$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1212b0b5-be2c-3021-bac4-0d43ad85931c.roa File: 1212b0b5-be2c-3021-bac4-0d43ad85931c.roa (raw, json) Hash identifier: RbMZ4gJZ5sirS49NIEwIyJfIz2V+nLnCN+oL+92ZVxc= Subject key identifier: 01:1A:C2:F2:87:F0:9B:B5:B6:54:EE:11:67:77:C8:9F:46:31:0E:C0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC0F9CBD72E87E342DDB00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1212b0b5-be2c-3021-bac4-0d43ad85931c.roa Signing time: Mon 08 Sep 2025 07:16:41 +0000 ROA not before: Mon 08 Sep 2025 07:16:41 +0000 ROA not after: Sun 07 Dec 2025 08:16:41 +0000 asID: 401783 IP address blocks: 209.101.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:0f:9c:bd:72:e8:7e:34:2d:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:41 2025 GMT Not After : Dec 7 08:16:41 2025 GMT Subject: CN=b929c481-271b-4ad6-a6df-f46513b10c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:f5:30:a5:2d:5c:fc:54:ef:56:7d:a2:44: 44:ed:cd:2e:37:6d:8f:2e:fd:92:b8:84:56:3d:b6: f6:93:84:b5:0f:43:63:f8:ce:00:ce:ab:d6:cb:8e: 9d:a8:01:ee:48:fa:cc:1c:fb:ab:ef:85:64:e8:7b: 73:49:14:48:3e:18:36:a0:42:2c:31:34:a1:30:94: 83:d4:8c:23:a7:a7:8a:3f:71:af:c2:25:7e:31:e7: e9:65:d0:b0:aa:6d:ce:78:58:93:15:77:b8:a9:d4: a1:d7:dc:fa:6a:3b:24:3e:4b:4b:fa:3a:08:ee:22: dd:3f:2f:6c:78:c6:a4:17:7c:ca:a7:c9:06:25:e7: ea:f3:68:d8:d5:56:1c:44:41:a1:ac:14:bb:89:78: 4c:8b:99:be:e1:bd:b2:70:5d:bf:7e:8d:08:96:a9: 24:e3:2d:a7:97:34:30:33:66:8f:7b:10:e6:4a:ca: 74:aa:d9:ea:96:b5:b8:8a:f5:91:9c:2a:91:09:f5: b8:6a:8d:71:93:79:18:37:c8:cd:3a:dc:1a:dd:2f: 03:71:23:32:b3:48:cf:35:95:51:1e:a3:8b:8e:a7: 03:93:ca:9b:49:8e:ab:64:50:e8:d1:49:9a:0e:de: d8:07:a9:2d:ef:8a:81:3c:90:e7:4c:83:da:9f:77: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1A:C2:F2:87:F0:9B:B5:B6:54:EE:11:67:77:C8:9F:46:31:0E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1212b0b5-be2c-3021-bac4-0d43ad85931c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:03:53:f7:91:ea:02:4e:ac:d0:d1:2e:04:c0:80:2e:70:fe: 24:2b:01:f4:15:ce:6e:c3:06:09:4b:ea:05:0c:ed:7a:f9:ea: f5:d3:54:9a:a0:9f:7c:73:0b:fb:be:e2:64:17:48:e5:24:21: b6:a6:ff:3e:ce:ac:3b:78:81:f3:21:28:17:ff:1a:9d:41:84: 85:48:91:58:7f:d0:6c:0e:89:81:65:10:ac:d9:53:75:a6:7b: 5d:07:fc:7b:69:4f:79:eb:f5:e8:62:e5:c7:6e:95:79:ef:34: 48:cc:72:8f:08:21:d5:91:c2:7d:ba:f8:9e:1f:78:19:d8:0a: a4:b6:e8:90:ac:d2:d5:07:a8:32:18:10:7c:ab:39:2a:87:a6: fd:5b:be:da:e7:65:16:8e:78:e3:fc:d4:68:58:e3:0c:e5:9f: fd:fb:ad:b8:d0:7e:f8:b1:05:8e:6a:a4:2f:7e:fe:81:f3:40: 03:da:13:7b:12:15:11:9b:22:8c:a7:f7:15:50:7a:9a:b3:03: 76:3d:0a:de:38:0e:dd:af:1f:13:ae:9c:e0:da:95:11:a2:07: 8a:16:f4:99:73:44:a3:1a:6c:b0:fc:90:7c:af:f8:a5:72:df: ac:44:02:3d:66:6d:d0:2c:25:4e:7f:f5:57:83:19:ba:72:7f: ad:5d:c4:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvA+cvXLofjQt2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTY0MVoXDTI1MTIwNzA4MTY0MVowLzEtMCsGA1UEAxMk YjkyOWM0ODEtMjcxYi00YWQ2LWE2ZGYtZjQ2NTEzYjEwYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7n1MKUtXPxU71Z9okRE7c0uN22PLv2SuIRW Pbb2k4S1D0Nj+M4AzqvWy46dqAHuSPrMHPur74Vk6HtzSRRIPhg2oEIsMTShMJSD 1Iwjp6eKP3GvwiV+MefpZdCwqm3OeFiTFXe4qdSh19z6ajskPktL+joI7iLdPy9s eMakF3zKp8kGJefq82jY1VYcREGhrBS7iXhMi5m+4b2ycF2/fo0Ilqkk4y2nlzQw M2aPexDmSsp0qtnqlrW4ivWRnCqRCfW4ao1xk3kYN8jNOtwa3S8DcSMys0jPNZVR HqOLjqcDk8qbSY6rZFDo0UmaDt7YB6kt74qBPJDnTIPan3ezwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEawvKH8Ju1tlTuEWd3yJ9GMQ7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTIxMmIwYjUtYmUyYy0z MDIxLWJhYzQtMGQ0M2FkODU5MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQDU/eR6gJOrNDRLgTAgC5w/iQrAfQVzm7DBglL6gUM7Xr56vXTVJqg n3xzC/u+4mQXSOUkIbam/z7OrDt4gfMhKBf/Gp1BhIVIkVh/0GwOiYFlEKzZU3Wm e10H/HtpT3nr9ehi5cdulXnvNEjMco8IIdWRwn26+J4feBnYCqS26JCs0tUHqDIY EHyrOSqHpv1bvtrnZRaOeOP81GhY4wzln/37rbjQfvixBY5qpC9+/oHzQAPaE3sS FRGbIoyn9xVQepqzA3Y9Ct44Dt2vHxOunODalRGiB4oW9JlzRKMabLD8kHyv+KVy 36xEAj1mbdAsJU5/9VeDGbpyf61dxJ0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:37 2025 by rpki-client