$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3dd11a13-1cce-30be-96e9-71ede70d4fd9.roa File: 3dd11a13-1cce-30be-96e9-71ede70d4fd9.roa (raw, json) Hash identifier: M7RZjUd5MMH4v3kAiGdkp8HNECsNTnr4xviTvtgcDDY= Subject key identifier: 74:ED:9C:E7:8B:02:9D:B0:6F:70:B3:60:AF:29:3C:A1:A3:71:45:EB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BABC43C18903E3C6C8AFF7F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3dd11a13-1cce-30be-96e9-71ede70d4fd9.roa Signing time: Tue 28 Oct 2025 11:06:19 +0000 ROA not before: Tue 28 Oct 2025 11:06:19 +0000 ROA not after: Mon 26 Jan 2026 12:06:19 +0000 asID: 2856 IP address blocks: 209.101.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:c4:3c:18:90:3e:3c:6c:8a:ff:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 28 11:06:19 2025 GMT Not After : Jan 26 12:06:19 2026 GMT Subject: CN=b1816a0a-de5a-46c9-82b4-04dfa36b3f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:50:25:94:a4:d5:62:9b:23:78:32:c3:8a: 2d:88:ef:02:ee:d1:5c:bf:c9:ce:24:5f:fc:0f:ba: 89:1b:5f:c0:e2:09:a2:00:70:b3:d7:31:0a:87:d9: ec:ff:60:4b:59:17:bb:b5:27:10:89:c9:50:fc:ac: c9:4f:51:66:2c:22:ed:ca:7a:50:d7:0d:57:39:52: cd:a7:03:04:a9:4f:a0:fc:be:e1:96:ec:b8:fa:66: 20:1b:f8:a2:d2:22:bf:ac:a7:a6:cd:6e:e0:06:0b: fe:77:3c:ea:31:7c:c3:a3:38:bb:8a:92:3d:e7:02: 50:15:c0:24:c5:be:03:22:73:71:bd:9b:c6:ce:a8: 0f:49:14:21:33:11:81:93:52:22:dd:14:14:7a:ec: 28:de:3f:7f:b5:96:01:51:78:c8:95:c3:fa:6d:e1: 1b:bb:8e:f8:d6:3d:10:e5:e5:4a:9d:23:83:db:ab: 7a:3d:34:48:0d:1c:b7:9c:60:5a:76:80:17:b8:7e: b4:0b:c3:a4:7a:08:72:58:55:45:a0:d7:3f:05:30: 0e:21:79:01:3b:ad:e2:3d:c2:f2:17:9a:83:52:d5: 9f:a5:e3:48:f3:2d:7f:0a:f7:7e:04:96:2a:5c:c4: 5d:71:09:19:c6:28:e4:0e:25:eb:c5:72:ac:c9:00: 4f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:ED:9C:E7:8B:02:9D:B0:6F:70:B3:60:AF:29:3C:A1:A3:71:45:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3dd11a13-1cce-30be-96e9-71ede70d4fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:49:d1:08:11:5f:c4:4e:50:0d:a0:25:8e:f5:28:5d:da:18: 71:59:d5:7d:a7:3b:cf:81:78:dc:18:2e:ad:5a:71:c2:65:b8: 8c:43:8a:65:4b:d4:ad:9e:fb:fa:c0:b1:dd:09:e9:37:36:25: 59:eb:82:7e:3d:dd:42:6b:7a:a1:e9:85:4d:a3:07:6c:1d:b5: c6:08:fb:03:8a:d4:01:ad:86:7f:ea:84:ce:81:d1:cc:a4:80: 36:0d:68:be:76:28:15:8a:05:0b:e6:ae:0c:62:a2:d8:9c:ef: 37:a6:ab:b3:71:f3:6c:bc:a2:7e:d6:76:81:7c:dc:28:23:98: c6:b0:8c:42:e0:db:8d:2a:42:3a:c7:16:01:6d:6d:69:61:a8: e9:5b:8e:9b:ae:9b:86:0a:08:53:ed:2c:27:4f:47:1d:00:22: 5f:d3:b2:ce:5c:fe:56:75:ad:b6:99:b0:39:f7:6e:fa:e7:ba: ab:12:e0:19:62:59:ac:da:3b:fa:a8:15:15:d6:1d:22:1b:10: 07:30:64:a4:3e:db:19:4e:4b:9d:8a:09:0c:5d:20:7b:ab:4d: a2:a5:03:49:87:7b:b5:6f:79:18:75:a9:45:45:fc:f7:2d:08: d6:04:36:06:0f:0b:5d:83:76:17:59:25:9a:3c:81:fa:36:f3: 82:d7:95:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEurxDwYkD48bIr/f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyODExMDYxOVoXDTI2MDEyNjEyMDYxOVowLzEtMCsGA1UEAxMk YjE4MTZhMGEtZGU1YS00NmM5LTgyYjQtMDRkZmEzNmIzZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4NQJZSk1WKbI3gyw4otiO8C7tFcv8nOJF/8 D7qJG1/A4gmiAHCz1zEKh9ns/2BLWRe7tScQiclQ/KzJT1FmLCLtynpQ1w1XOVLN pwMEqU+g/L7hluy4+mYgG/ii0iK/rKemzW7gBgv+dzzqMXzDozi7ipI95wJQFcAk xb4DInNxvZvGzqgPSRQhMxGBk1Ii3RQUeuwo3j9/tZYBUXjIlcP6beEbu4741j0Q 5eVKnSOD26t6PTRIDRy3nGBadoAXuH60C8OkeghyWFVFoNc/BTAOIXkBO63iPcLy F5qDUtWfpeNI8y1/Cvd+BJYqXMRdcQkZxijkDiXrxXKsyQBP+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTtnOeLAp2wb3CzYK8pPKGjcUXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2RkMTFhMTMtMWNjZS0z MGJlLTk2ZTktNzFlZGU3MGQ0ZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdJ0QgRX8ROUA2gJY71KF3aGHFZ1X2nO8+BeNwYLq1accJluIxDimVL 1K2e+/rAsd0J6Tc2JVnrgn493UJreqHphU2jB2wdtcYI+wOK1AGthn/qhM6B0cyk gDYNaL52KBWKBQvmrgxiotic7zemq7Nx82y8on7WdoF83CgjmMawjELg240qQjrH FgFtbWlhqOlbjpuum4YKCFPtLCdPRx0AIl/Tss5c/lZ1rbaZsDn3bvrnuqsS4Bli WazaO/qoFRXWHSIbEAcwZKQ+2xlOS52KCQxdIHurTaKlA0mHe7VveRh1qUVF/Pct CNYENgYPC12DdhdZJZo8gfo284LXlVM= -----END CERTIFICATE-----Generated at Tue Nov 4 15:40:13 2025 by rpki-client