$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd6074ab-0872-35d8-9ece-ca703792c2ef.roa File: dd6074ab-0872-35d8-9ece-ca703792c2ef.roa (raw, json) Hash identifier: J1i1qQbXryoGI6Uz74L+L/z+UjbT97O44lNWzjscJvE= Subject key identifier: CE:56:7A:04:C3:54:F9:23:7C:BF:1C:A4:1C:65:23:0E:E3:4E:6D:95 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBBEE0ACA154739EBC017A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd6074ab-0872-35d8-9ece-ca703792c2ef.roa Signing time: Mon 08 Sep 2025 07:16:25 +0000 ROA not before: Mon 08 Sep 2025 07:16:25 +0000 ROA not after: Sun 07 Dec 2025 08:16:25 +0000 asID: 401783 IP address blocks: 209.101.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bb:ee:0a:ca:15:47:39:eb:c0:17:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:25 2025 GMT Not After : Dec 7 08:16:25 2025 GMT Subject: CN=6d51b74f-08c0-4e29-86b8-6dd94f241790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:d7:07:d4:fa:ca:01:86:4c:02:da:4e:f6: cd:ce:df:e2:6a:10:c3:ee:23:40:4a:be:62:cd:94: 5a:cc:1d:41:38:71:ff:cc:ff:af:12:9b:e2:b8:11: e3:ef:f4:6b:45:cf:a3:29:36:20:b4:15:7d:5f:f0: 14:70:c2:70:0d:06:83:a8:4b:f6:43:3d:6b:42:69: 8f:0f:58:15:94:ac:4c:0f:e9:f2:0e:a1:73:b6:ac: 2d:5d:f8:b7:de:95:b3:70:0b:05:c9:84:02:87:5a: 87:71:65:8a:c9:3b:da:c5:91:9a:97:1d:99:1f:2c: e9:86:79:f5:95:ef:03:cf:22:a3:88:47:1d:b6:65: f3:ba:da:6b:d4:45:2a:32:88:ab:30:c6:83:c5:db: d9:c5:de:7c:87:58:09:e2:b3:a5:0b:49:38:53:f7: 94:b2:12:13:31:f2:8d:ad:a1:d4:52:25:34:6e:20: 93:2a:a8:80:d0:d3:82:18:62:3a:f7:5d:f3:ce:f5: 98:78:39:b6:bd:f5:9f:6a:2e:e5:23:bc:a4:02:cd: e9:13:15:d9:86:1e:a8:6e:22:89:cb:83:5c:db:50: 19:8e:ca:d5:1c:dd:71:ea:57:a4:11:7e:f3:2d:de: e1:d3:b5:1b:05:1a:27:f9:b7:ea:95:0b:a1:fe:c8: 13:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:56:7A:04:C3:54:F9:23:7C:BF:1C:A4:1C:65:23:0E:E3:4E:6D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd6074ab-0872-35d8-9ece-ca703792c2ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9e:36:11:3f:47:5e:e4:77:1c:57:0f:42:ac:e6:51:f1:b6: 15:9f:85:40:c8:81:98:fc:75:2b:f1:f6:81:1b:bf:7a:b4:41: cd:c9:64:62:49:85:0a:a4:3d:b6:62:ec:3d:63:4b:e2:b0:b2: 30:5a:b9:80:27:29:02:17:e0:d9:21:5f:02:87:d0:80:81:b0: c1:5e:c7:8e:64:13:20:eb:6c:5c:f9:6c:80:dc:db:6a:0a:c4: 04:82:d7:82:db:9b:ab:31:d8:4a:a9:52:cf:21:24:0e:51:19: eb:24:b6:30:50:f6:7c:8a:8c:ec:d4:ae:e6:1a:ee:7f:4e:1e: ba:8a:27:7c:72:04:06:57:dd:8e:b6:62:95:e1:42:bd:c2:eb: 44:b6:44:25:a5:8e:80:a5:b8:07:8d:b8:d2:50:2c:60:eb:87: 33:32:21:cd:de:8a:1a:66:57:e1:4e:e5:65:30:8f:62:6f:44: 88:f7:fe:2c:fc:b0:c2:3f:8e:70:94:ee:50:55:ad:3b:e6:a8: 85:b5:50:49:56:17:fd:54:1d:6a:8b:f2:78:ac:a5:07:84:b8: 3a:0c:5e:87:5d:0a:f2:a4:78:67:55:7f:ae:fb:27:7e:fb:7e: 3b:94:ec:57:80:c3:9c:41:71:cb:2f:17:6f:6e:51:42:b5:c4: a0:9a:79:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfu+4KyhVHOevAF6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTYyNVoXDTI1MTIwNzA4MTYyNVowLzEtMCsGA1UEAxMk NmQ1MWI3NGYtMDhjMC00ZTI5LTg2YjgtNmRkOTRmMjQxNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCPXB9T6ygGGTALaTvbNzt/iahDD7iNASr5i zZRazB1BOHH/zP+vEpviuBHj7/RrRc+jKTYgtBV9X/AUcMJwDQaDqEv2Qz1rQmmP D1gVlKxMD+nyDqFztqwtXfi33pWzcAsFyYQCh1qHcWWKyTvaxZGalx2ZHyzphnn1 le8DzyKjiEcdtmXzutpr1EUqMoirMMaDxdvZxd58h1gJ4rOlC0k4U/eUshITMfKN raHUUiU0biCTKqiA0NOCGGI6913zzvWYeDm2vfWfai7lI7ykAs3pExXZhh6obiKJ y4Nc21AZjsrVHN1x6lekEX7zLd7h07UbBRon+bfqlQuh/sgTSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5WegTDVPkjfL8cpBxlIw7jTm2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGQ2MDc0YWItMDg3Mi0z NWQ4LTllY2UtY2E3MDM3OTJjMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGeNhE/R17kdxxXD0Ks5lHxthWfhUDIgZj8dSvx9oEbv3q0Qc3JZGJJ hQqkPbZi7D1jS+KwsjBauYAnKQIX4NkhXwKH0ICBsMFex45kEyDrbFz5bIDc22oK xASC14Lbm6sx2EqpUs8hJA5RGesktjBQ9nyKjOzUruYa7n9OHrqKJ3xyBAZX3Y62 YpXhQr3C60S2RCWljoCluAeNuNJQLGDrhzMyIc3eihpmV+FO5WUwj2JvRIj3/iz8 sMI/jnCU7lBVrTvmqIW1UElWF/1UHWqL8nispQeEuDoMXoddCvKkeGdVf677J377 fjuU7FeAw5xBccsvF29uUUK1xKCaeUc= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:58 2025 by rpki-client