$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c3b9176b-f2ec-3cf5-a1e3-4a448008d1d2.roa File: c3b9176b-f2ec-3cf5-a1e3-4a448008d1d2.roa (raw, json) Hash identifier: 9TbulLdyCfxSaxJuubAuln1ugBUxz7pOLThSOhFo7Ms= Subject key identifier: 71:5F:46:AA:87:7A:B0:1B:0E:31:40:67:89:7B:BA:C6:A7:02:AC:84 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B7993D0E207A3FB8DF2C8D280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c3b9176b-f2ec-3cf5-a1e3-4a448008d1d2.roa Signing time: Fri 10 Oct 2025 11:38:20 +0000 ROA not before: Fri 10 Oct 2025 11:38:20 +0000 ROA not after: Thu 08 Jan 2026 12:38:20 +0000 asID: 9304 IP address blocks: 209.101.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:93:d0:e2:07:a3:fb:8d:f2:c8:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 11:38:20 2025 GMT Not After : Jan 8 12:38:20 2026 GMT Subject: CN=12bfabcc-cbb1-4c3b-b52d-9c99b7b80fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:97:62:12:2d:13:9e:83:e1:52:44:83:99: 14:99:8f:08:4f:16:01:7b:02:2a:ec:0a:5e:0b:72: 08:68:5f:91:b1:28:7f:a5:87:f1:5e:51:9c:23:2c: a9:71:4c:fc:6b:7b:e3:d1:87:fe:0c:e8:70:05:2a: a5:cf:de:db:a3:30:04:2c:4b:f5:08:bd:a8:22:3b: 55:eb:67:68:17:b6:d5:f8:a4:bb:11:b2:3a:56:f7: 48:23:d5:df:15:35:e8:e6:6c:fb:04:e1:45:b1:1e: ec:09:b0:92:1b:19:5c:a1:8f:73:3e:b2:8f:06:40: f7:1b:58:ce:9f:97:4a:59:ff:d2:0d:4b:9a:38:b4: f4:1c:70:56:d8:22:7d:cf:3b:07:49:32:1e:b1:9f: bb:6b:79:80:33:3d:34:13:00:ae:71:b3:d5:57:db: c3:60:83:90:d6:b9:17:da:33:49:88:79:6a:c4:89: f8:a0:13:b1:c8:ca:61:5c:f5:9f:27:6a:b0:13:dd: ea:4d:c9:2f:7f:fa:fa:96:c1:ec:43:aa:31:d6:e1: aa:92:4f:76:d1:dc:9c:39:9b:2d:7c:94:9b:b0:1d: 7b:2c:e2:17:ed:00:ea:ed:3c:8a:5d:9d:c6:87:77: 92:d1:76:3a:29:e7:b0:56:61:e0:3f:92:10:09:a8: 61:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5F:46:AA:87:7A:B0:1B:0E:31:40:67:89:7B:BA:C6:A7:02:AC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c3b9176b-f2ec-3cf5-a1e3-4a448008d1d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ba:da:3d:2d:05:80:a6:29:79:79:5b:5d:55:b9:3f:65:19: bf:32:e9:03:1f:df:70:88:ac:52:06:e9:d6:df:64:24:e2:d2: 71:91:77:b7:b9:6d:f2:d5:d7:54:24:e8:b8:84:e4:4d:d5:d2: 6e:95:fb:9d:cc:60:61:c1:77:bd:5e:15:01:cb:0a:c8:42:f1: c3:44:bb:4d:ec:0c:ea:12:92:e4:be:17:30:5f:1a:c9:c9:39: 4e:fb:3f:21:3d:ef:70:dc:90:13:5d:98:77:9a:5c:74:87:47: d2:86:f0:2e:3a:cf:b8:b0:7c:89:21:e1:03:6b:eb:81:1f:ff: 18:6a:ac:43:d9:13:74:55:76:e2:50:e6:7b:8e:5e:d4:7e:c3: ad:aa:27:4a:7f:65:ba:a7:f4:94:e0:fa:bc:04:99:d4:dc:cb: de:67:e0:6b:a9:98:4c:12:5f:a8:9c:d7:1f:c0:24:7f:c4:c3: 19:34:0c:7f:ed:1b:b4:03:3d:e3:80:52:f8:bb:1a:18:07:ad: 9a:b9:81:a4:af:a9:79:27:99:15:8a:2c:bd:11:64:18:1f:b2: 4a:f6:64:c0:1a:45:c8:ea:ac:77:de:b6:13:3f:5a:09:8e:44: 3d:4b:57:cf:f9:72:70:ec:fd:ff:6b:f7:c4:65:15:bc:b7:00: 25:f2:64:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5k9DiB6P7jfLI0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDExMzgyMFoXDTI2MDEwODEyMzgyMFowLzEtMCsGA1UEAxMk MTJiZmFiY2MtY2JiMS00YzNiLWI1MmQtOWM5OWI3YjgwZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswGXYhItE56D4VJEg5kUmY8ITxYBewIq7Ape C3IIaF+RsSh/pYfxXlGcIyypcUz8a3vj0Yf+DOhwBSqlz97bozAELEv1CL2oIjtV 62doF7bV+KS7EbI6VvdII9XfFTXo5mz7BOFFsR7sCbCSGxlcoY9zPrKPBkD3G1jO n5dKWf/SDUuaOLT0HHBW2CJ9zzsHSTIesZ+7a3mAMz00EwCucbPVV9vDYIOQ1rkX 2jNJiHlqxIn4oBOxyMphXPWfJ2qwE93qTckvf/r6lsHsQ6ox1uGqkk920dycOZst fJSbsB17LOIX7QDq7TyKXZ3Gh3eS0XY6KeewVmHgP5IQCahhqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFfRqqHerAbDjFAZ4l7usanAqyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzNiOTE3NmItZjJlYy0z Y2Y1LWExZTMtNGE0NDgwMDhkMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WW7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS62j0tBYCmKXl5W11VuT9lGb8y6QMf33CIrFIG6dbfZCTi0nGRd7e5 bfLV11Qk6LiE5E3V0m6V+53MYGHBd71eFQHLCshC8cNEu03sDOoSkuS+FzBfGsnJ OU77PyE973DckBNdmHeaXHSHR9KG8C46z7iwfIkh4QNr64Ef/xhqrEPZE3RVduJQ 5nuOXtR+w62qJ0p/Zbqn9JTg+rwEmdTcy95n4GupmEwSX6ic1x/AJH/Ewxk0DH/t G7QDPeOAUvi7GhgHrZq5gaSvqXknmRWKLL0RZBgfskr2ZMAaRcjqrHfethM/WgmO RD1LV8/5cnDs/f9r98RlFby3ACXyZHI= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:50 2025 by rpki-client