$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffda36ab-5f40-3508-a2a8-104135623f30.roa File: ffda36ab-5f40-3508-a2a8-104135623f30.roa (raw, json) Hash identifier: AsJ+ecHXx442VGEqg9yjtq2Un8NG8bYXYOPSIfDtvSY= Subject key identifier: 34:E8:17:0F:57:24:D7:8A:ED:77:CE:72:71:88:92:43:47:2D:33:9D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC059ACA3A3B818F741A80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffda36ab-5f40-3508-a2a8-104135623f30.roa Signing time: Mon 08 Sep 2025 07:16:36 +0000 ROA not before: Mon 08 Sep 2025 07:16:36 +0000 ROA not after: Sun 07 Dec 2025 08:16:36 +0000 asID: 401783 IP address blocks: 209.101.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:05:9a:ca:3a:3b:81:8f:74:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:36 2025 GMT Not After : Dec 7 08:16:36 2025 GMT Subject: CN=d2907bd3-3206-4d30-a1e7-dbc96eb80a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:34:cb:57:dd:d4:45:e7:16:30:6c:a6:da:25: bf:21:03:b3:a3:08:0a:98:7e:cb:4e:32:8d:ab:b1: ef:53:07:48:99:19:32:a8:e0:aa:61:2f:4a:5c:5f: e2:43:24:19:e1:3b:36:26:f3:10:35:6e:1f:e7:f2: 98:32:0e:5a:e4:73:1d:2f:99:1d:cb:ce:10:dc:74: e2:23:d6:55:01:8f:8f:ae:90:24:50:41:8e:8e:dc: 22:09:d1:df:de:60:b9:c7:0a:f5:72:f5:df:4b:13: 93:90:ac:19:de:bc:b0:c6:ae:6a:30:ac:49:c1:65: a0:92:f2:7f:27:84:2d:e5:ba:ff:ad:bc:31:c1:12: 7c:58:0d:51:42:56:dd:34:ac:a8:43:ef:3b:ac:2c: c6:8e:5a:07:e1:09:87:c6:2b:dc:b2:99:c8:74:dd: 67:56:7c:6a:7d:8f:56:b3:54:ad:93:b4:2d:ff:f4: b8:ce:c6:7e:ab:35:4c:32:44:ad:b8:e6:6b:f0:f3: c9:07:63:45:9e:7a:3e:9f:8f:46:dc:8d:24:e9:32: 3c:cf:1a:ed:54:6f:29:65:15:04:b6:0c:53:1e:6f: 68:68:c2:b4:55:51:ab:f6:aa:ad:62:92:48:5f:56: 16:b4:c6:37:88:f0:82:cb:36:fc:e9:3d:5a:d3:e6: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E8:17:0F:57:24:D7:8A:ED:77:CE:72:71:88:92:43:47:2D:33:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffda36ab-5f40-3508-a2a8-104135623f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:a0:87:eb:15:f2:20:f7:fc:99:cd:4d:a5:46:92:51:1b:8e: 44:84:c5:1b:fc:4c:5c:03:fb:8f:76:c5:de:ae:eb:95:1b:a0: d0:2b:c9:eb:98:65:ae:6d:92:16:2f:1d:62:0c:ed:62:30:20: b8:43:ed:90:32:f6:b1:dd:53:e5:8c:32:77:7a:1c:c3:dd:52: 29:ec:e4:26:4e:ea:f6:df:ec:f5:a6:85:48:7a:f3:c2:c9:75: 08:4a:00:9e:41:c4:6c:e4:3b:3b:fe:99:3c:e3:b3:84:2b:12: 4e:6b:9f:ad:35:1b:5e:30:8b:e5:29:e6:6e:ef:2f:65:69:6a: 7b:ac:54:a9:2c:f3:40:29:da:b4:57:bd:43:b2:94:f3:1e:28: 88:9f:39:fa:b2:4f:00:b1:0e:87:be:a8:ab:72:05:8e:d8:4f: 05:c6:c5:e5:24:4a:2e:1f:03:11:5d:b7:dd:5e:7e:e8:94:30: 33:59:d9:d6:1f:8c:68:98:c5:01:f1:52:70:bb:18:c2:94:96: 27:46:c9:d7:1d:0a:94:be:e5:85:bb:cc:44:80:2b:11:54:aa: 96:ae:09:8d:51:f1:16:d2:8b:55:fe:d7:cf:4a:81:92:28:15: 6b:36:93:e3:23:5e:e8:0d:de:ee:2c:47:64:70:73:ed:7a:87: 30:65:e0:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvAWayjo7gY90GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTYzNloXDTI1MTIwNzA4MTYzNlowLzEtMCsGA1UEAxMk ZDI5MDdiZDMtMzIwNi00ZDMwLWExZTctZGJjOTZlYjgwYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljTLV93URecWMGym2iW/IQOzowgKmH7LTjKN q7HvUwdImRkyqOCqYS9KXF/iQyQZ4Ts2JvMQNW4f5/KYMg5a5HMdL5kdy84Q3HTi I9ZVAY+PrpAkUEGOjtwiCdHf3mC5xwr1cvXfSxOTkKwZ3rywxq5qMKxJwWWgkvJ/ J4Qt5br/rbwxwRJ8WA1RQlbdNKyoQ+87rCzGjloH4QmHxivcspnIdN1nVnxqfY9W s1Stk7Qt//S4zsZ+qzVMMkStuOZr8PPJB2NFnno+n49G3I0k6TI8zxrtVG8pZRUE tgxTHm9oaMK0VVGr9qqtYpJIX1YWtMY3iPCCyzb86T1a0+YSswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDToFw9XJNeK7XfOcnGIkkNHLTOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmZkYTM2YWItNWY0MC0z NTA4LWEyYTgtMTA0MTM1NjIzZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALegh+sV8iD3/JnNTaVGklEbjkSExRv8TFwD+492xd6u65UboNAryeuY Za5tkhYvHWIM7WIwILhD7ZAy9rHdU+WMMnd6HMPdUins5CZO6vbf7PWmhUh688LJ dQhKAJ5BxGzkOzv+mTzjs4QrEk5rn601G14wi+Up5m7vL2VpanusVKks80Ap2rRX vUOylPMeKIifOfqyTwCxDoe+qKtyBY7YTwXGxeUkSi4fAxFdt91efuiUMDNZ2dYf jGiYxQHxUnC7GMKUlidGydcdCpS+5YW7zESAKxFUqpauCY1R8RbSi1X+189KgZIo FWs2k+MjXugN3u4sR2Rwc+16hzBl4EU= -----END CERTIFICATE-----Generated at Sat Oct 11 09:00:00 2025 by rpki-client