$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b6fe851b-d187-3679-a614-a63457d044ba.roa File: b6fe851b-d187-3679-a614-a63457d044ba.roa (raw, json) Hash identifier: Nyk5JbPiu44snLm/oYRZ4ZKh32dCgKSzdCs4PkY2t5E= Subject key identifier: D6:E8:3B:6F:F1:18:DA:FE:F1:08:66:22:03:B7:76:79:1B:41:A4:5E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBCB0D51232BDD36D3AB780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b6fe851b-d187-3679-a614-a63457d044ba.roa Signing time: Mon 08 Sep 2025 07:17:57 +0000 ROA not before: Mon 08 Sep 2025 07:17:57 +0000 ROA not after: Sun 07 Dec 2025 08:17:57 +0000 asID: 401783 IP address blocks: 209.101.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:b0:d5:12:32:bd:d3:6d:3a:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:57 2025 GMT Not After : Dec 7 08:17:57 2025 GMT Subject: CN=c25b53c7-beb3-4dff-9217-4b48b49a97a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:79:9d:ea:e0:99:1a:f8:71:7b:93:51:9a:6c: d9:ec:09:22:82:1e:ea:64:0c:04:d0:85:9e:36:04: cb:ed:23:fa:a6:da:48:cd:1a:99:85:9f:4f:fd:99: 45:0b:b3:d8:21:7f:e0:b9:91:e6:90:44:8a:da:38: 5c:26:9c:23:3e:c0:0f:5f:f4:76:96:9f:f1:b6:0e: 49:37:86:01:61:9c:cd:12:40:67:32:25:94:4a:42: 46:08:c1:fc:b2:cb:7c:63:eb:86:b0:ba:f0:39:07: f1:39:74:f4:ad:f2:4c:58:83:8b:9f:00:55:44:87: 74:75:3e:b3:e4:b4:fa:a2:02:35:64:44:42:84:1b: 69:9d:69:e6:24:30:25:d1:09:9d:b7:4c:16:58:1d: b4:ec:b0:9a:99:76:aa:2a:2c:7e:ba:78:c8:b6:90: d6:06:7f:c6:29:21:22:3a:e9:dd:dc:b3:be:95:a3: 19:a4:fb:f9:3a:16:30:af:86:4d:48:89:ee:a1:e5: fa:ac:57:4e:42:71:9a:24:92:f3:57:21:e6:2e:19: aa:f4:7c:53:a7:e2:98:20:86:3a:ab:53:31:df:c0: 10:69:7b:06:ac:dc:8f:7b:aa:58:e2:23:40:ef:b8: fd:b1:1f:25:9f:3e:97:49:28:bb:c3:71:17:9e:cc: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E8:3B:6F:F1:18:DA:FE:F1:08:66:22:03:B7:76:79:1B:41:A4:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b6fe851b-d187-3679-a614-a63457d044ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:54:61:16:83:43:e7:db:1c:ab:cc:e5:f0:15:cd:c7:aa:6c: ef:b7:df:77:a0:77:e8:91:1e:a7:26:2a:a5:3f:ab:58:c4:0a: b8:20:f7:b0:c6:d5:04:20:a8:8b:07:98:59:df:d0:25:6e:12: fe:da:8c:d1:1e:b2:ac:48:b6:41:1e:eb:9c:8b:4e:e4:ad:85: 30:b1:7f:81:04:a8:10:45:ed:c2:17:0f:fa:a1:df:59:18:42: f9:cf:9f:47:24:dd:a5:be:3f:3a:43:e7:0e:b0:fb:e1:57:18: b4:ab:73:72:52:c6:f1:1c:9d:32:f0:17:fc:6a:1f:6a:86:96: 34:31:07:35:8a:5b:fb:ff:fd:96:eb:6e:c4:ba:2f:24:f4:53: 6d:f2:b8:49:7c:94:db:44:f2:d9:79:c4:76:47:66:5b:6e:15: b4:cf:04:f2:d5:28:16:cb:4e:e7:1f:40:30:e5:3f:62:64:3b: fc:d8:77:21:17:97:c3:d3:f6:05:c1:da:0b:ba:d7:aa:aa:1e: 34:33:ae:fe:1d:57:fa:43:8b:61:d4:48:60:ae:0d:d2:6e:a2: c9:af:ac:54:ec:eb:28:12:bf:85:5c:75:fe:99:82:96:e6:9e: e7:6c:b2:86:ab:a4:46:db:66:c8:50:20:9e:5c:b0:d5:81:1d: e0:b3:b1:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvLDVEjK90206t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTc1N1oXDTI1MTIwNzA4MTc1N1owLzEtMCsGA1UEAxMk YzI1YjUzYzctYmViMy00ZGZmLTkyMTctNGI0OGI0OWE5N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xmd6uCZGvhxe5NRmmzZ7Akigh7qZAwE0IWe NgTL7SP6ptpIzRqZhZ9P/ZlFC7PYIX/guZHmkESK2jhcJpwjPsAPX/R2lp/xtg5J N4YBYZzNEkBnMiWUSkJGCMH8sst8Y+uGsLrwOQfxOXT0rfJMWIOLnwBVRId0dT6z 5LT6ogI1ZERChBtpnWnmJDAl0Qmdt0wWWB207LCamXaqKix+unjItpDWBn/GKSEi Ound3LO+laMZpPv5OhYwr4ZNSInuoeX6rFdOQnGaJJLzVyHmLhmq9HxTp+KYIIY6 q1Mx38AQaXsGrNyPe6pY4iNA77j9sR8lnz6XSSi7w3EXnsxNdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNboO2/xGNr+8QhmIgO3dnkbQaReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjZmZTg1MWItZDE4Ny0z Njc5LWE2MTQtYTYzNDU3ZDA0NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBUYRaDQ+fbHKvM5fAVzceqbO+333egd+iRHqcmKqU/q1jECrgg97DG 1QQgqIsHmFnf0CVuEv7ajNEesqxItkEe65yLTuSthTCxf4EEqBBF7cIXD/qh31kY QvnPn0ck3aW+PzpD5w6w++FXGLSrc3JSxvEcnTLwF/xqH2qGljQxBzWKW/v//Zbr bsS6LyT0U23yuEl8lNtE8tl5xHZHZltuFbTPBPLVKBbLTucfQDDlP2JkO/zYdyEX l8PT9gXB2gu616qqHjQzrv4dV/pDi2HUSGCuDdJuosmvrFTs6ygSv4Vcdf6Zgpbm nudssoarpEbbZshQIJ5csNWBHeCzsRU= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:26 2025 by rpki-client