$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/17fb49f7-8ecb-3c37-8a63-c38e5c153089.roa File: 17fb49f7-8ecb-3c37-8a63-c38e5c153089.roa (raw, json) Hash identifier: E0V/xzAGE12NucXdrzDt+CiofZJTE6N5Hzf/4F0FT5k= Subject key identifier: E5:2E:36:23:49:81:1A:2A:A3:DE:60:B5:1B:69:8F:C2:CD:22:11:7A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B52BDF3851087089E76747470 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/17fb49f7-8ecb-3c37-8a63-c38e5c153089.roa Signing time: Fri 26 Sep 2025 13:46:43 +0000 ROA not before: Fri 26 Sep 2025 13:46:43 +0000 ROA not after: Thu 25 Dec 2025 14:46:43 +0000 asID: 25198 IP address blocks: 209.101.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:bd:f3:85:10:87:08:9e:76:74:74:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 26 13:46:43 2025 GMT Not After : Dec 25 14:46:43 2025 GMT Subject: CN=8e21010d-553a-44c3-8e3f-620ed758b5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:03:5b:50:6e:c9:4c:bb:ef:4f:1d:83:7d:be: d4:63:47:10:99:89:5f:c3:38:28:33:ca:a6:20:80: 40:f6:67:6e:88:c7:ba:3a:5d:d1:06:9d:36:74:af: f5:f9:20:36:c4:25:f8:5b:4f:10:90:47:e1:8f:52: 45:0c:5d:c9:50:10:84:b5:42:12:eb:30:a8:95:06: c5:e9:c1:bd:59:d0:79:b2:f7:25:d3:94:66:33:2a: c3:1f:d7:21:a7:3f:24:a4:66:7a:9d:14:d6:59:12: a7:d6:d4:2a:c4:c6:6c:65:df:f1:ea:52:de:fd:58: 7e:51:0f:60:21:8f:10:ad:79:b1:f1:75:30:42:f9: 1c:25:52:f6:ec:9d:22:1e:1f:81:e0:73:4c:35:e3: 71:2a:d5:d6:1d:32:5f:97:1e:a5:bd:00:0a:67:d6: 95:89:ea:26:2d:23:56:ee:ee:99:c3:0f:8d:20:92: 79:54:bb:76:8d:3e:9a:c2:71:12:bb:a1:44:30:25: 0b:33:03:45:b9:c9:2b:69:e3:da:95:f7:32:14:4b: b7:49:1f:15:7c:65:2c:32:13:45:95:ef:ca:48:54: 57:00:56:70:6f:69:8b:6f:6b:25:8d:db:44:ef:d3: 20:dd:18:2f:fd:25:2f:5c:c3:57:8a:2a:5a:d6:7f: 7a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2E:36:23:49:81:1A:2A:A3:DE:60:B5:1B:69:8F:C2:CD:22:11:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/17fb49f7-8ecb-3c37-8a63-c38e5c153089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7e:c8:7a:ab:b5:4e:f1:c3:64:72:57:b5:4f:10:72:a8:eb: 6f:e9:19:67:e1:63:20:3f:75:75:6b:c3:de:29:ba:bf:b2:41: 95:e2:84:d3:4a:b8:99:fb:1d:a8:3b:e0:45:13:a4:54:f1:c3: 5f:ca:c4:e0:7d:1f:6c:50:4c:bb:0e:9c:3a:c4:03:55:38:c4: e5:59:45:24:11:9e:3c:f3:29:67:0e:b0:14:11:c6:70:8a:7b: 55:fb:ee:19:7b:47:78:8a:fd:bb:62:e9:44:bc:dd:b7:da:17: de:01:70:d6:94:7c:4e:58:3f:63:1d:3a:ad:36:31:c1:24:70: b2:af:b8:0c:a8:ee:c1:94:19:cf:02:77:69:2d:1a:b4:c8:14: 2f:6e:51:d6:b3:27:0d:64:99:06:fd:be:c4:3d:37:ff:a8:f8: 23:8d:0c:89:b1:65:fd:50:9a:34:7a:27:9c:65:61:ec:67:32: e9:45:2b:89:c7:e4:9b:7f:03:99:92:9a:d7:a5:ab:fe:44:75: 8f:3e:ce:d6:94:e4:50:cf:69:b3:d1:f9:03:b3:52:a8:0d:b8: b7:99:0f:5e:43:30:7f:2a:fa:9d:5e:05:43:7a:ee:e7:af:49: c6:8c:0b:3a:61:22:49:5a:4b:52:47:1c:ad:30:e6:10:94:d4: bc:d8:33:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSvfOFEIcInnZ0dHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNjEzNDY0M1oXDTI1MTIyNTE0NDY0M1owLzEtMCsGA1UEAxMk OGUyMTAxMGQtNTUzYS00NGMzLThlM2YtNjIwZWQ3NThiNWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wNbUG7JTLvvTx2Dfb7UY0cQmYlfwzgoM8qm IIBA9mduiMe6Ol3RBp02dK/1+SA2xCX4W08QkEfhj1JFDF3JUBCEtUIS6zColQbF 6cG9WdB5svcl05RmMyrDH9chpz8kpGZ6nRTWWRKn1tQqxMZsZd/x6lLe/Vh+UQ9g IY8QrXmx8XUwQvkcJVL27J0iHh+B4HNMNeNxKtXWHTJflx6lvQAKZ9aVieomLSNW 7u6Zww+NIJJ5VLt2jT6awnESu6FEMCULMwNFuckraePalfcyFEu3SR8VfGUsMhNF le/KSFRXAFZwb2mLb2sljdtE79Mg3Rgv/SUvXMNXiipa1n96FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUuNiNJgRoqo95gtRtpj8LNIhF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTdmYjQ5ZjctOGVjYi0z YzM3LThhNjMtYzM4ZTVjMTUzMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ+yHqrtU7xw2RyV7VPEHKo62/pGWfhYyA/dXVrw94pur+yQZXihNNK uJn7Hag74EUTpFTxw1/KxOB9H2xQTLsOnDrEA1U4xOVZRSQRnjzzKWcOsBQRxnCK e1X77hl7R3iK/bti6US83bfaF94BcNaUfE5YP2MdOq02McEkcLKvuAyo7sGUGc8C d2ktGrTIFC9uUdazJw1kmQb9vsQ9N/+o+CONDImxZf1QmjR6J5xlYexnMulFK4nH 5Jt/A5mSmtelq/5EdY8+ztaU5FDPabPR+QOzUqgNuLeZD15DMH8q+p1eBUN67uev ScaMCzphIklaS1JHHK0w5hCU1LzYMz0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:24:14 2025 by rpki-client