$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f168ee7c-e6a4-39f6-8abb-54c4a6268230.roa File: f168ee7c-e6a4-39f6-8abb-54c4a6268230.roa (raw, json) Hash identifier: be3vMbCreP+gzBuzq4LoTRLlv8rF5CEaD2qrFJG6DNI= Subject key identifier: 0E:E7:56:45:D9:DA:87:C9:02:D7:FF:6A:45:64:0A:75:E1:20:52:77 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBCC499067CD4263E9C9340 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f168ee7c-e6a4-39f6-8abb-54c4a6268230.roa Signing time: Mon 08 Sep 2025 07:18:06 +0000 ROA not before: Mon 08 Sep 2025 07:18:06 +0000 ROA not after: Sun 07 Dec 2025 08:18:06 +0000 asID: 401783 IP address blocks: 209.101.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:c4:99:06:7c:d4:26:3e:9c:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:18:06 2025 GMT Not After : Dec 7 08:18:06 2025 GMT Subject: CN=8eebd12d-6cd1-4800-9213-6262ecdf81a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:10:0f:c2:fb:65:ec:f9:20:40:33:c9:0a:99: 2a:85:5f:bc:cd:b8:4b:f3:bc:be:16:f2:9d:0c:8f: 80:17:7c:45:1d:d9:c1:89:c3:ad:ef:2d:7e:a2:69: 4d:7d:e0:8c:93:f5:11:f2:78:58:ec:b6:15:54:72: b5:47:a5:b4:46:51:db:94:69:18:5a:71:8e:7c:1c: 4f:ea:94:a8:c5:48:98:44:fb:d8:e4:39:4b:36:18: e4:d0:ee:10:0b:b8:5f:26:e2:64:56:1e:6a:a9:8a: 5d:5e:55:c6:18:48:a7:ac:7a:3e:6e:16:c6:b7:43: fc:38:d5:b0:1b:56:ef:9b:1a:81:3e:fc:80:68:d1: e0:9e:19:dd:c0:fb:38:82:1b:b2:7d:b4:5f:8c:51: 32:7c:63:61:c0:d9:3c:0d:1c:37:9c:5f:e5:5a:e0: c1:c9:ef:d9:06:bf:f1:b8:27:b0:26:66:cf:dc:4a: 07:cb:f9:93:3c:3c:50:de:54:23:80:4b:09:5b:80: ca:2d:fa:4a:75:a7:b4:89:f2:c7:d6:63:68:69:4f: e5:53:69:e5:bc:30:42:dd:9e:c1:fe:68:c0:76:d8: 76:89:b2:75:b6:7a:6c:c4:30:66:bf:e7:ad:f5:1b: 23:cc:4a:b3:9f:8e:dc:63:cc:b5:a9:c6:bb:67:33: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E7:56:45:D9:DA:87:C9:02:D7:FF:6A:45:64:0A:75:E1:20:52:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f168ee7c-e6a4-39f6-8abb-54c4a6268230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:83:b5:99:f2:ec:dd:24:f9:cd:df:69:c8:42:00:c0:25:db: 0a:16:69:b6:f8:9b:2b:bf:dd:01:bc:40:15:8f:25:64:21:5d: c3:93:5a:3e:3f:41:68:73:09:fa:05:de:aa:47:bd:e1:07:59: 36:fe:10:fe:22:b2:69:79:62:7e:83:ee:ae:4f:1a:89:75:ee: 4d:b6:89:a6:f6:1f:34:a5:79:4a:5e:71:70:74:84:1d:89:40: 5f:70:82:85:f2:47:bc:d5:99:a5:e6:4e:c6:52:77:bf:99:21: 1d:37:e8:75:0d:72:c6:51:b2:3a:ac:9f:55:0a:7d:30:11:02: 0a:a6:6b:33:59:64:87:71:34:12:52:5d:6a:a4:24:d4:88:96: 69:03:cc:ea:9b:10:53:43:e8:cf:f5:3d:8b:10:ae:39:74:d6: e2:03:2f:c3:06:01:84:67:16:3e:d2:df:53:1e:e5:03:79:6f: 6b:bc:3a:f6:dc:2a:10:4b:8f:c2:fa:fc:67:c2:eb:fa:26:da: c5:2e:3d:ea:e2:91:72:e9:6d:34:5e:36:1e:b8:b8:46:fb:73: 33:ab:76:7f:79:4f:d0:96:f5:ab:4c:5a:cf:de:c6:e6:1e:8a: 9c:1d:ea:aa:74:e0:92:87:a5:09:ef:b8:3c:73:8d:d6:4d:6f: 27:5f:42:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvMSZBnzUJj6ck0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTgwNloXDTI1MTIwNzA4MTgwNlowLzEtMCsGA1UEAxMk OGVlYmQxMmQtNmNkMS00ODAwLTkyMTMtNjI2MmVjZGY4MWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBAPwvtl7PkgQDPJCpkqhV+8zbhL87y+FvKd DI+AF3xFHdnBicOt7y1+omlNfeCMk/UR8nhY7LYVVHK1R6W0RlHblGkYWnGOfBxP 6pSoxUiYRPvY5DlLNhjk0O4QC7hfJuJkVh5qqYpdXlXGGEinrHo+bhbGt0P8ONWw G1bvmxqBPvyAaNHgnhndwPs4ghuyfbRfjFEyfGNhwNk8DRw3nF/lWuDBye/ZBr/x uCewJmbP3EoHy/mTPDxQ3lQjgEsJW4DKLfpKdae0ifLH1mNoaU/lU2nlvDBC3Z7B /mjAdth2ibJ1tnpsxDBmv+et9RsjzEqzn47cY8y1qca7ZzOOCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7nVkXZ2ofJAtf/akVkCnXhIFJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjE2OGVlN2MtZTZhNC0z OWY2LThhYmItNTRjNGE2MjY4MjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2DtZny7N0k+c3fachCAMAl2woWabb4myu/3QG8QBWPJWQhXcOTWj4/ QWhzCfoF3qpHveEHWTb+EP4isml5Yn6D7q5PGol17k22iab2HzSleUpecXB0hB2J QF9wgoXyR7zVmaXmTsZSd7+ZIR036HUNcsZRsjqsn1UKfTARAgqmazNZZIdxNBJS XWqkJNSIlmkDzOqbEFND6M/1PYsQrjl01uIDL8MGAYRnFj7S31Me5QN5b2u8Ovbc KhBLj8L6/GfC6/om2sUuPerikXLpbTReNh64uEb7czOrdn95T9CW9atMWs/exuYe ipwd6qp04JKHpQnvuDxzjdZNbydfQkw= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:11 2025 by rpki-client