$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9f6ed96-a71f-3a71-99c6-8a7acb45a0fb.roa File: c9f6ed96-a71f-3a71-99c6-8a7acb45a0fb.roa (raw, json) Hash identifier: DysfL9ONWn2zDtO9eYYNBS7TF/WU/GaNexz6+NJIsiQ= Subject key identifier: D4:C3:60:1A:70:D6:57:43:C7:55:8A:9A:DB:25:AA:BA:5D:22:18:B2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4CB830992344EF2C6A382600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9f6ed96-a71f-3a71-99c6-8a7acb45a0fb.roa Signing time: Wed 24 Sep 2025 10:00:15 +0000 ROA not before: Wed 24 Sep 2025 10:00:15 +0000 ROA not after: Tue 23 Dec 2025 11:00:15 +0000 asID: 400031 IP address blocks: 209.101.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4c:b8:30:99:23:44:ef:2c:6a:38:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 24 10:00:15 2025 GMT Not After : Dec 23 11:00:15 2025 GMT Subject: CN=dd56fc9c-1c30-494e-98e2-fc7f118b3af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ce:65:09:90:a8:1b:96:06:dc:aa:ec:5d:be: 20:a8:57:03:6b:ad:30:85:4b:35:40:aa:ba:13:12: 00:23:98:61:1e:02:ed:88:bc:5d:eb:d5:cd:8d:0f: a9:fb:52:52:56:20:55:86:36:c6:c9:25:ac:ba:6d: 29:8a:4a:7b:26:05:5e:d9:93:d4:bb:08:f8:0f:d9: 9d:00:49:ff:d2:85:c7:85:c5:21:b9:8d:ba:41:c2: 32:69:eb:ab:d2:66:ac:89:d6:38:13:30:cc:8a:ef: 48:03:95:fd:4c:0e:0c:39:cf:0e:7b:64:ee:18:bf: 78:8a:ac:e1:18:40:44:1e:fe:db:83:ac:23:d1:37: 53:92:59:98:4d:87:21:e2:75:a1:51:da:bf:76:ab: c2:57:04:d7:19:82:38:f0:07:e4:c8:9e:32:35:c3: d8:5a:79:3b:23:ea:ee:8f:db:e7:d6:74:2f:b1:ec: f8:6c:77:c7:d3:0f:b7:fe:65:9b:e1:65:20:d1:22: 6f:16:8c:c0:32:6b:be:d3:f3:3e:08:c2:94:34:0a: a1:27:8d:2d:48:20:c9:d7:9d:04:fa:df:87:85:49: 9e:37:58:71:41:00:fe:99:5f:e8:ef:a5:2f:17:c4: 63:c1:a8:9f:0b:6c:cb:ec:d3:b5:0e:7a:2c:12:e2: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:60:1A:70:D6:57:43:C7:55:8A:9A:DB:25:AA:BA:5D:22:18:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9f6ed96-a71f-3a71-99c6-8a7acb45a0fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c0:c2:41:64:c0:ad:f2:19:6b:f0:af:5f:a9:54:13:e7:4b: 73:43:7c:ff:ba:ed:b2:ac:a8:70:cf:22:f4:c4:8a:90:0d:40: 28:69:1d:8a:98:26:24:b1:39:14:fa:bc:62:7c:9c:0f:48:bf: ed:21:26:5d:d8:7b:32:ec:b6:81:b8:e3:21:42:81:d3:44:74: 1a:17:b5:71:7c:15:c6:0c:a7:68:c8:e1:9c:f5:b1:8b:ff:40: 18:40:39:47:cd:4f:05:8a:5c:5d:e9:de:6d:d4:8d:47:ca:e2: 98:76:1f:42:ef:15:57:20:e0:ee:48:b0:f5:c8:ea:8c:53:b5: cd:20:47:47:78:3e:b4:e9:f5:9e:07:77:ef:52:ae:ea:2b:ec: 59:4c:cd:5e:02:ce:d7:d6:4c:9e:4d:f5:19:0d:31:81:60:25: 7f:71:7c:bb:3f:d6:a5:c7:8b:87:00:84:22:5d:f6:3c:38:d8: e9:6a:32:73:c4:79:39:43:0a:ad:0c:a3:67:77:e4:6e:90:12: 6d:9b:46:81:d7:75:36:b3:ee:63:a2:f6:1e:1b:a3:dd:78:2a: 73:3b:c1:52:32:c1:c6:c4:29:12:cc:07:d6:37:a8:ea:b4:ea: 09:12:59:b6:4c:e6:be:61:ac:a5:5e:e1:3c:22:54:60:9f:11: 90:94:d4:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtMuDCZI0TvLGo4JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNDEwMDAxNVoXDTI1MTIyMzExMDAxNVowLzEtMCsGA1UEAxMk ZGQ1NmZjOWMtMWMzMC00OTRlLTk4ZTItZmM3ZjExOGIzYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM5lCZCoG5YG3KrsXb4gqFcDa60whUs1QKq6 ExIAI5hhHgLtiLxd69XNjQ+p+1JSViBVhjbGySWsum0pikp7JgVe2ZPUuwj4D9md AEn/0oXHhcUhuY26QcIyaeur0masidY4EzDMiu9IA5X9TA4MOc8Oe2TuGL94iqzh GEBEHv7bg6wj0TdTklmYTYch4nWhUdq/dqvCVwTXGYI48AfkyJ4yNcPYWnk7I+ru j9vn1nQvsez4bHfH0w+3/mWb4WUg0SJvFozAMmu+0/M+CMKUNAqhJ40tSCDJ150E +t+HhUmeN1hxQQD+mV/o76UvF8RjwaifC2zL7NO1DnosEuK/YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTDYBpw1ldDx1WKmtslqrpdIhiyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzlmNmVkOTYtYTcxZi0z YTcxLTk5YzYtOGE3YWNiNDVhMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7AwkFkwK3yGWvwr1+pVBPnS3NDfP+67bKsqHDPIvTEipANQChpHYqY JiSxORT6vGJ8nA9Iv+0hJl3YezLstoG44yFCgdNEdBoXtXF8FcYMp2jI4Zz1sYv/ QBhAOUfNTwWKXF3p3m3UjUfK4ph2H0LvFVcg4O5IsPXI6oxTtc0gR0d4PrTp9Z4H d+9Sruor7FlMzV4CztfWTJ5N9RkNMYFgJX9xfLs/1qXHi4cAhCJd9jw42OlqMnPE eTlDCq0Mo2d35G6QEm2bRoHXdTaz7mOi9h4bo914KnM7wVIywcbEKRLMB9Y3qOq0 6gkSWbZM5r5hrKVe4TwiVGCfEZCU1Jg= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:47 2025 by rpki-client