$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d1028037-13ce-37e9-8894-b4edee762a2a.roa File: d1028037-13ce-37e9-8894-b4edee762a2a.roa (raw, json) Hash identifier: 3FwE/0a3rK+TgZzwYbGU+w7+B4kd9/U+gQRbng/QtSk= Subject key identifier: E4:4E:09:8B:58:0F:BE:D7:9F:E6:A8:7D:28:48:D4:0A:31:B8:02:46 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC2D3CB56F149AC03CE850 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d1028037-13ce-37e9-8894-b4edee762a2a.roa Signing time: Mon 08 Sep 2025 07:16:55 +0000 ROA not before: Mon 08 Sep 2025 07:16:55 +0000 ROA not after: Sun 07 Dec 2025 08:16:55 +0000 asID: 401783 IP address blocks: 209.101.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:2d:3c:b5:6f:14:9a:c0:3c:e8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:55 2025 GMT Not After : Dec 7 08:16:55 2025 GMT Subject: CN=0018958c-8f76-4e8e-b6d3-3e5e1f697710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1d:67:1c:23:e7:ac:bb:1c:32:25:26:1b:f0: 65:4f:3a:ae:6e:8d:5c:5a:10:b3:00:2b:a3:9e:8c: d0:de:bb:6e:f3:44:e0:0c:e4:1d:55:12:90:b3:a3: f3:38:ca:39:f8:80:b7:da:c1:13:54:c9:0d:c7:64: 70:f5:1d:59:a0:e6:4c:e8:2e:fb:1f:66:46:ac:5d: fa:b8:ce:a6:c0:2c:42:8b:08:8d:9c:b0:39:28:a9: 27:67:fb:37:72:0b:1b:82:ce:0c:1a:f7:b6:6d:16: 95:1d:e9:df:a6:30:ad:44:18:d8:a7:ba:e4:9b:1c: 53:92:6d:b8:84:28:28:52:b5:01:68:2c:ae:35:a3: d3:ae:6a:72:51:cc:ec:e4:a7:8c:3d:26:52:ad:fb: bc:4c:12:b7:ab:6c:e5:3a:19:61:eb:96:59:87:d0: cc:24:42:dc:4f:d0:29:69:9b:c0:4e:94:12:1a:6b: 51:b2:03:f9:e1:3b:a8:a7:7e:3b:61:1a:75:57:40: ab:54:49:29:7a:64:e6:d4:65:ee:e8:da:b3:75:21: 40:fa:26:84:35:df:71:66:85:22:8b:6b:6e:40:f1: 38:a4:86:e5:91:a8:58:ca:5b:54:45:20:23:a7:7f: 1a:63:2b:a3:80:7c:40:47:9b:3c:80:5d:7d:19:1c: 9b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4E:09:8B:58:0F:BE:D7:9F:E6:A8:7D:28:48:D4:0A:31:B8:02:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d1028037-13ce-37e9-8894-b4edee762a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:83:10:33:62:8e:b2:50:99:ec:15:ab:86:8d:1c:0e:a0:55: 93:d7:39:88:ad:13:93:a2:12:77:92:7d:d9:e4:07:f3:c8:87: d2:4b:18:3b:f8:aa:f0:ee:7c:54:d8:b0:24:81:71:a9:4d:f6: 82:c9:ac:b2:31:3e:40:a3:c8:2f:18:e2:95:89:b7:7a:77:4e: 23:0b:b9:7d:85:1f:c5:6e:dc:61:90:ac:9d:02:db:af:a5:39: a7:b3:6b:7d:37:a9:da:22:10:49:81:8c:a5:9e:f7:11:be:d6: f5:37:2f:b1:4d:5f:09:71:45:c9:cf:ab:b6:ae:c7:ab:76:aa: a9:e3:87:48:3b:2b:ae:18:0c:db:c5:cb:8d:90:d7:21:9e:77: a2:9a:85:49:ef:37:0f:0a:2d:80:7b:8d:69:04:9b:19:4d:8a: fb:36:25:2f:83:24:ba:11:16:cc:29:3e:a8:e4:6f:c6:fd:75: e9:e4:4b:b3:d5:c2:e9:48:d9:27:59:0f:f3:d6:73:73:2b:e2: 9d:0e:7f:5a:2b:ab:bd:2a:36:de:74:5d:c7:b8:69:8c:bb:06: f3:d0:22:cf:01:29:00:80:79:59:24:ce:4d:fd:c8:f1:3e:7b: 4f:b7:55:70:14:6d:b8:08:b0:3e:7b:1a:d3:30:f3:90:41:4c: 0b:c4:10:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvC08tW8UmsA86FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTY1NVoXDTI1MTIwNzA4MTY1NVowLzEtMCsGA1UEAxMk MDAxODk1OGMtOGY3Ni00ZThlLWI2ZDMtM2U1ZTFmNjk3NzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x1nHCPnrLscMiUmG/BlTzqubo1cWhCzACuj nozQ3rtu80TgDOQdVRKQs6PzOMo5+IC32sETVMkNx2Rw9R1ZoOZM6C77H2ZGrF36 uM6mwCxCiwiNnLA5KKknZ/s3cgsbgs4MGve2bRaVHenfpjCtRBjYp7rkmxxTkm24 hCgoUrUBaCyuNaPTrmpyUczs5KeMPSZSrfu8TBK3q2zlOhlh65ZZh9DMJELcT9Ap aZvATpQSGmtRsgP54Tuop347YRp1V0CrVEkpemTm1GXu6NqzdSFA+iaENd9xZoUi i2tuQPE4pIblkahYyltURSAjp38aYyujgHxAR5s8gF19GRybJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOROCYtYD77Xn+aofShI1AoxuAJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDEwMjgwMzctMTNjZS0z N2U5LTg4OTQtYjRlZGVlNzYyYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2DEDNijrJQmewVq4aNHA6gVZPXOYitE5OiEneSfdnkB/PIh9JLGDv4 qvDufFTYsCSBcalN9oLJrLIxPkCjyC8Y4pWJt3p3TiMLuX2FH8Vu3GGQrJ0C26+l Oaeza303qdoiEEmBjKWe9xG+1vU3L7FNXwlxRcnPq7aux6t2qqnjh0g7K64YDNvF y42Q1yGed6KahUnvNw8KLYB7jWkEmxlNivs2JS+DJLoRFswpPqjkb8b9denkS7PV wulI2SdZD/PWc3Mr4p0Of1orq70qNt50Xce4aYy7BvPQIs8BKQCAeVkkzk39yPE+ e0+3VXAUbbgIsD57GtMw85BBTAvEECA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:36 2025 by rpki-client