$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e90d8cc8-13f7-37f8-b296-48718e0174f9.roa File: e90d8cc8-13f7-37f8-b296-48718e0174f9.roa (raw, json) Hash identifier: XeZzONkm6zvcYalTuV2Fv61lCpI9763LjtaO0FynbWk= Subject key identifier: 59:F5:90:A0:83:5E:02:77:C3:97:81:CF:6A:0D:17:8D:95:F6:33:78 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC3BECC36253A9B45E2080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e90d8cc8-13f7-37f8-b296-48718e0174f9.roa Signing time: Mon 08 Sep 2025 07:17:02 +0000 ROA not before: Mon 08 Sep 2025 07:17:02 +0000 ROA not after: Sun 07 Dec 2025 08:17:02 +0000 asID: 401783 IP address blocks: 209.101.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:3b:ec:c3:62:53:a9:b4:5e:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:02 2025 GMT Not After : Dec 7 08:17:02 2025 GMT Subject: CN=c50e7fa2-9ab0-43fa-8d51-77e6a924d016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:db:75:0c:d5:42:05:4b:73:df:68:d0:3f: d7:9c:f6:e5:1a:36:e0:01:4c:70:4f:5f:a0:dc:fb: f0:72:df:01:1a:79:6f:9f:ae:0a:6a:87:02:25:b6: ff:f0:7a:a1:11:c5:f7:ff:67:57:b2:68:bf:9d:03: 39:a7:df:9f:0e:d0:f0:a8:30:a0:30:b4:38:63:7d: d4:18:f5:89:d2:ba:f3:53:98:6e:2f:ee:af:5b:52: 83:46:29:03:dd:b1:d7:b3:8f:a3:cb:68:56:84:b0: 9f:79:6c:7d:db:84:d4:80:c0:61:5a:7c:e7:e9:b3: ed:7c:f0:f9:e6:09:17:95:f1:da:8e:55:e2:65:5d: 01:97:08:bd:ea:c9:e0:8c:68:e7:6b:d7:40:6f:b5: b1:8e:ae:4d:6f:06:16:b2:e2:87:78:b4:96:64:e3: d8:cb:d2:d7:15:b4:d2:66:44:48:61:ce:9c:1a:7d: 92:c7:9f:9d:a9:6f:2f:44:7f:8c:cc:54:cd:f9:ea: 6a:76:b1:bf:18:96:56:03:3e:fc:20:a2:41:3c:39: f3:09:00:c9:d5:db:af:6c:ea:b8:db:70:b3:cf:54: aa:14:c1:a5:a7:e8:71:8a:9b:d3:a4:b0:cf:20:32: 69:dc:be:7e:ae:5c:22:ea:79:3f:d2:b6:4d:cf:2c: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F5:90:A0:83:5E:02:77:C3:97:81:CF:6A:0D:17:8D:95:F6:33:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e90d8cc8-13f7-37f8-b296-48718e0174f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a2:27:2c:8e:11:f9:18:a2:47:a2:e5:99:bf:44:b0:9a:f2: ea:3b:ef:6d:5f:7f:8f:75:79:b2:60:a2:8b:62:a0:a8:d4:59: 5c:c2:3d:49:58:1f:0f:68:39:1f:eb:da:cb:48:fa:f7:97:86: 92:da:be:95:08:66:de:44:47:8b:b1:e6:a7:1a:36:be:55:37: 78:e1:4f:a0:38:68:cc:6d:76:3a:db:00:3d:9d:e1:27:1d:eb: 1c:70:31:25:99:63:6b:7a:c3:fd:66:4b:0f:16:91:06:20:70: 15:40:46:b9:a7:b3:88:80:99:db:0a:ab:55:1b:04:37:77:83: 2c:6e:56:1c:6a:bc:99:2c:fb:20:37:15:34:ce:ba:d4:fa:de: 53:c9:f9:32:c7:b5:29:54:c4:3d:b5:01:50:f6:22:63:aa:15: 69:ed:41:1f:93:e9:37:97:b6:c4:e8:6a:e2:d7:60:8d:f0:a2: 28:4d:09:31:5c:0c:70:0a:7c:b0:a2:3c:0e:55:25:1a:4b:db: 86:e3:2a:98:d7:bc:2f:5f:be:43:a9:96:94:58:18:fd:c6:fb: 5e:cc:7a:3b:b1:98:91:62:cc:a9:18:09:43:d5:54:5b:4d:3f: b9:75:25:94:01:c8:87:75:a4:f4:8a:5c:5d:52:d4:e3:71:07: 6d:13:a2:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvDvsw2JTqbReIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTcwMloXDTI1MTIwNzA4MTcwMlowLzEtMCsGA1UEAxMk YzUwZTdmYTItOWFiMC00M2ZhLThkNTEtNzdlNmE5MjRkMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiHbdQzVQgVLc99o0D/XnPblGjbgAUxwT1+g 3Pvwct8BGnlvn64KaocCJbb/8HqhEcX3/2dXsmi/nQM5p9+fDtDwqDCgMLQ4Y33U GPWJ0rrzU5huL+6vW1KDRikD3bHXs4+jy2hWhLCfeWx924TUgMBhWnzn6bPtfPD5 5gkXlfHajlXiZV0Blwi96sngjGjna9dAb7Wxjq5NbwYWsuKHeLSWZOPYy9LXFbTS ZkRIYc6cGn2Sx5+dqW8vRH+MzFTN+epqdrG/GJZWAz78IKJBPDnzCQDJ1duvbOq4 23Czz1SqFMGlp+hxipvTpLDPIDJp3L5+rlwi6nk/0rZNzyxn6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn1kKCDXgJ3w5eBz2oNF42V9jN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTkwZDhjYzgtMTNmNy0z N2Y4LWIyOTYtNDg3MThlMDE3NGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuiJyyOEfkYokei5Zm/RLCa8uo7721ff491ebJgootioKjUWVzCPUlY Hw9oOR/r2stI+veXhpLavpUIZt5ER4ux5qcaNr5VN3jhT6A4aMxtdjrbAD2d4Scd 6xxwMSWZY2t6w/1mSw8WkQYgcBVARrmns4iAmdsKq1UbBDd3gyxuVhxqvJks+yA3 FTTOutT63lPJ+TLHtSlUxD21AVD2ImOqFWntQR+T6TeXtsToauLXYI3woihNCTFc DHAKfLCiPA5VJRpL24bjKpjXvC9fvkOplpRYGP3G+17MejuxmJFizKkYCUPVVFtN P7l1JZQById1pPSKXF1S1ONxB20Tohk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:32 2025 by rpki-client