$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9742fad-06c8-30b0-bc88-2fe1126dc1f4.roa File: c9742fad-06c8-30b0-bc88-2fe1126dc1f4.roa (raw, json) Hash identifier: NAjRgA2kyzUqY+B0wfpq9nuKYfk7m+yOP8s0AASpG8Y= Subject key identifier: 96:B6:81:18:FA:9A:D9:E1:FE:9F:7B:1A:43:1D:D5:F9:17:3A:4B:9A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4CB842B755D8E32072093100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9742fad-06c8-30b0-bc88-2fe1126dc1f4.roa Signing time: Wed 24 Sep 2025 10:00:24 +0000 ROA not before: Wed 24 Sep 2025 10:00:24 +0000 ROA not after: Tue 23 Dec 2025 11:00:24 +0000 asID: 400031 IP address blocks: 209.101.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4c:b8:42:b7:55:d8:e3:20:72:09:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 24 10:00:24 2025 GMT Not After : Dec 23 11:00:24 2025 GMT Subject: CN=d6dc03fb-9445-4f2e-b024-2e14f1ae82ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0d:73:a4:f1:0f:c4:e2:75:63:be:0c:40:ac: ff:0d:61:0c:fd:fd:c3:25:39:11:75:a8:ba:c7:58: c9:d5:2d:02:43:21:79:39:3a:94:a1:22:9c:92:c0: 6a:1d:19:cd:1e:95:c2:cb:05:47:95:44:5c:27:b5: 6e:f7:50:45:b7:20:76:64:c8:a5:d6:ed:bb:55:a0: 14:e8:c0:5f:51:59:03:8f:2c:2a:94:3a:3f:cf:9e: 52:c0:5d:79:56:8d:d6:ab:32:96:ea:f4:9a:58:7e: 98:49:43:63:e3:16:b9:b2:d4:44:23:cf:15:5e:ce: 23:ee:cc:84:c3:1f:33:77:d3:00:ef:5f:a7:3c:81: 72:29:e4:b4:a0:ff:73:f1:b6:7e:0f:8b:10:9e:8c: 13:7e:c5:1d:f2:63:e1:46:87:82:16:0c:71:30:24: 24:aa:de:ae:e2:48:e9:d5:73:4a:9f:a8:15:86:96: 2b:5d:41:80:0c:63:a6:b9:45:cc:8e:34:d0:3f:71: 68:d7:e9:f9:3e:b1:80:5d:90:15:73:de:c4:7c:62: 8d:88:be:b2:af:c8:23:5e:03:48:10:ac:61:d6:08: dd:6a:02:e8:b8:7c:35:a5:72:3d:03:78:13:a0:a7: f2:d0:40:6d:be:72:6d:2e:9b:ee:f7:b7:bd:f1:fe: 12:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B6:81:18:FA:9A:D9:E1:FE:9F:7B:1A:43:1D:D5:F9:17:3A:4B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9742fad-06c8-30b0-bc88-2fe1126dc1f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:cc:bc:06:40:94:ef:b9:89:4a:b0:09:c8:25:8d:5b:ce:c9: c3:73:f4:c3:44:df:95:97:f7:4d:b3:b2:53:e1:ee:eb:52:d7: 26:53:5e:2d:9b:34:06:2d:04:28:dd:a3:20:63:57:fa:3c:57: ba:87:59:11:07:6a:c2:96:e2:2c:f2:70:a0:c6:77:bb:70:24: 57:a0:ed:19:2c:a7:07:25:54:08:d2:73:c0:56:af:e5:df:b9: 05:86:2b:18:8f:03:87:2f:84:c3:1b:7b:e8:a1:89:5c:dc:12: e2:83:3b:d3:62:e3:65:4b:7d:b2:60:0f:b3:60:fd:c5:ea:1f: 3d:8b:e7:17:58:fb:3f:b2:40:44:92:c6:3c:58:e2:be:cd:01: e4:7d:ec:be:b6:b1:79:52:5b:69:fd:b9:2f:26:1c:61:55:9d: 17:7f:af:3d:9d:ae:1f:b2:ec:e3:ad:ce:63:1b:24:fb:6f:fc: 2c:ef:41:46:6e:4f:52:50:2a:2b:e6:50:40:9c:9a:9b:e9:20: a6:aa:c5:d3:e1:09:cf:11:a2:ce:52:39:30:54:64:a6:df:bc: 8e:0f:0d:86:b1:34:0a:2f:c0:9f:bc:83:29:71:99:eb:cc:3d: 33:90:a5:05:03:c8:eb:bc:b3:9d:ed:a8:32:94:f3:80:27:d3: 34:8f:f1:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtMuEK3VdjjIHIJMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNDEwMDAyNFoXDTI1MTIyMzExMDAyNFowLzEtMCsGA1UEAxMk ZDZkYzAzZmItOTQ0NS00ZjJlLWIwMjQtMmUxNGYxYWU4MmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw1zpPEPxOJ1Y74MQKz/DWEM/f3DJTkRdai6 x1jJ1S0CQyF5OTqUoSKcksBqHRnNHpXCywVHlURcJ7Vu91BFtyB2ZMil1u27VaAU 6MBfUVkDjywqlDo/z55SwF15Vo3WqzKW6vSaWH6YSUNj4xa5stREI88VXs4j7syE wx8zd9MA71+nPIFyKeS0oP9z8bZ+D4sQnowTfsUd8mPhRoeCFgxxMCQkqt6u4kjp 1XNKn6gVhpYrXUGADGOmuUXMjjTQP3Fo1+n5PrGAXZAVc97EfGKNiL6yr8gjXgNI EKxh1gjdagLouHw1pXI9A3gToKfy0EBtvnJtLpvu97e98f4SMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa2gRj6mtnh/p97GkMd1fkXOkuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzk3NDJmYWQtMDZjOC0z MGIwLWJjODgtMmZlMTEyNmRjMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvMvAZAlO+5iUqwCcgljVvOycNz9MNE35WX902zslPh7utS1yZTXi2b NAYtBCjdoyBjV/o8V7qHWREHasKW4izycKDGd7twJFeg7RkspwclVAjSc8BWr+Xf uQWGKxiPA4cvhMMbe+ihiVzcEuKDO9Ni42VLfbJgD7Ng/cXqHz2L5xdY+z+yQESS xjxY4r7NAeR97L62sXlSW2n9uS8mHGFVnRd/rz2drh+y7OOtzmMbJPtv/CzvQUZu T1JQKivmUECcmpvpIKaqxdPhCc8Ros5SOTBUZKbfvI4PDYaxNAovwJ+8gylxmevM PTOQpQUDyOu8s53tqDKU84An0zSP8aI= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:12 2025 by rpki-client