$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd0a1cea-1a66-390e-bcba-865a05b7d62f.roa File: cd0a1cea-1a66-390e-bcba-865a05b7d62f.roa (raw, json) Hash identifier: s05ZFmY6AWd9Q6jSi6DHZrU2cJGu9Uvn3kuG2ms5iPM= Subject key identifier: E1:11:38:5F:A4:C0:6C:3D:D6:06:76:C5:BB:0D:62:64:7A:70:F3:16 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC55D21639A900BEDBCCC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd0a1cea-1a66-390e-bcba-865a05b7d62f.roa Signing time: Mon 08 Sep 2025 07:17:14 +0000 ROA not before: Mon 08 Sep 2025 07:17:14 +0000 ROA not after: Sun 07 Dec 2025 08:17:14 +0000 asID: 401783 IP address blocks: 209.101.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:55:d2:16:39:a9:00:be:db:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:14 2025 GMT Not After : Dec 7 08:17:14 2025 GMT Subject: CN=47041818-b9f0-4219-8307-5e5c46ff0840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:9d:ad:eb:a5:84:fa:69:20:53:b9:07:69: 66:89:fb:d7:2c:72:f5:c5:24:1f:3b:15:7a:44:40: fe:a6:95:ce:82:00:25:1f:54:a2:78:d3:f4:86:8a: 02:71:70:f2:9e:3a:13:ac:e5:20:dd:a4:80:58:1f: 17:ea:dd:e6:bd:18:04:23:8d:33:4b:3e:12:ab:e9: 76:a1:69:0b:ee:24:4b:9e:e7:53:72:81:b6:7a:7d: 3d:9e:07:e9:b0:7c:ca:d5:bc:17:37:b6:ca:bf:4c: 35:60:63:f3:b1:87:77:61:1b:15:e5:92:dc:2c:5b: 7f:0d:6f:b6:b7:bc:54:bf:69:7a:53:0a:b8:89:c7: 0f:02:72:01:4a:01:63:cf:85:e6:10:15:cb:8c:91: 68:9a:25:40:58:80:1f:e6:f6:83:31:7c:31:97:22: 59:d3:64:1c:4f:3b:3c:fa:ec:78:9f:91:dc:1a:bf: 62:e1:46:22:dd:9e:18:27:e1:f7:7c:4f:76:27:eb: 4e:a9:76:00:13:e0:3a:78:85:7c:dd:c6:77:5a:d6: c2:63:a5:94:c8:d7:35:f5:86:2c:23:0d:20:28:d4: d2:b3:08:83:de:04:f0:d5:f1:c7:10:7b:39:1c:d4: 8b:3c:45:09:ac:33:6a:88:60:a7:4c:f4:a8:7f:00: 2c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:11:38:5F:A4:C0:6C:3D:D6:06:76:C5:BB:0D:62:64:7A:70:F3:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd0a1cea-1a66-390e-bcba-865a05b7d62f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9a:cc:f6:a5:89:67:f8:f7:fb:7b:6b:cc:4b:eb:3f:ae:41: fa:ea:8b:b2:57:c1:3d:38:b2:69:8e:9f:b4:bb:13:30:1b:3a: 9c:48:d8:eb:39:65:64:27:e4:79:12:39:00:66:99:16:3c:0d: f9:ba:41:45:db:25:c3:6e:27:08:7a:4b:e7:37:d8:aa:66:4a: df:a3:59:c1:99:00:1d:46:b6:9d:dd:4c:10:02:d8:7b:d6:0f: 31:63:92:d4:c1:19:5b:5e:6e:b0:46:66:cb:e5:26:03:e3:68: e7:72:7d:71:f3:7b:49:a5:45:c9:2b:68:8c:7a:9a:30:33:d2: b5:b0:a3:f0:78:19:6b:b5:19:45:0e:4c:d5:82:a6:51:f9:dc: 0f:2b:3d:f4:ff:6f:30:1a:76:be:58:43:56:76:44:26:95:ac: 6d:98:2d:b2:3e:95:dc:84:b9:57:cb:77:f8:0c:2f:b0:dc:ee: 05:66:7e:7c:48:4b:23:53:c9:20:63:ce:49:fb:41:60:1c:61: 5f:0a:b8:b4:9f:4e:f7:9b:ca:b2:66:68:c8:99:0c:61:78:89: e6:e1:ae:fd:e4:6b:94:2c:a7:d8:c4:2c:66:ac:a7:05:d4:b4: 95:42:74:1e:50:e7:37:8a:15:00:ab:96:5a:39:b2:38:70:91: 37:9f:2e:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvFXSFjmpAL7bzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTcxNFoXDTI1MTIwNzA4MTcxNFowLzEtMCsGA1UEAxMk NDcwNDE4MTgtYjlmMC00MjE5LTgzMDctNWU1YzQ2ZmYwODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHWdreulhPppIFO5B2lmifvXLHL1xSQfOxV6 RED+ppXOggAlH1SieNP0hooCcXDynjoTrOUg3aSAWB8X6t3mvRgEI40zSz4Sq+l2 oWkL7iRLnudTcoG2en09ngfpsHzK1bwXN7bKv0w1YGPzsYd3YRsV5ZLcLFt/DW+2 t7xUv2l6Uwq4iccPAnIBSgFjz4XmEBXLjJFomiVAWIAf5vaDMXwxlyJZ02QcTzs8 +ux4n5HcGr9i4UYi3Z4YJ+H3fE92J+tOqXYAE+A6eIV83cZ3WtbCY6WUyNc19YYs Iw0gKNTSswiD3gTw1fHHEHs5HNSLPEUJrDNqiGCnTPSofwAsXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEROF+kwGw91gZ2xbsNYmR6cPMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2QwYTFjZWEtMWE2Ni0z OTBlLWJjYmEtODY1YTA1YjdkNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaazPaliWf49/t7a8xL6z+uQfrqi7JXwT04smmOn7S7EzAbOpxI2Os5 ZWQn5HkSOQBmmRY8Dfm6QUXbJcNuJwh6S+c32KpmSt+jWcGZAB1Gtp3dTBAC2HvW DzFjktTBGVtebrBGZsvlJgPjaOdyfXHze0mlRckraIx6mjAz0rWwo/B4GWu1GUUO TNWCplH53A8rPfT/bzAadr5YQ1Z2RCaVrG2YLbI+ldyEuVfLd/gML7Dc7gVmfnxI SyNTySBjzkn7QWAcYV8KuLSfTvebyrJmaMiZDGF4iebhrv3ka5Qsp9jELGaspwXU tJVCdB5Q5zeKFQCrllo5sjhwkTefLjY= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:49 2025 by rpki-client