$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa File: d839064a-caaf-3526-8919-06009f7be8de.roa (raw, json) Hash identifier: 1cmjSnQ3Qeoy89KmKKp+vn+YoiN+HTvD2iJZY6S+v0c= Subject key identifier: 18:2D:BD:25:5A:A3:01:F6:D4:2A:29:D3:D1:60:2F:7E:C3:7D:CB:CE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B627E6609A851C32097DB3500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa Signing time: Thu 02 Oct 2025 05:11:36 +0000 ROA not before: Thu 02 Oct 2025 05:11:36 +0000 ROA not after: Wed 31 Dec 2025 06:11:36 +0000 asID: 212238 IP address blocks: 209.101.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:7e:66:09:a8:51:c3:20:97:db:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 2 05:11:36 2025 GMT Not After : Dec 31 06:11:36 2025 GMT Subject: CN=cb739366-16d0-455b-a0f6-664a03063d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:46:cb:c6:1b:5c:62:83:c2:17:3e:39:2c: 06:9f:fc:5d:4b:ab:ee:84:df:97:78:a2:2c:95:ef: 0b:c4:17:65:3f:ff:98:0a:d1:43:98:2e:1e:f1:ab: d7:05:93:3c:ad:84:32:b5:e0:d7:64:b9:a3:97:75: f1:2a:6b:32:f5:c5:d3:1a:29:fa:3b:21:4a:a9:91: 18:6a:30:f1:44:0f:b3:dd:b3:05:7e:84:74:0a:0f: 74:a3:c0:77:8c:6b:3a:9d:3c:ae:f6:6d:44:31:cc: f5:b2:a6:da:ab:0d:8f:45:56:9b:6a:d7:61:43:88: 74:10:08:91:94:58:1e:f6:d9:02:af:d5:43:bd:75: 53:ad:cc:df:f4:b1:e2:62:d3:65:2f:2f:5b:1e:b6: c1:ad:88:99:9f:7d:28:54:de:c5:24:c9:c4:4c:62: 74:58:a8:18:8a:26:11:a9:9e:a1:ad:05:1e:a0:1d: 67:90:ea:03:80:cd:28:4e:42:d5:ee:7c:b1:6c:d9: 6d:1d:e8:86:79:32:79:e2:b4:9b:f9:3d:97:b3:42: 76:b5:5b:91:e9:e1:04:e8:52:0e:5a:28:29:f6:bf: d9:c0:89:80:f5:6a:82:28:85:c2:a6:b9:9d:71:e5: 60:03:08:45:a8:0d:8f:e8:10:03:2a:4f:b2:d9:d9: 81:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2D:BD:25:5A:A3:01:F6:D4:2A:29:D3:D1:60:2F:7E:C3:7D:CB:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8b:ce:86:33:cf:a7:6e:6f:48:b8:a0:13:d9:ee:fb:4c:ae: 09:69:1b:32:59:67:47:b1:9f:a2:f0:be:b2:6b:37:df:b8:96: fd:dc:68:cb:a0:f1:fe:2c:04:90:76:fe:bc:41:5f:17:70:29: 90:ce:e9:34:f2:f4:ac:23:c5:c5:01:a4:ca:6a:3e:a2:d2:d7: 2f:12:7e:62:51:6a:27:69:59:12:72:fc:ed:ac:f4:3f:2b:6c: d3:fb:9f:32:29:5d:33:e3:65:71:90:ad:4f:c0:9d:18:f6:af: ac:eb:0d:ff:e2:6e:c0:a1:ca:44:78:f2:16:41:a9:f4:8a:15: 8c:a2:69:0e:74:3e:2a:3c:0f:2c:25:5a:78:74:51:95:1a:b1: c3:92:33:ed:d2:0f:8f:31:0a:bd:94:cc:11:82:17:73:b1:3a: 47:5e:f9:77:77:4b:b5:2f:13:44:b9:ed:c5:c7:4d:f8:c7:49: c9:97:a0:1f:fd:b8:b7:32:38:e1:3a:c3:a3:47:29:07:c5:f0: 47:32:96:83:a0:f4:7c:bb:90:d3:9c:a4:d9:25:81:24:1a:d4: 3e:d5:7b:f2:5d:7b:14:fb:f7:19:54:af:5e:7c:dd:5c:ac:87: 7e:4d:10:2e:e5:56:6c:e6:11:83:81:bb:de:2e:ca:53:65:e2: 1c:fb:d1:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtifmYJqFHDIJfbNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwMjA1MTEzNloXDTI1MTIzMTA2MTEzNlowLzEtMCsGA1UEAxMk Y2I3MzkzNjYtMTZkMC00NTViLWEwZjYtNjY0YTAzMDYzZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrVGy8YbXGKDwhc+OSwGn/xdS6vuhN+XeKIs le8LxBdlP/+YCtFDmC4e8avXBZM8rYQyteDXZLmjl3XxKmsy9cXTGin6OyFKqZEY ajDxRA+z3bMFfoR0Cg90o8B3jGs6nTyu9m1EMcz1sqbaqw2PRVabatdhQ4h0EAiR lFge9tkCr9VDvXVTrczf9LHiYtNlLy9bHrbBrYiZn30oVN7FJMnETGJ0WKgYiiYR qZ6hrQUeoB1nkOoDgM0oTkLV7nyxbNltHeiGeTJ54rSb+T2Xs0J2tVuR6eEE6FIO Wigp9r/ZwImA9WqCKIXCprmdceVgAwhFqA2P6BADKk+y2dmBVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgtvSVaowH21Cop09FgL37DfcvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDgzOTA2NGEtY2FhZi0z NTI2LTg5MTktMDYwMDlmN2JlOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqLzoYzz6dub0i4oBPZ7vtMrglpGzJZZ0exn6LwvrJrN9+4lv3caMug 8f4sBJB2/rxBXxdwKZDO6TTy9KwjxcUBpMpqPqLS1y8SfmJRaidpWRJy/O2s9D8r bNP7nzIpXTPjZXGQrU/AnRj2r6zrDf/ibsChykR48hZBqfSKFYyiaQ50Pio8Dywl Wnh0UZUascOSM+3SD48xCr2UzBGCF3OxOkde+Xd3S7UvE0S57cXHTfjHScmXoB/9 uLcyOOE6w6NHKQfF8EcyloOg9Hy7kNOcpNklgSQa1D7Ve/JdexT79xlUr1583Vys h35NEC7lVmzmEYOBu94uylNl4hz70Ys= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:32 2025 by rpki-client