$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e38106c7-9b9c-3030-9b0e-56006dfa3123.roa File: e38106c7-9b9c-3030-9b0e-56006dfa3123.roa (raw, json) Hash identifier: +TwbfS6Fd7zdoS1I0BUcohrC8vhwFcZHQesYt42361M= Subject key identifier: 7C:F3:2B:FE:B3:01:E5:6D:85:F2:A3:9C:3E:03:52:45:07:CA:97:A4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BB108F915372173D802B05100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e38106c7-9b9c-3030-9b0e-56006dfa3123.roa Signing time: Thu 30 Oct 2025 08:23:51 +0000 ROA not before: Thu 30 Oct 2025 08:23:51 +0000 ROA not after: Wed 28 Jan 2026 09:23:51 +0000 asID: 205886 IP address blocks: 209.101.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:08:f9:15:37:21:73:d8:02:b0:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 30 08:23:51 2025 GMT Not After : Jan 28 09:23:51 2026 GMT Subject: CN=2d6a88b1-04e0-4192-aff1-50af5f761611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e1:63:56:16:51:32:0e:72:03:06:f8:a0:20: 92:f8:2e:dc:04:e3:3c:70:4b:8c:92:24:2f:d5:5d: 7b:3d:b3:8d:24:d9:1f:67:81:1b:58:6e:f6:df:3f: 82:de:8f:57:0c:06:e8:58:6d:9d:07:42:78:ff:f5: a4:53:2c:af:81:00:05:11:93:93:00:f8:fd:5b:2b: 88:a9:70:dd:c1:38:a7:29:d4:15:b2:78:6e:cf:3d: ac:c8:ec:b4:b9:ae:54:34:16:dd:ec:1d:3d:b2:01: 6a:79:34:de:b4:6f:6b:50:e5:5d:01:e7:fe:c2:a3: 04:34:d1:77:35:15:73:d1:ea:61:11:6c:4b:35:6b: c0:fe:43:e5:9e:95:1d:67:97:8f:39:09:42:4d:54: 21:92:74:24:c9:98:a3:67:f0:9b:8f:90:b5:d7:04: 1a:39:a1:ed:16:9a:41:c0:55:f9:88:ae:3d:4f:cc: 1d:b4:9c:c7:d2:e5:0c:34:1b:be:1a:ec:39:4b:e0: 19:28:cb:5a:34:fb:20:8a:b8:8e:87:96:ec:bf:28: 8d:e8:31:7b:79:9b:73:c9:3b:1a:ce:23:df:35:fd: 0e:ec:e8:70:56:15:a8:84:ce:40:3a:5e:76:ce:14: 33:49:ab:7d:03:5f:f7:73:b3:53:af:9f:62:ce:c2: ab:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F3:2B:FE:B3:01:E5:6D:85:F2:A3:9C:3E:03:52:45:07:CA:97:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e38106c7-9b9c-3030-9b0e-56006dfa3123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d1:c3:ec:c1:dc:16:19:36:4a:a4:77:4d:32:2d:e1:99:74: f2:42:d7:b2:bf:67:c2:87:64:03:fd:08:cd:ad:55:2e:be:d4: 11:e8:96:da:1d:aa:3f:46:f1:75:32:1b:0a:7a:fa:9c:35:21: 2e:d6:85:e8:60:99:6f:e9:e8:8f:f2:fd:9a:1f:b4:42:2c:6e: 8e:e0:5c:c8:64:33:17:22:b7:df:92:23:b5:28:b6:19:a3:44: 90:57:d8:f9:92:41:38:eb:53:03:3b:60:71:0d:1d:59:9f:fa: 88:cc:08:80:b9:1c:af:80:60:de:48:e9:2b:70:ad:52:18:1f: ab:7c:24:18:af:4a:02:d9:fc:e6:94:7c:ee:76:24:a4:b0:c0: 88:d0:73:4c:1b:e7:5d:7d:db:86:65:c1:61:d2:49:9c:60:df: 74:25:02:c9:fe:c6:15:1f:de:ed:1c:30:fc:4f:8c:98:c4:5e: dd:fa:3e:8f:4d:75:15:13:28:c5:90:27:4f:bf:c5:f4:4c:4a: ec:98:d7:1e:5e:cd:55:1a:13:42:fd:59:a2:30:ae:e5:fc:5c: a4:b4:99:d8:cf:c7:92:cc:98:90:4a:63:02:ec:c5:ad:f2:96: dd:d0:b4:44:20:84:24:22:b0:2d:f2:e4:2f:71:27:13:42:ad: d2:18:a4:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxCPkVNyFz2AKwUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAzMDA4MjM1MVoXDTI2MDEyODA5MjM1MVowLzEtMCsGA1UEAxMk MmQ2YTg4YjEtMDRlMC00MTkyLWFmZjEtNTBhZjVmNzYxNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOFjVhZRMg5yAwb4oCCS+C7cBOM8cEuMkiQv 1V17PbONJNkfZ4EbWG723z+C3o9XDAboWG2dB0J4//WkUyyvgQAFEZOTAPj9WyuI qXDdwTinKdQVsnhuzz2syOy0ua5UNBbd7B09sgFqeTTetG9rUOVdAef+wqMENNF3 NRVz0ephEWxLNWvA/kPlnpUdZ5ePOQlCTVQhknQkyZijZ/Cbj5C11wQaOaHtFppB wFX5iK49T8wdtJzH0uUMNBu+Guw5S+AZKMtaNPsgiriOh5bsvyiN6DF7eZtzyTsa ziPfNf0O7OhwVhWohM5AOl52zhQzSat9A1/3c7NTr59izsKrZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzzK/6zAeVthfKjnD4DUkUHypekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTM4MTA2YzctOWI5Yy0z MDMwLTliMGUtNTYwMDZkZmEzMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPRw+zB3BYZNkqkd00yLeGZdPJC17K/Z8KHZAP9CM2tVS6+1BHoltod qj9G8XUyGwp6+pw1IS7WhehgmW/p6I/y/ZoftEIsbo7gXMhkMxcit9+SI7Uothmj RJBX2PmSQTjrUwM7YHENHVmf+ojMCIC5HK+AYN5I6StwrVIYH6t8JBivSgLZ/OaU fO52JKSwwIjQc0wb511924ZlwWHSSZxg33QlAsn+xhUf3u0cMPxPjJjEXt36Po9N dRUTKMWQJ0+/xfRMSuyY1x5ezVUaE0L9WaIwruX8XKS0mdjPx5LMmJBKYwLsxa3y lt3QtEQghCQisC3y5C9xJxNCrdIYpPg= -----END CERTIFICATE-----Generated at Sat Nov 1 08:30:50 2025 by rpki-client