$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa File: efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa (raw, json) Hash identifier: 5XDcfBIuAO3svyRgHmzijRdd/oftDTIp0dc4LskkMLg= Subject key identifier: E2:32:15:3A:C1:F1:16:46:1C:B0:C6:3F:C3:72:73:F6:0F:03:DF:4B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC91FB2C83454C26E55CC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa Signing time: Mon 08 Sep 2025 07:17:42 +0000 ROA not before: Mon 08 Sep 2025 07:17:42 +0000 ROA not after: Sun 07 Dec 2025 08:17:42 +0000 asID: 401783 IP address blocks: 209.101.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:91:fb:2c:83:45:4c:26:e5:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:42 2025 GMT Not After : Dec 7 08:17:42 2025 GMT Subject: CN=565ebe0b-cd31-4ccd-a1a6-bfd1f690f8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6c:ac:99:33:d0:ae:39:57:04:4f:b9:4e:23: a0:e8:e3:94:16:b3:b5:f3:b1:96:98:d9:c4:3c:27: 65:86:40:c3:0d:3f:74:99:91:8f:e4:3b:fb:29:53: 77:fa:ee:a2:f5:49:7a:f2:3d:17:01:1b:29:e0:32: 30:73:84:e5:5d:69:9d:d2:aa:76:74:1b:0b:22:bb: e2:93:a3:55:64:67:b0:d0:09:89:11:56:73:12:db: 20:bd:44:3c:86:3c:5e:90:21:fc:37:89:6c:a9:9a: 5f:10:9d:42:29:c6:01:b5:cc:46:52:67:6d:98:ec: 94:2b:7e:f5:43:25:9f:f7:ab:da:76:d2:14:2b:e2: 58:32:ea:51:b6:24:fb:f6:1d:13:91:7c:e6:5c:e0: 6a:dc:9d:1d:b1:5d:4b:e6:ee:a8:6a:58:f6:af:fa: e1:8f:ef:c2:dc:e5:36:59:12:f9:39:5a:7d:b4:d2: a1:bb:54:41:6e:9f:df:8f:ce:ce:24:d6:4e:ca:c4: 68:5f:be:b0:16:2e:3b:b7:18:1f:f5:ea:a7:97:1a: e9:be:ef:ed:8f:f3:9e:ae:f6:f2:80:ed:a0:4f:7e: 4e:61:cc:bd:2d:08:55:b2:5f:63:f7:0c:3e:46:10: e9:2f:74:93:fd:51:c0:83:20:e1:fb:6d:60:a7:ba: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:32:15:3A:C1:F1:16:46:1C:B0:C6:3F:C3:72:73:F6:0F:03:DF:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5d:eb:81:58:e2:69:5f:48:0c:83:be:c3:4c:ad:63:12:8e: bc:43:59:c5:27:1e:4e:6f:5a:fd:43:a6:87:b6:3e:3a:25:0a: 33:a5:82:d7:76:8b:66:46:f2:e7:ca:8c:e4:79:7b:95:4e:88: 13:6a:5e:0e:e1:2d:95:a7:1a:2b:4a:00:95:cf:1f:6d:17:03: 38:f4:42:e3:54:b8:09:77:cf:dd:9a:dc:8c:a1:25:93:07:d4: 5b:0b:cf:24:14:39:f0:98:72:3e:a0:ce:01:5a:fa:d3:ff:9f: 72:7c:14:14:6e:d7:8e:e3:e6:6d:1f:07:c7:01:91:ad:02:e2: 3e:8c:74:d6:32:72:69:57:87:29:09:46:72:42:5b:c7:54:42: dc:1f:a7:a6:7d:87:25:1e:6b:70:50:ef:29:34:ba:59:cf:a2: 54:a9:4f:11:b1:c7:ef:35:1a:2a:01:9c:01:b6:4d:9e:b9:a8: 96:da:df:70:1a:4d:81:36:5d:43:91:c4:00:b7:ab:ae:a0:6f: d2:00:53:aa:88:1f:1c:e7:1d:5e:8d:4a:cf:72:6d:7d:45:42: f2:e5:6c:b1:ae:72:08:4b:e2:57:b4:ec:4a:f3:60:1c:a7:96: 24:28:c9:e2:5d:5c:33:23:6f:9c:35:7d:f0:35:46:4e:24:32: cb:86:b8:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvJH7LINFTCblXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTc0MloXDTI1MTIwNzA4MTc0MlowLzEtMCsGA1UEAxMk NTY1ZWJlMGItY2QzMS00Y2NkLWExYTYtYmZkMWY2OTBmOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2ysmTPQrjlXBE+5TiOg6OOUFrO187GWmNnE PCdlhkDDDT90mZGP5Dv7KVN3+u6i9Ul68j0XARsp4DIwc4TlXWmd0qp2dBsLIrvi k6NVZGew0AmJEVZzEtsgvUQ8hjxekCH8N4lsqZpfEJ1CKcYBtcxGUmdtmOyUK371 QyWf96vadtIUK+JYMupRtiT79h0TkXzmXOBq3J0dsV1L5u6oalj2r/rhj+/C3OU2 WRL5OVp9tNKhu1RBbp/fj87OJNZOysRoX76wFi47txgf9eqnlxrpvu/tj/Oervby gO2gT35OYcy9LQhVsl9j9ww+RhDpL3ST/VHAgyDh+21gp7oRIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIyFTrB8RZGHLDGP8Nyc/YPA99LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWZkZTM2N2UtZmJlMy0z MDIyLWJkZDEtMjMxZWU2YzZhNmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNd64FY4mlfSAyDvsNMrWMSjrxDWcUnHk5vWv1Dpoe2PjolCjOlgtd2 i2ZG8ufKjOR5e5VOiBNqXg7hLZWnGitKAJXPH20XAzj0QuNUuAl3z92a3IyhJZMH 1FsLzyQUOfCYcj6gzgFa+tP/n3J8FBRu147j5m0fB8cBka0C4j6MdNYycmlXhykJ RnJCW8dUQtwfp6Z9hyUea3BQ7yk0ulnPolSpTxGxx+81GioBnAG2TZ65qJba33Aa TYE2XUORxAC3q66gb9IAU6qIHxznHV6NSs9ybX1FQvLlbLGucghL4le07ErzYByn liQoyeJdXDMjb5w1ffA1Rk4kMsuGuGU= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:31 2025 by rpki-client