$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d34fc524-af46-3316-bcd9-16f9ca9d2167.roa File: d34fc524-af46-3316-bcd9-16f9ca9d2167.roa (raw, json) Hash identifier: mfxPn5fdgQ5IevUE1KDrwYaA0b5m2j0KzGTNJv3TeOE= Subject key identifier: 71:45:9F:B7:C7:8B:F7:E4:A2:4B:7D:6D:D7:59:4D:E9:05:9F:E0:0F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B7993B20AD83890A77396C040 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d34fc524-af46-3316-bcd9-16f9ca9d2167.roa Signing time: Fri 10 Oct 2025 11:38:06 +0000 ROA not before: Fri 10 Oct 2025 11:38:06 +0000 ROA not after: Thu 08 Jan 2026 12:38:06 +0000 asID: 9304 IP address blocks: 209.101.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:93:b2:0a:d8:38:90:a7:73:96:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 11:38:06 2025 GMT Not After : Jan 8 12:38:06 2026 GMT Subject: CN=eaa90030-0a65-4537-accd-3bcadb52f1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:09:5b:5c:6c:64:7c:51:21:48:31:5f:ca:eb: cd:f0:58:05:df:c9:16:6a:97:e9:c5:d4:b2:c6:28: 9e:2b:19:f0:4e:87:9e:d5:93:75:89:00:a1:35:3b: c3:64:7c:5e:62:e4:30:5f:41:9c:11:5f:59:fa:ba: 84:d7:0b:7c:76:b0:35:21:9f:b4:2b:a6:5c:1f:c3: d2:df:5b:6d:bf:90:c8:e9:95:5c:3a:74:04:ff:80: 33:b6:55:78:8f:d3:19:ee:7c:79:a3:79:ec:9b:bb: db:54:66:69:c4:8f:05:07:80:23:f8:c9:37:35:1a: 59:f7:52:14:7e:e3:38:01:6a:ff:32:ca:37:fb:92: 1e:81:01:7e:2c:bc:50:d6:25:91:7a:24:1f:92:ab: f5:14:c3:c9:80:c9:65:68:0b:6f:2b:e1:ab:80:b7: b3:d7:5c:18:86:a9:35:26:ed:5a:c1:1b:d2:c1:f0: 75:37:0f:a6:fc:0e:9d:93:4f:74:0d:48:6e:af:a4: a8:63:f1:eb:e5:da:58:90:8b:da:d6:b0:2a:f1:7b: 7b:67:1a:8a:57:95:c6:1f:ca:39:4a:ba:22:94:f1: e9:b6:8d:2f:c5:3f:d4:6f:c7:c2:59:70:c8:35:ec: e3:8f:f4:58:e5:11:4d:59:50:4f:18:fd:de:ab:ab: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:45:9F:B7:C7:8B:F7:E4:A2:4B:7D:6D:D7:59:4D:E9:05:9F:E0:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d34fc524-af46-3316-bcd9-16f9ca9d2167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:32:f9:3f:3d:dd:e1:60:6b:f9:56:21:57:ff:58:4c:84:8b: eb:ab:c2:91:3a:6d:09:8e:4f:e3:be:8d:54:db:07:f6:18:d2: 77:60:da:2e:5d:b4:69:d9:e2:82:f3:23:0a:45:0e:04:4c:08: 51:08:4a:5c:c6:81:1a:a3:06:82:e4:bf:93:b0:a9:d4:6a:bf: f8:20:8e:2a:83:46:3a:50:b3:a3:6d:29:b0:58:87:0a:3d:bf: 36:0d:4b:13:c1:95:da:9d:5f:49:93:a5:e5:8d:1d:ff:65:38: c8:b0:32:a6:ae:16:b0:ac:3b:8d:bc:b3:86:ab:bc:0d:73:0a: da:b6:41:72:76:f8:84:47:e0:4b:41:3d:fb:64:fb:b9:75:79: 37:55:e0:b8:7f:9c:26:00:bd:15:18:6d:33:37:68:dd:5a:5c: 4c:0d:c4:81:ca:26:a3:ec:72:69:d7:01:ce:fb:53:9d:92:2e: 58:31:fd:e0:b5:69:fd:1b:49:3f:6f:2a:f1:80:2c:1d:c5:6f: 8e:8a:53:5e:93:66:35:8c:2b:59:d9:a9:2d:92:57:b5:75:0b: 21:7a:3f:bb:52:57:07:e5:78:c3:de:f3:e5:76:43:a1:29:eb: 4e:05:47:3e:84:a6:aa:35:84:20:90:a6:6a:19:f6:c9:ab:99: 16:28:0b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5k7IK2DiQp3OWwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDExMzgwNloXDTI2MDEwODEyMzgwNlowLzEtMCsGA1UEAxMk ZWFhOTAwMzAtMGE2NS00NTM3LWFjY2QtM2JjYWRiNTJmMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQlbXGxkfFEhSDFfyuvN8FgF38kWapfpxdSy xiieKxnwToee1ZN1iQChNTvDZHxeYuQwX0GcEV9Z+rqE1wt8drA1IZ+0K6ZcH8PS 31ttv5DI6ZVcOnQE/4AztlV4j9MZ7nx5o3nsm7vbVGZpxI8FB4Aj+Mk3NRpZ91IU fuM4AWr/Mso3+5IegQF+LLxQ1iWReiQfkqv1FMPJgMllaAtvK+GrgLez11wYhqk1 Ju1awRvSwfB1Nw+m/A6dk090DUhur6SoY/Hr5dpYkIva1rAq8Xt7ZxqKV5XGH8o5 SroilPHpto0vxT/Ub8fCWXDINezjj/RY5RFNWVBPGP3eq6tt5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFFn7fHi/fkokt9bddZTekFn+APMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDM0ZmM1MjQtYWY0Ni0z MzE2LWJjZDktMTZmOWNhOWQyMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WW5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsy+T893eFga/lWIVf/WEyEi+urwpE6bQmOT+O+jVTbB/YY0ndg2i5d tGnZ4oLzIwpFDgRMCFEISlzGgRqjBoLkv5OwqdRqv/ggjiqDRjpQs6NtKbBYhwo9 vzYNSxPBldqdX0mTpeWNHf9lOMiwMqauFrCsO428s4arvA1zCtq2QXJ2+IRH4EtB Pftk+7l1eTdV4Lh/nCYAvRUYbTM3aN1aXEwNxIHKJqPscmnXAc77U52SLlgx/eC1 af0bST9vKvGALB3Fb46KU16TZjWMK1nZqS2SV7V1CyF6P7tSVwfleMPe8+V2Q6Ep 604FRz6Epqo1hCCQpmoZ9smrmRYoCxQ= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:12 2025 by rpki-client