$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7e0b5f5-7aa6-3fa7-acb0-eb1e7771c54d.roa File: a7e0b5f5-7aa6-3fa7-acb0-eb1e7771c54d.roa (raw, json) Hash identifier: 79jSLOJBaum+DD0YryOFAXQJlqgjS3uK3uQ2D9YGBAo= Subject key identifier: 60:C8:55:5D:D5:91:64:70:41:74:98:39:97:9D:A3:D7:25:81:1C:DF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA4E94283525C04C654384D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7e0b5f5-7aa6-3fa7-acb0-eb1e7771c54d.roa Signing time: Sun 26 Oct 2025 00:10:16 +0000 ROA not before: Sun 26 Oct 2025 00:10:16 +0000 ROA not after: Sat 24 Jan 2026 01:10:16 +0000 asID: 834 IP address blocks: 209.101.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a4:e9:42:83:52:5c:04:c6:54:38:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 26 00:10:16 2025 GMT Not After : Jan 24 01:10:16 2026 GMT Subject: CN=63dc2f55-bd28-4b1b-9bb2-83ebcdce0e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:09:b2:15:7e:6b:3d:8f:45:84:29:01:6e: e4:f2:58:d5:5a:d2:6e:3f:6a:88:87:4f:41:4a:2d: 08:93:21:cd:c0:62:62:fb:fc:84:03:8f:39:af:5f: b6:0b:6b:d3:fd:c9:c3:19:7f:59:d0:21:1b:85:2c: 48:99:62:2d:6d:d0:01:40:36:6f:91:de:20:ea:b1: ba:0b:16:5c:70:9f:27:6d:5a:5e:19:8c:28:87:63: 2e:2b:ad:25:96:b6:8d:da:dc:9c:60:6e:81:9f:b3: ab:e7:c3:ca:52:a5:63:7e:93:cb:86:43:e7:e2:71: 3a:9d:64:d3:e8:4e:ff:0a:2d:28:bf:f2:54:f8:de: 79:2c:c6:0f:c4:1a:54:e5:7a:ed:6b:2c:ad:3e:2b: 71:c1:dd:b9:73:8f:3d:83:a1:a5:fb:f3:f9:bb:51: 50:77:af:00:80:a2:d1:39:cd:44:19:73:0e:cd:32: ff:25:c2:4a:d3:10:47:1d:b2:68:be:1a:6f:21:84: b7:e0:ca:1d:00:bd:90:7e:f7:d0:ec:c3:10:94:e3: 85:61:b9:05:ee:fd:e5:14:3d:31:22:4f:18:a8:c0: 77:31:3e:f6:bb:c8:b7:1b:bd:e7:60:bd:4d:1b:da: 03:bc:b4:df:63:d9:f5:5e:88:c4:94:38:c7:9e:3d: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C8:55:5D:D5:91:64:70:41:74:98:39:97:9D:A3:D7:25:81:1C:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7e0b5f5-7aa6-3fa7-acb0-eb1e7771c54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d7:66:a7:4c:47:fd:3e:8d:8e:7e:d6:0c:35:bf:58:9c:ff: fd:20:dc:fa:9a:3c:aa:14:f1:53:30:f5:11:65:bb:38:1f:82: 95:6e:e0:0b:ec:ec:54:fc:5b:67:7a:6a:23:c1:a1:9a:36:48: 53:6f:b4:36:39:c0:d0:e5:aa:4a:1f:03:ea:47:90:93:53:f7: b3:af:1f:15:61:f1:74:97:37:6f:7a:85:7b:53:ad:fe:d4:56: 74:48:ba:00:77:81:7a:a3:e5:4c:01:f4:68:8f:21:b8:0e:71: 4e:7e:81:4e:fa:42:0c:9d:ce:b8:86:47:94:ec:e2:d9:9f:d4: 79:51:b3:4c:2e:94:ee:07:5d:3b:46:88:38:3e:bd:be:1c:7c: 19:2d:04:8b:1b:2a:d6:ad:54:af:88:47:55:52:3d:93:f2:1b: 6d:f0:06:d0:4c:a2:74:12:bd:4f:95:01:58:1d:db:56:f2:26: 81:e2:e6:8b:a1:8b:39:a5:69:b8:60:54:91:4e:0d:81:a1:b0: 3b:76:b7:b0:7b:fc:21:93:ea:e3:90:f1:26:ea:0e:71:08:ce: d8:d3:c4:9e:af:3f:ae:b7:96:95:19:ba:a5:37:29:b6:2a:5c: 4a:58:64:eb:db:01:b6:2c:9b:0e:c4:e9:cc:fb:34:20:70:76: ee:c2:62:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuk6UKDUlwExlQ4TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNjAwMTAxNloXDTI2MDEyNDAxMTAxNlowLzEtMCsGA1UEAxMk NjNkYzJmNTUtYmQyOC00YjFiLTliYjItODNlYmNkY2UwZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhgJshV+az2PRYQpAW7k8ljVWtJuP2qIh09B Si0IkyHNwGJi+/yEA485r1+2C2vT/cnDGX9Z0CEbhSxImWItbdABQDZvkd4g6rG6 CxZccJ8nbVpeGYwoh2MuK60llraN2tycYG6Bn7Or58PKUqVjfpPLhkPn4nE6nWTT 6E7/Ci0ov/JU+N55LMYPxBpU5XrtayytPitxwd25c489g6Gl+/P5u1FQd68AgKLR Oc1EGXMOzTL/JcJK0xBHHbJovhpvIYS34ModAL2QfvfQ7MMQlOOFYbkF7v3lFD0x Ik8YqMB3MT72u8i3G73nYL1NG9oDvLTfY9n1XojElDjHnj0YewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDIVV3VkWRwQXSYOZedo9clgRzfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTdlMGI1ZjUtN2FhNi0z ZmE3LWFjYjAtZWIxZTc3NzFjNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfXZqdMR/0+jY5+1gw1v1ic//0g3PqaPKoU8VMw9RFluzgfgpVu4Avs 7FT8W2d6aiPBoZo2SFNvtDY5wNDlqkofA+pHkJNT97OvHxVh8XSXN296hXtTrf7U VnRIugB3gXqj5UwB9GiPIbgOcU5+gU76QgydzriGR5Ts4tmf1HlRs0wulO4HXTtG iDg+vb4cfBktBIsbKtatVK+IR1VSPZPyG23wBtBMonQSvU+VAVgd21byJoHi5ouh izmlabhgVJFODYGhsDt2t7B7/CGT6uOQ8SbqDnEIztjTxJ6vP663lpUZuqU3KbYq XEpYZOvbAbYsmw7E6cz7NCBwdu7CYiE= -----END CERTIFICATE-----Generated at Fri Oct 31 05:31:38 2025 by rpki-client