 4f:8f:d8:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvDcqFZnAq28gXeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTY1OVoXDTI1MTIwNzA4MTY1OVowLzEtMCsGA1UEAxMk NzExYjY0MzEtZWQ2MC00NjhmLTlhNzgtMjZlMWI3MzZiYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopBXQQYbJFI4tn5B6CNkZWnrJf/ECgnbUxRg N8+zEe8zaHWkYwELnBO5+U2/Lbep6aadUGcQ0Y0W54csJwGosJDb33XwSFoVj5A+ GrCITE+mq1EYz1lWsFoz4UoHj3p/gUODyFY2fCFXLVPBxFJ7mE1i32k44DNK2AV6 C8Unbj/pHCR6xDpLUOXF6NJ3wz67+IHQMPNRHY/TIUkD2DJzp+p2E3f5jargBMi4 qp6HPslrs/Waqlab6sh3AoEm+acsX4ZGOC/nCA860SgFGpq0wS7PcQ9cspuMyhr7 X01be29mQcrllaYKVfMO3w8VFrq9D+8y2AcNlCzgIqzwFIaqIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKq+VsoHZxneHieFE9xcQ90Ma0NkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjM1NTgyN2UtNjc1NC0z MjhiLTgyYzMtYTljMzNlN2VlNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3k+hf/tLFa2PvnWKok3RVyIYzSwHa/nzJ4wCtvPFZYrauCVJCR7m89 hks6cPMixQPB+keDUZZ6vzDdN4yOFyEf34uQ9Y0oPtnQtmzYOJQvguGjP+cDULpo necLYq5dyhHrVBUkgCVMwej7PapexzZzaBxw6BfMJxuwjbIff9L2StUrMuKgapy2 0UJ/lW+dqecpaQlQobVyf91buhmRVxqMl63MhtmTM3W8hctxuo7ozb9qC7QgPNc8 4T0DhjnWdEDLUtbi2ICzAl7HzF4BFv2/RxaPOhI/2T+5Ew6JjTDsNyLNu9Dq8wJh w3ei7jwkKvIve/BsxrvHCK5OsE+P2Ow= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:48 2025 by rpki-client