$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa File: dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa (raw, json) Hash identifier: 4cP3Ug6sGYyxDpc8ITiMrp93naQOvrsm3+EYfEDMqO4= Subject key identifier: 56:92:45:A7:4C:07:89:53:B8:B1:53:69:CC:49:00:6B:65:65:70:37 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4D06A2B5A614CA1C249D8180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa Signing time: Wed 24 Sep 2025 12:38:19 +0000 ROA not before: Wed 24 Sep 2025 12:38:19 +0000 ROA not after: Tue 23 Dec 2025 13:38:19 +0000 asID: 212238 IP address blocks: 209.101.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:06:a2:b5:a6:14:ca:1c:24:9d:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 24 12:38:19 2025 GMT Not After : Dec 23 13:38:19 2025 GMT Subject: CN=a6f14fce-8bd2-44f7-b151-8af63e8227ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cd:c6:2b:f3:66:62:ca:eb:fb:cb:92:61:bf: cc:54:4f:66:a5:50:d8:cb:76:ef:d2:36:3d:f0:ca: 7a:b6:0b:ab:3a:34:b9:f7:ef:74:eb:e4:9d:b2:d3: ec:92:1a:80:26:cd:9d:04:49:35:86:2c:97:45:7b: c9:b1:d1:7c:ec:52:2d:af:3c:fb:b5:93:a6:84:92: 11:04:86:32:67:db:91:e6:25:db:89:fe:fb:eb:0e: ab:59:cd:20:cd:2b:24:0c:ff:09:d2:40:57:e4:80: 9b:42:5c:b1:59:5d:5e:ce:c9:0d:27:72:16:a9:91: 46:5f:e2:7b:f9:b3:d8:ca:fc:f6:82:f3:ef:03:bc: 96:a7:08:82:b4:75:51:4c:60:b0:27:37:b1:3f:16: 2d:c0:4b:34:ee:02:12:5f:eb:6f:8b:3c:47:df:5e: b0:6e:71:d2:3b:77:1f:8b:84:e7:86:08:4a:41:6a: 5d:2e:c8:b3:05:07:e6:5d:60:4a:7f:f7:29:d2:3f: 92:85:70:0c:2e:c0:cd:06:3e:46:83:59:35:dc:a5: c4:52:1a:02:c8:d1:28:c9:39:0b:11:24:a6:b3:f7: ce:d2:8e:07:e0:1f:37:44:58:d5:e8:13:0f:be:a9: 3c:d0:7f:cf:95:ab:10:ce:f6:60:40:5d:48:97:87: 2d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:92:45:A7:4C:07:89:53:B8:B1:53:69:CC:49:00:6B:65:65:70:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:19:e8:9f:89:a8:df:c8:82:bf:42:76:df:23:62:2c:3e:1e: 5d:25:6e:e0:57:3a:8d:2f:ff:bd:bb:26:e9:0c:76:26:b6:f8: b7:e1:d9:35:3c:c2:26:3d:af:cd:7a:bc:58:e1:46:43:16:98: c8:0e:c7:cc:83:7f:95:6d:c3:ea:2f:c0:17:a2:ea:7a:81:d7: eb:e3:db:2a:e1:95:ca:4e:fb:af:22:54:4b:7a:9e:cb:19:8e: a6:b7:de:55:2e:2b:d4:69:08:12:06:63:06:e7:4b:0a:54:2e: 66:d4:15:16:b6:87:ea:56:33:94:7e:89:44:8f:e9:26:37:29: 64:e2:d8:4d:a6:95:53:7f:58:af:56:31:04:bf:ae:92:a6:88: 6a:b9:1a:ce:e9:17:6d:63:9c:90:47:ba:db:ee:fd:83:9a:15: 54:ef:13:21:c8:8d:79:ce:61:3f:1f:55:af:90:a8:1a:a0:c8: fd:c1:85:70:fa:b4:b3:c0:4d:46:13:c6:f1:a1:0c:de:c0:e4: 95:47:31:89:26:b8:e1:f8:33:a8:9c:cd:a1:b6:be:91:84:9d: d1:85:a3:0c:59:d8:13:3e:fb:d0:4b:92:23:84:f4:e0:7b:71: eb:6c:8b:29:be:05:79:29:2f:1a:3b:94:34:6d:fb:56:ec:11: f8:34:b0:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNBqK1phTKHCSdgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNDEyMzgxOVoXDTI1MTIyMzEzMzgxOVowLzEtMCsGA1UEAxMk YTZmMTRmY2UtOGJkMi00NGY3LWIxNTEtOGFmNjNlODIyN2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc3GK/NmYsrr+8uSYb/MVE9mpVDYy3bv0jY9 8Mp6tgurOjS59+906+SdstPskhqAJs2dBEk1hiyXRXvJsdF87FItrzz7tZOmhJIR BIYyZ9uR5iXbif776w6rWc0gzSskDP8J0kBX5ICbQlyxWV1ezskNJ3IWqZFGX+J7 +bPYyvz2gvPvA7yWpwiCtHVRTGCwJzexPxYtwEs07gISX+tvizxH316wbnHSO3cf i4TnhghKQWpdLsizBQfmXWBKf/cp0j+ShXAMLsDNBj5Gg1k13KXEUhoCyNEoyTkL ESSms/fO0o4H4B83RFjV6BMPvqk80H/PlasQzvZgQF1Il4ctmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaSRadMB4lTuLFTacxJAGtlZXA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGVkZDQ2MDgtNzU5Zi0z NGIxLTlhOGItOGQ3YzJjNzExYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0Z6J+JqN/Igr9Cdt8jYiw+Hl0lbuBXOo0v/727JukMdia2+Lfh2TU8 wiY9r816vFjhRkMWmMgOx8yDf5Vtw+ovwBei6nqB1+vj2yrhlcpO+68iVEt6nssZ jqa33lUuK9RpCBIGYwbnSwpULmbUFRa2h+pWM5R+iUSP6SY3KWTi2E2mlVN/WK9W MQS/rpKmiGq5Gs7pF21jnJBHutvu/YOaFVTvEyHIjXnOYT8fVa+QqBqgyP3BhXD6 tLPATUYTxvGhDN7A5JVHMYkmuOH4M6iczaG2vpGEndGFowxZ2BM++9BLkiOE9OB7 cetsiym+BXkpLxo7lDRt+1bsEfg0sJA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:32 2025 by rpki-client