$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4a6daa-cc7d-373e-b0a5-6d07204e6e75.roa File: fb4a6daa-cc7d-373e-b0a5-6d07204e6e75.roa (raw, json) Hash identifier: IN+H8RYQe4gBE3K3TvwUGjzG7qNnwCgGH43QfuBvTzg= Subject key identifier: 5A:46:E3:31:D7:E6:49:52:7A:A0:3D:82:BB:DC:9E:39:AB:58:4F:AD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBBE2AEFFAD50994034CE80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4a6daa-cc7d-373e-b0a5-6d07204e6e75.roa Signing time: Mon 08 Sep 2025 07:16:19 +0000 ROA not before: Mon 08 Sep 2025 07:16:19 +0000 ROA not after: Sun 07 Dec 2025 08:16:19 +0000 asID: 401783 IP address blocks: 209.101.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bb:e2:ae:ff:ad:50:99:40:34:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:19 2025 GMT Not After : Dec 7 08:16:19 2025 GMT Subject: CN=ca9d3f72-fff7-4dbd-8ed9-67d896237c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:84:14:12:fe:67:50:d4:60:a8:06:a3:af:1d: c9:a6:ed:3f:2c:c0:77:8d:ba:1c:d1:ab:c2:2e:db: 46:2b:db:83:76:c4:5b:8b:1f:22:4d:71:2a:e9:2a: 8e:9a:ae:1b:1c:a3:ab:3c:d7:a1:d7:60:8b:49:c9: 8c:0f:41:25:3c:a9:ad:e3:88:7f:ee:c5:dc:a1:9a: 6d:fb:81:23:88:e2:90:ae:49:df:08:5d:73:68:38: c2:a9:a2:bc:eb:7d:99:d6:24:62:e6:63:bf:b7:f4: 4c:c0:31:9b:2e:c9:6e:d0:3e:99:e2:e1:51:88:19: 0e:0c:c9:5b:7c:55:e4:0f:2f:ce:fa:b9:28:91:47: 8f:dd:e1:fd:3f:d6:70:29:eb:b7:cf:f0:4e:ea:1c: 8c:a9:f7:3b:22:e3:16:5e:74:75:78:ce:1a:ac:8a: f3:95:6e:ff:05:6e:fa:31:72:51:00:1a:c9:1b:30: 23:42:d0:ae:d6:02:1e:20:b7:74:f6:c8:c8:77:40: 6e:8d:6f:a6:b9:72:45:07:c4:59:fd:12:df:70:c1: 3f:a8:af:d8:47:aa:c2:a8:80:59:80:b7:f7:0b:6a: ae:c9:98:3b:14:50:65:96:5f:7b:19:5d:78:3a:bc: cf:bf:ba:33:87:81:77:68:2f:e1:94:ee:c9:c1:bd: 13:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:E3:31:D7:E6:49:52:7A:A0:3D:82:BB:DC:9E:39:AB:58:4F:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4a6daa-cc7d-373e-b0a5-6d07204e6e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:42:c4:96:c3:37:77:5d:92:8b:bc:5c:e7:78:9c:5e:74:8b: b1:8d:4f:d3:d8:ec:0c:2b:b8:fd:c3:a1:96:97:6d:19:2d:23: 15:c6:04:87:77:66:35:24:da:ea:e9:6f:1b:bd:a6:e2:64:a5: 99:f6:88:04:cd:e1:cb:f1:a2:7a:b6:32:de:eb:01:03:99:a8: 42:be:c6:d6:df:36:be:28:47:f8:f4:6d:de:70:cb:0a:ec:15: ce:8f:06:05:c4:95:83:aa:23:02:aa:15:ab:fa:e6:51:f2:21: ad:bd:53:7b:9d:df:c9:f1:9f:d0:90:12:bf:b0:8d:3c:b5:db: c2:07:d9:d6:c2:1c:d8:1b:6e:b8:04:98:78:cb:65:2f:b2:71: a4:07:be:50:88:02:d6:f2:69:cf:d8:8b:d1:58:cd:f1:24:44: ea:2a:a6:ba:3a:3b:4e:ea:b7:04:eb:c6:f0:38:12:78:74:11: 65:c2:33:64:0e:a5:4f:ce:d5:e5:7a:5d:68:41:f3:b4:26:fc: 4a:16:47:6c:c7:be:f2:5b:48:81:16:78:7a:e3:dd:ed:a7:28: 2c:28:64:8f:7e:34:ec:01:33:e6:04:82:af:8e:c1:67:52:3f: 68:6b:ed:a0:ee:26:cd:62:c0:91:a5:b9:2e:e0:43:57:0a:36: 16:82:c7:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfu+Ku/61QmUA0zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTYxOVoXDTI1MTIwNzA4MTYxOVowLzEtMCsGA1UEAxMk Y2E5ZDNmNzItZmZmNy00ZGJkLThlZDktNjdkODk2MjM3YzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioQUEv5nUNRgqAajrx3Jpu0/LMB3jboc0avC LttGK9uDdsRbix8iTXEq6SqOmq4bHKOrPNeh12CLScmMD0ElPKmt44h/7sXcoZpt +4EjiOKQrknfCF1zaDjCqaK8632Z1iRi5mO/t/RMwDGbLslu0D6Z4uFRiBkODMlb fFXkDy/O+rkokUeP3eH9P9ZwKeu3z/BO6hyMqfc7IuMWXnR1eM4arIrzlW7/BW76 MXJRABrJGzAjQtCu1gIeILd09sjId0BujW+muXJFB8RZ/RLfcME/qK/YR6rCqIBZ gLf3C2quyZg7FFBlll97GV14OrzPv7ozh4F3aC/hlO7Jwb0T1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpG4zHX5klSeqA9grvcnjmrWE+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmI0YTZkYWEtY2M3ZC0z NzNlLWIwYTUtNmQwNzIwNGU2ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhCxJbDN3ddkou8XOd4nF50i7GNT9PY7AwruP3DoZaXbRktIxXGBId3 ZjUk2urpbxu9puJkpZn2iATN4cvxonq2Mt7rAQOZqEK+xtbfNr4oR/j0bd5wywrs Fc6PBgXElYOqIwKqFav65lHyIa29U3ud38nxn9CQEr+wjTy128IH2dbCHNgbbrgE mHjLZS+ycaQHvlCIAtbyac/Yi9FYzfEkROoqpro6O07qtwTrxvA4Enh0EWXCM2QO pU/O1eV6XWhB87Qm/EoWR2zHvvJbSIEWeHrj3e2nKCwoZI9+NOwBM+YEgq+OwWdS P2hr7aDuJs1iwJGluS7gQ1cKNhaCx4E= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:13 2025 by rpki-client