$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fac1214d-6264-32a9-9f6a-67416ba1cd53.roa File: fac1214d-6264-32a9-9f6a-67416ba1cd53.roa (raw, json) Hash identifier: Pqr/y33awQq1kfTH0j0e7SxrJsvitHLJwVBXVPUxE6A= Subject key identifier: 74:66:31:D4:1A:A7:F0:15:7F:CE:71:FB:03:78:0B:DC:FE:36:9C:FB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B3F623D23E2DCC9A485D6FF80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fac1214d-6264-32a9-9f6a-67416ba1cd53.roa Signing time: Fri 19 Sep 2025 15:21:34 +0000 ROA not before: Fri 19 Sep 2025 15:21:34 +0000 ROA not after: Thu 18 Dec 2025 16:21:34 +0000 asID: 5650 IP address blocks: 209.101.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:62:3d:23:e2:dc:c9:a4:85:d6:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 19 15:21:34 2025 GMT Not After : Dec 18 16:21:34 2025 GMT Subject: CN=5e476099-fd18-4100-a919-398675f555bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:a7:57:21:f3:35:7b:a3:22:e5:e2:dc:72: 7e:2c:8f:5e:53:f7:e9:1f:8b:08:40:8a:16:83:15: cd:e8:69:7a:b7:9d:a4:e8:0b:08:73:21:e1:85:83: 95:61:f5:e2:cc:29:51:d7:5a:0b:b5:38:80:3a:0f: ec:26:f3:ad:ce:bc:de:da:64:7f:62:f3:6f:c7:14: 13:60:b9:51:b3:12:52:3e:0a:58:8c:0c:2e:92:7a: 6f:d0:d0:dc:1e:27:21:0e:91:13:2c:f6:92:e3:dd: 74:ae:70:a2:06:f1:c9:0a:05:63:81:cc:7b:22:aa: 3a:39:ff:50:88:70:80:e9:6b:43:bb:39:8f:95:96: 36:9a:0c:56:bd:07:2f:11:e9:ac:ef:9a:69:94:c7: a8:2c:96:c1:04:65:50:83:47:50:74:54:44:2b:7a: f4:c2:44:1a:b8:e2:ff:d1:45:08:bd:f4:1f:4e:5e: d3:37:27:56:bd:7a:27:3c:b7:7c:0e:01:96:13:34: 94:b7:6a:f4:0f:37:e2:52:6e:0c:b8:d4:95:0b:86: a1:c1:3c:f6:7b:96:47:83:92:49:ff:41:11:f4:7a: 5a:ba:f6:fd:82:4f:93:bb:f9:5d:72:95:06:48:93: c6:6f:8a:a4:a5:59:b7:e8:72:0b:51:33:d7:03:a3: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:66:31:D4:1A:A7:F0:15:7F:CE:71:FB:03:78:0B:DC:FE:36:9C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fac1214d-6264-32a9-9f6a-67416ba1cd53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:6f:52:17:47:e2:30:46:26:df:bb:0d:ce:80:20:00:09:0a: 36:5f:e7:cf:72:83:c8:95:56:46:8e:13:b9:15:53:b3:fc:d2: 93:56:fb:4a:ad:76:fa:f3:c6:bc:62:59:a8:48:eb:6d:38:46: 2f:cb:4a:0f:cc:2d:92:7d:a9:5e:e4:46:71:8b:c8:e1:04:45: f3:8c:46:ed:59:e9:3c:86:2d:ee:80:06:ae:c3:9d:6d:dd:9d: 8e:03:10:71:19:51:d7:14:e3:53:53:d3:ee:78:26:f0:c5:b5: c1:6f:af:6a:df:42:e5:d7:37:10:f4:e9:74:93:aa:84:23:20: 90:43:d4:81:04:a8:4a:9e:67:fb:8c:17:26:8c:e1:33:0a:45: c9:a5:93:13:a5:ff:f7:5c:ac:40:0a:3f:5d:14:c1:ba:0e:e3: ac:36:0a:0d:22:53:c4:79:ec:10:64:41:4b:c7:38:cf:7e:57: 8a:1d:38:33:61:bd:e5:4f:7b:e2:97:99:4e:78:52:39:32:24: 43:0b:da:f8:61:e8:92:4f:ec:c3:c3:cf:f9:04:8b:41:50:1a: 55:d0:ed:4a:5b:78:2f:dc:86:33:43:1b:3e:88:39:0b:bc:d8: 1e:04:0b:0e:fe:f5:74:8b:82:30:5a:7b:7c:a6:e5:ae:34:e8: 38:ce:e0:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/Yj0j4tzJpIXW/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxOTE1MjEzNFoXDTI1MTIxODE2MjEzNFowLzEtMCsGA1UEAxMk NWU0NzYwOTktZmQxOC00MTAwLWE5MTktMzk4Njc1ZjU1NWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/2nVyHzNXujIuXi3HJ+LI9eU/fpH4sIQIoW gxXN6Gl6t52k6AsIcyHhhYOVYfXizClR11oLtTiAOg/sJvOtzrze2mR/YvNvxxQT YLlRsxJSPgpYjAwuknpv0NDcHichDpETLPaS4910rnCiBvHJCgVjgcx7Iqo6Of9Q iHCA6WtDuzmPlZY2mgxWvQcvEems75pplMeoLJbBBGVQg0dQdFREK3r0wkQauOL/ 0UUIvfQfTl7TNydWvXonPLd8DgGWEzSUt2r0DzfiUm4MuNSVC4ahwTz2e5ZHg5JJ /0ER9Hpauvb9gk+Tu/ldcpUGSJPGb4qkpVm36HILUTPXA6NUVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRmMdQap/AVf85x+wN4C9z+Npz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmFjMTIxNGQtNjI2NC0z MmE5LTlmNmEtNjc0MTZiYTFjZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpvUhdH4jBGJt+7Dc6AIAAJCjZf589yg8iVVkaOE7kVU7P80pNW+0qt dvrzxrxiWahI6204Ri/LSg/MLZJ9qV7kRnGLyOEERfOMRu1Z6TyGLe6ABq7DnW3d nY4DEHEZUdcU41NT0+54JvDFtcFvr2rfQuXXNxD06XSTqoQjIJBD1IEEqEqeZ/uM FyaM4TMKRcmlkxOl//dcrEAKP10UwboO46w2Cg0iU8R57BBkQUvHOM9+V4odODNh veVPe+KXmU54UjkyJEML2vhh6JJP7MPDz/kEi0FQGlXQ7UpbeC/chjNDGz6IOQu8 2B4ECw7+9XSLgjBae3ym5a406DjO4Lo= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:31 2025 by rpki-client