$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa File: db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa (raw, json) Hash identifier: mgZKgwccIqgAnf76/uIKFG1sqT8Jc21QkWq35wtgB6E= Subject key identifier: 03:9A:A3:DB:BC:A1:9F:9A:BD:E2:E4:89:87:04:11:49:6E:1B:16:57 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC4BEA26679B48F640D2C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa Signing time: Mon 08 Sep 2025 07:17:09 +0000 ROA not before: Mon 08 Sep 2025 07:17:09 +0000 ROA not after: Sun 07 Dec 2025 08:17:09 +0000 asID: 401783 IP address blocks: 209.101.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:4b:ea:26:67:9b:48:f6:40:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:09 2025 GMT Not After : Dec 7 08:17:09 2025 GMT Subject: CN=97184cd6-3ef2-43d6-97ad-6368f6b9d17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:db:f9:2a:7c:17:6d:32:d0:64:d7:87:01:e6: f1:3f:45:de:e3:78:3d:7c:a4:a3:cb:ec:f1:bb:50: 91:a5:fe:ca:0a:26:cf:e9:e8:5e:9a:df:64:2f:bb: 40:b1:b6:49:71:12:d0:b5:cf:81:84:f2:3d:3d:ca: 0b:70:d9:ce:25:51:40:70:ec:95:8a:8f:ee:ee:e7: 6b:f4:f3:01:a8:92:6d:37:55:66:d1:e9:dc:2b:cc: c1:65:b1:8b:19:c7:95:fc:d2:40:6a:95:94:16:52: 7c:84:a5:cd:19:b8:60:4d:ca:85:d7:cf:0d:39:83: 85:13:92:1e:1e:98:ec:f5:15:dc:23:45:80:57:83: 11:40:2a:6e:1f:33:7b:3b:3d:e9:2b:63:c9:5c:89: 18:6f:3f:36:5a:96:8d:bb:b4:31:82:04:e7:4b:87: 4c:05:3f:1b:d6:4d:60:74:f4:b5:6d:67:3b:f6:5f: 0d:a5:33:67:0f:53:f4:3a:1a:f6:48:32:5e:8e:c0: f5:48:37:4c:f2:50:9c:39:30:a5:bd:9a:fa:e0:ca: 50:e7:a2:e7:55:b5:45:a4:a9:e5:4f:b7:11:a3:88: 8c:ec:0b:7b:6e:6f:b5:ee:61:54:35:86:e6:42:53: ea:3e:ce:dc:0b:4e:93:47:4c:62:63:c7:0d:68:b5: 4e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9A:A3:DB:BC:A1:9F:9A:BD:E2:E4:89:87:04:11:49:6E:1B:16:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d5:ed:a2:2a:2c:75:70:b6:96:16:68:5d:f7:54:86:59:9b: fc:18:84:c8:2d:17:ee:44:05:a8:6e:08:c9:be:c0:19:51:74: c0:b4:92:d5:b2:d1:c0:4b:e1:b8:61:09:8e:e0:d5:9f:35:1b: 02:75:15:5d:cc:c0:00:a8:d6:99:38:7f:df:28:af:8a:fe:af: 65:02:12:16:0e:2b:9f:b9:c9:ad:3b:3e:83:66:6e:4d:df:9a: 2c:98:65:5e:43:f7:a7:3c:ee:5c:c5:0d:b5:ad:73:2e:ed:ac: 2a:c0:27:f3:1a:27:d5:8f:e9:8f:0b:08:fd:6b:1e:70:78:24: e2:d3:f1:d8:95:b8:23:75:80:fd:de:99:aa:f1:d5:e8:9d:ab: f5:46:a1:63:70:f0:fe:3a:cd:28:54:df:57:96:69:1a:41:c9: d9:74:96:0c:6d:76:c0:fe:d7:84:1d:74:8b:24:6d:7d:5d:cf: 4d:fa:69:e9:20:d5:7f:72:00:d9:b5:14:88:03:f9:3d:af:4a: 14:e9:64:c8:2c:88:7f:a5:74:1d:b3:b7:f4:3c:aa:be:e7:aa: 32:71:cb:71:06:41:71:a7:22:85:c8:04:ae:35:96:be:13:d5: 27:36:12:c0:9d:92:26:57:95:0a:ed:9e:f8:25:37:d3:d6:ea: 45:fe:02:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvEvqJmebSPZA0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTcwOVoXDTI1MTIwNzA4MTcwOVowLzEtMCsGA1UEAxMk OTcxODRjZDYtM2VmMi00M2Q2LTk3YWQtNjM2OGY2YjlkMTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNv5KnwXbTLQZNeHAebxP0Xe43g9fKSjy+zx u1CRpf7KCibP6ehemt9kL7tAsbZJcRLQtc+BhPI9PcoLcNnOJVFAcOyVio/u7udr 9PMBqJJtN1Vm0encK8zBZbGLGceV/NJAapWUFlJ8hKXNGbhgTcqF188NOYOFE5Ie Hpjs9RXcI0WAV4MRQCpuHzN7Oz3pK2PJXIkYbz82WpaNu7QxggTnS4dMBT8b1k1g dPS1bWc79l8NpTNnD1P0Ohr2SDJejsD1SDdM8lCcOTClvZr64MpQ56LnVbVFpKnl T7cRo4iM7At7bm+17mFUNYbmQlPqPs7cC06TR0xiY8cNaLVOFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOao9u8oZ+aveLkiYcEEUluGxZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGI3YTUwZDYtYzcxMC0z ZjZhLWJmNmEtYmM2MTI3MGMyOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHV7aIqLHVwtpYWaF33VIZZm/wYhMgtF+5EBahuCMm+wBlRdMC0ktWy 0cBL4bhhCY7g1Z81GwJ1FV3MwACo1pk4f98or4r+r2UCEhYOK5+5ya07PoNmbk3f miyYZV5D96c87lzFDbWtcy7trCrAJ/MaJ9WP6Y8LCP1rHnB4JOLT8diVuCN1gP3e marx1eidq/VGoWNw8P46zShU31eWaRpBydl0lgxtdsD+14QddIskbX1dz036aekg 1X9yANm1FIgD+T2vShTpZMgsiH+ldB2zt/Q8qr7nqjJxy3EGQXGnIoXIBK41lr4T 1Sc2EsCdkiZXlQrtnvglN9PW6kX+Ag0= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:30 2025 by rpki-client