$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa File: cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa (raw, json) Hash identifier: SWVCqKYy04efICyyMi8TYyAn8k9lToQLvNKJk+GY47Q= Subject key identifier: 22:3B:B1:AF:20:50:33:38:A8:31:FC:7C:85:C3:80:DB:73:22:FD:E9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC8284C0F7D4C4F060B040 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa Signing time: Mon 08 Sep 2025 07:17:35 +0000 ROA not before: Mon 08 Sep 2025 07:17:35 +0000 ROA not after: Sun 07 Dec 2025 08:17:35 +0000 asID: 401783 IP address blocks: 209.101.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:82:84:c0:f7:d4:c4:f0:60:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:35 2025 GMT Not After : Dec 7 08:17:35 2025 GMT Subject: CN=1d109113-7651-4e2c-8a9b-1b7604cff169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a0:d7:c8:bc:ac:03:21:76:d1:40:e0:57:5d: c3:b2:2c:1f:3d:7c:b0:27:ec:6a:0a:fc:f4:3b:6c: 63:19:c2:3a:1f:14:12:26:49:68:32:34:84:cd:ff: 07:af:87:69:df:c7:df:ac:77:59:eb:fa:b8:1c:95: 0d:88:20:b8:78:45:a0:e7:15:28:cb:0c:6a:59:b2: 7e:32:0d:13:0c:0c:58:4f:fb:13:38:2b:6a:4d:01: 03:ad:d5:64:b6:74:64:2c:0b:a1:dd:18:42:11:3a: 6c:5d:24:31:61:8b:f8:2b:1a:77:7d:c4:82:f8:a8: 9f:bb:16:83:ae:3e:9d:ad:c3:c2:9e:ce:4b:d7:39: ee:06:81:f4:4e:9d:14:c8:ed:a8:09:f5:ee:ea:d8: 7d:c7:b9:47:47:95:da:5b:e5:cb:6b:ea:dc:d7:8b: 47:e7:b6:28:07:34:d2:81:89:d3:91:01:66:7e:09: 02:75:e9:c1:08:52:89:56:80:6a:dc:79:a6:a6:df: 8f:71:58:52:53:f2:b7:4c:92:0d:8b:b5:9c:88:b1: c7:80:5c:d5:a7:49:74:5f:da:4f:8e:9c:de:ed:c8: 19:07:80:e7:60:71:23:f6:99:52:b6:b5:2e:62:bf: 2e:64:1e:fd:3f:07:2f:20:6a:ed:fb:38:45:bd:ce: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3B:B1:AF:20:50:33:38:A8:31:FC:7C:85:C3:80:DB:73:22:FD:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:f5:65:bf:8e:16:b8:15:37:37:2f:f1:b4:60:e1:5c:53:10: 41:6b:7b:46:07:f7:ce:ee:5f:44:5d:ae:59:4a:e7:37:a3:8e: 44:63:3c:e7:df:97:e2:e4:1b:a0:d5:63:37:3c:ea:d8:e8:9f: 82:7c:87:e7:44:5e:d4:40:64:e9:47:ff:25:66:fe:65:c1:58: 5d:65:d7:c9:94:26:ac:b1:a0:d2:50:24:bc:9d:1c:5c:11:1e: 9e:41:9f:e0:c7:76:1d:08:89:36:50:ed:95:bb:5b:53:12:52: 39:f5:3e:ef:21:8c:46:98:c2:5e:fb:37:72:1e:60:4d:a2:c5: 98:9c:fd:84:c4:e1:06:99:81:a7:ce:cb:50:a6:bd:99:35:b8: 19:a1:ee:b7:73:69:27:89:01:e5:b6:33:50:2c:6e:03:3f:c2: 4c:32:21:86:55:9e:76:64:23:8c:65:d0:9c:c9:8c:28:33:5f: ad:01:89:c0:0a:7a:d1:b4:b3:82:60:ed:df:7d:a5:8a:4a:81: ff:25:ea:46:4c:f7:ce:76:87:23:7c:e8:4a:43:05:98:25:e2: c3:26:8e:c1:5b:79:87:36:6a:5f:3c:8b:dd:85:c3:67:00:77: e8:75:a0:f0:11:8f:b8:8d:6d:29:7b:21:8f:34:4d:78:cc:07: c4:b0:d6:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvIKEwPfUxPBgsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTczNVoXDTI1MTIwNzA4MTczNVowLzEtMCsGA1UEAxMk MWQxMDkxMTMtNzY1MS00ZTJjLThhOWItMWI3NjA0Y2ZmMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqDXyLysAyF20UDgV13DsiwfPXywJ+xqCvz0 O2xjGcI6HxQSJkloMjSEzf8Hr4dp38ffrHdZ6/q4HJUNiCC4eEWg5xUoywxqWbJ+ Mg0TDAxYT/sTOCtqTQEDrdVktnRkLAuh3RhCETpsXSQxYYv4Kxp3fcSC+KifuxaD rj6drcPCns5L1znuBoH0Tp0UyO2oCfXu6th9x7lHR5XaW+XLa+rc14tH57YoBzTS gYnTkQFmfgkCdenBCFKJVoBq3Hmmpt+PcVhSU/K3TJINi7WciLHHgFzVp0l0X9pP jpze7cgZB4DnYHEj9plStrUuYr8uZB79PwcvIGrt+zhFvc4vowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI7sa8gUDM4qDH8fIXDgNtzIv3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2YzYThmZTgtNzgxMC0z ZjFjLWI5N2ItYTVhNmM1ZmEwMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMD1Zb+OFrgVNzcv8bRg4VxTEEFre0YH987uX0RdrllK5zejjkRjPOff l+LkG6DVYzc86tjon4J8h+dEXtRAZOlH/yVm/mXBWF1l18mUJqyxoNJQJLydHFwR Hp5Bn+DHdh0IiTZQ7ZW7W1MSUjn1Pu8hjEaYwl77N3IeYE2ixZic/YTE4QaZgafO y1CmvZk1uBmh7rdzaSeJAeW2M1AsbgM/wkwyIYZVnnZkI4xl0JzJjCgzX60BicAK etG0s4Jg7d99pYpKgf8l6kZM9852hyN86EpDBZgl4sMmjsFbeYc2al88i92Fw2cA d+h1oPARj7iNbSl7IY80TXjMB8Sw1ns= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:51 2025 by rpki-client