$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c2a5e5ba-a081-3b15-a9be-50bd49133b6c.roa File: c2a5e5ba-a081-3b15-a9be-50bd49133b6c.roa (raw, json) Hash identifier: 7y4Ma6BiVxZqfDJnSb8tTgj207A4CM6ZbAanX9R6v1U= Subject key identifier: 45:D6:F0:67:15:FE:D2:D7:9F:52:68:44:8D:7B:94:E1:CD:95:CC:27 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B394CE15A09533B2A4E36B780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c2a5e5ba-a081-3b15-a9be-50bd49133b6c.roa Signing time: Wed 17 Sep 2025 11:03:41 +0000 ROA not before: Wed 17 Sep 2025 11:03:41 +0000 ROA not after: Tue 16 Dec 2025 12:03:41 +0000 asID: 9304 IP address blocks: 209.101.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:4c:e1:5a:09:53:3b:2a:4e:36:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 17 11:03:41 2025 GMT Not After : Dec 16 12:03:41 2025 GMT Subject: CN=28e5da00-6163-4699-a411-6062bdec66a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:aa:b6:d0:8d:08:b6:ad:7a:61:a4:75:53: 75:48:6a:74:40:e6:50:ea:4b:ca:42:ad:4e:83:9a: f6:cf:28:14:a5:b9:3c:82:7d:55:b8:bb:fa:ca:e8: c0:c1:bd:3b:0e:64:58:da:68:41:72:0c:00:f5:f3: d8:d4:1a:49:f5:ce:f8:d2:d2:3e:75:bd:fe:75:ca: 60:4f:cd:92:9a:1b:eb:af:78:40:45:0e:37:65:83: 11:e8:d6:c4:00:09:f2:33:5f:f7:71:0c:73:49:53: 89:a2:02:95:03:66:63:30:61:91:67:05:89:d2:e2: e4:aa:77:c8:fc:fd:27:0c:a0:d9:d8:2a:2c:2d:82: 64:58:66:3e:2c:f0:4b:b2:ad:09:31:53:fb:4a:54: 91:4e:04:86:e2:91:41:0d:9b:80:ca:e3:19:1a:6f: 30:71:47:a5:0b:4e:0b:49:b0:5e:11:aa:3a:e6:0c: 0d:b6:b9:2e:95:f2:3f:0b:97:4f:06:19:4a:db:78: 08:59:20:dd:e3:4b:ab:ab:b8:17:d8:39:e4:e8:b1: af:d4:c7:aa:81:2a:65:19:65:8e:c7:6d:ac:73:6e: fb:bf:43:7f:43:1e:5e:67:48:0c:61:0e:47:16:9a: ce:13:08:92:11:49:10:15:8e:1e:6c:78:97:89:af: 92:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D6:F0:67:15:FE:D2:D7:9F:52:68:44:8D:7B:94:E1:CD:95:CC:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c2a5e5ba-a081-3b15-a9be-50bd49133b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:24:2e:94:64:ea:a4:14:d5:33:3c:f6:0d:0f:85:87:f0:df: 97:15:a7:5e:32:e0:68:e6:72:c5:87:e0:ff:92:19:26:43:9b: 3a:cb:24:fd:7f:d0:6b:a3:9c:bc:fc:5f:f0:55:2f:55:55:b0: df:d4:ca:12:40:97:fa:15:2d:81:ac:3e:6a:a0:34:d0:f3:2e: 9a:e0:76:69:c0:c1:41:b3:94:99:e6:18:e2:4b:3b:55:77:7b: 2a:44:ba:ae:8a:b6:ec:b5:4b:42:02:88:3d:46:61:35:01:f2: 07:fb:d4:f8:7c:90:fa:04:36:b8:57:c4:bb:8d:2e:8b:dd:55: f0:78:76:24:82:d0:02:b4:f4:2d:a9:ff:64:fc:de:ff:e6:ad: e2:3f:5f:5d:01:a9:62:cc:01:88:77:a8:8b:c3:e5:9d:82:70: 7d:f2:d6:1f:5b:82:c7:2d:6b:ab:a2:9a:a8:07:80:cd:09:9b: 6f:ad:ad:af:86:fa:db:90:56:3f:c6:be:11:8e:4a:70:13:c5: fb:fb:fa:5f:94:e2:81:0c:4b:8a:4c:65:88:e0:bf:39:a8:4b: 6a:9c:ab:1a:bf:cf:d0:21:8a:8c:44:9f:37:15:00:73:ae:de: bf:f5:03:b2:87:e8:2b:8f:aa:dc:c2:7b:89:4c:a4:12:e1:77: a7:f6:dd:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5TOFaCVM7Kk42t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNzExMDM0MVoXDTI1MTIxNjEyMDM0MVowLzEtMCsGA1UEAxMk MjhlNWRhMDAtNjE2My00Njk5LWE0MTEtNjA2MmJkZWM2NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjGqttCNCLatemGkdVN1SGp0QOZQ6kvKQq1O g5r2zygUpbk8gn1VuLv6yujAwb07DmRY2mhBcgwA9fPY1BpJ9c740tI+db3+dcpg T82Smhvrr3hARQ43ZYMR6NbEAAnyM1/3cQxzSVOJogKVA2ZjMGGRZwWJ0uLkqnfI /P0nDKDZ2CosLYJkWGY+LPBLsq0JMVP7SlSRTgSG4pFBDZuAyuMZGm8wcUelC04L SbBeEao65gwNtrkulfI/C5dPBhlK23gIWSDd40urq7gX2Dnk6LGv1MeqgSplGWWO x22sc277v0N/Qx5eZ0gMYQ5HFprOEwiSEUkQFY4ebHiXia+SBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXW8GcV/tLXn1JoRI17lOHNlcwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzJhNWU1YmEtYTA4MS0z YjE1LWE5YmUtNTBiZDQ5MTMzYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYkLpRk6qQU1TM89g0PhYfw35cVp14y4GjmcsWH4P+SGSZDmzrLJP1/ 0GujnLz8X/BVL1VVsN/UyhJAl/oVLYGsPmqgNNDzLprgdmnAwUGzlJnmGOJLO1V3 eypEuq6Ktuy1S0ICiD1GYTUB8gf71Ph8kPoENrhXxLuNLovdVfB4diSC0AK09C2p /2T83v/mreI/X10BqWLMAYh3qIvD5Z2CcH3y1h9bgscta6uimqgHgM0Jm2+tra+G +tuQVj/GvhGOSnATxfv7+l+U4oEMS4pMZYjgvzmoS2qcqxq/z9AhioxEnzcVAHOu 3r/1A7KH6CuPqtzCe4lMpBLhd6f23fM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:49 2025 by rpki-client