$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdbb6210-2528-3c84-973d-f15771493c9d.roa File: cdbb6210-2528-3c84-973d-f15771493c9d.roa (raw, json) Hash identifier: hUAmEoMv74/EsEe+6JiK7BUR9BavejhigUr+2jWi3+M= Subject key identifier: DD:D6:4B:22:5F:4D:6B:17:78:A9:A2:42:E1:08:29:2D:F2:ED:02:B9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B5A978D1F65E9DBA46EE67580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdbb6210-2528-3c84-973d-f15771493c9d.roa Signing time: Mon 29 Sep 2025 09:15:48 +0000 ROA not before: Mon 29 Sep 2025 09:15:48 +0000 ROA not after: Sun 28 Dec 2025 10:15:48 +0000 asID: 154049 IP address blocks: 209.101.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5a:97:8d:1f:65:e9:db:a4:6e:e6:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 09:15:48 2025 GMT Not After : Dec 28 10:15:48 2025 GMT Subject: CN=ee7484a2-507c-427a-adf6-a13410edd034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:61:e8:71:5d:7e:18:a7:34:8e:d6:4f:70: 0d:2f:67:7c:28:fd:36:f7:2b:91:dd:b2:8e:b7:0c: 18:bd:04:7a:3c:d2:ae:3c:c3:ab:67:c8:0c:eb:30: a4:5a:48:96:9a:ac:0e:0c:9e:47:14:dd:c0:87:e9: 19:3d:65:f4:3f:5e:98:88:4f:fb:eb:67:6d:8d:03: 0a:53:d6:a5:63:ee:d1:ad:f3:28:77:23:38:e5:c9: 84:a0:6a:4e:86:05:1b:9e:f0:88:10:12:d8:4b:de: 24:79:19:03:38:50:70:98:bc:ab:6b:99:7b:99:86: c3:90:67:98:d6:fd:44:01:5c:53:c4:b0:f3:79:2a: 51:2e:3a:e5:52:64:5a:fd:ae:50:42:7f:0b:25:b1: 6d:bb:2e:c6:5a:95:71:ef:11:ab:dc:85:dd:b7:e5: 6c:3d:e8:19:b9:7d:58:20:36:d1:d9:6f:b2:dd:09: a4:c5:11:9f:2b:8a:92:42:d1:19:ac:46:e2:12:ff: 53:cb:d7:e9:ba:d6:17:22:56:4b:5b:a6:5e:9b:c1: 84:c3:e4:37:99:38:77:51:8e:22:53:13:27:a4:e4: d2:a7:88:b7:e5:fc:67:bd:1d:a8:7d:94:6e:4f:89: c5:5e:02:a8:e3:a6:26:46:12:5e:3e:e0:3f:29:2f: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D6:4B:22:5F:4D:6B:17:78:A9:A2:42:E1:08:29:2D:F2:ED:02:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdbb6210-2528-3c84-973d-f15771493c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f2:b2:2b:5c:39:b3:cd:d7:36:79:5a:07:8e:8a:bf:4b:fa: d9:cb:cb:92:f4:e4:6c:be:47:41:f8:a2:93:08:89:1f:ea:b5: 80:08:43:6e:b8:60:5c:0d:09:86:4b:73:d9:10:bb:60:70:93: 83:da:91:6c:fd:a9:a1:26:af:7c:7a:1e:72:f8:50:43:e5:4c: e0:23:19:c3:84:e7:b7:3e:b1:0c:60:fc:ae:bf:82:ea:f4:cc: 54:bb:16:0c:94:47:ae:7a:76:4f:3a:0d:a2:f2:da:10:1a:09: 4d:ec:5d:9f:73:01:88:97:5f:7e:28:91:e3:e0:01:dd:c0:ea: 54:95:de:09:54:48:89:da:8e:f1:29:05:17:59:7d:3c:55:bf: 09:3f:92:15:0f:94:bc:95:59:cf:87:af:39:ec:81:3f:e4:eb: 25:c5:f6:41:61:bb:70:57:30:30:85:ce:f0:c4:61:25:cd:12: ab:89:fd:c1:64:9f:6f:ab:c8:25:e1:12:f5:55:2e:b9:66:49: b0:79:c5:1b:5a:18:bc:0a:21:9f:d0:b6:ad:df:58:72:0e:4e: 7f:30:56:08:a8:18:5c:10:fb:49:c8:ce:b0:ed:02:17:6a:8b: eb:1f:95:ae:63:49:5b:f1:98:59:93:6a:d5:72:54:e5:32:e6: 49:7c:cc:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtal40fZenbpG7mdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyOTA5MTU0OFoXDTI1MTIyODEwMTU0OFowLzEtMCsGA1UEAxMk ZWU3NDg0YTItNTA3Yy00MjdhLWFkZjYtYTEzNDEwZWRkMDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe5h6HFdfhinNI7WT3ANL2d8KP029yuR3bKO twwYvQR6PNKuPMOrZ8gM6zCkWkiWmqwODJ5HFN3Ah+kZPWX0P16YiE/762dtjQMK U9alY+7RrfModyM45cmEoGpOhgUbnvCIEBLYS94keRkDOFBwmLyra5l7mYbDkGeY 1v1EAVxTxLDzeSpRLjrlUmRa/a5QQn8LJbFtuy7GWpVx7xGr3IXdt+VsPegZuX1Y IDbR2W+y3QmkxRGfK4qSQtEZrEbiEv9Ty9fputYXIlZLW6Zem8GEw+Q3mTh3UY4i UxMnpOTSp4i35fxnvR2ofZRuT4nFXgKo46YmRhJePuA/KS/mlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3WSyJfTWsXeKmiQuEIKS3y7QK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2RiYjYyMTAtMjUyOC0z Yzg0LTk3M2QtZjE1NzcxNDkzYzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnysitcObPN1zZ5WgeOir9L+tnLy5L05Gy+R0H4opMIiR/qtYAIQ264 YFwNCYZLc9kQu2Bwk4PakWz9qaEmr3x6HnL4UEPlTOAjGcOE57c+sQxg/K6/gur0 zFS7FgyUR656dk86DaLy2hAaCU3sXZ9zAYiXX34okePgAd3A6lSV3glUSInajvEp BRdZfTxVvwk/khUPlLyVWc+HrznsgT/k6yXF9kFhu3BXMDCFzvDEYSXNEquJ/cFk n2+ryCXhEvVVLrlmSbB5xRtaGLwKIZ/Qtq3fWHIOTn8wVgioGFwQ+0nIzrDtAhdq i+sfla5jSVvxmFmTatVyVOUy5kl8zAY= -----END CERTIFICATE-----Generated at Thu Oct 9 06:22:35 2025 by rpki-client