$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/281dd464-d9d7-3382-987b-a9b35e6198a0.roa File: 281dd464-d9d7-3382-987b-a9b35e6198a0.roa (raw, json) Hash identifier: 3EevznRjFDnQ3fag1KFUe1Dm75SQYlfAxitbj8DEaK4= Subject key identifier: D2:E2:8F:82:16:48:6B:3D:1A:79:92:36:56:F6:A8:A2:DA:54:86:24 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B3F62364F14A746BD63B17B00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/281dd464-d9d7-3382-987b-a9b35e6198a0.roa Signing time: Fri 19 Sep 2025 15:21:31 +0000 ROA not before: Fri 19 Sep 2025 15:21:31 +0000 ROA not after: Thu 18 Dec 2025 16:21:31 +0000 asID: 5650 IP address blocks: 209.101.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:62:36:4f:14:a7:46:bd:63:b1:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 19 15:21:31 2025 GMT Not After : Dec 18 16:21:31 2025 GMT Subject: CN=9d69fd7c-b2d9-4811-a3fc-16d1e13d7970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:d7:ea:b7:4d:2c:1c:41:0a:21:8f:c7:84: e1:70:c9:1b:da:9e:0e:5b:33:af:d4:cf:00:eb:d1: 77:88:08:2f:8d:2f:84:86:8c:2a:44:71:d7:a6:44: a1:82:2a:a9:81:28:78:ab:f1:f9:fb:68:3a:81:14: db:47:a4:e0:92:53:5c:7d:a5:e7:5a:7b:1c:43:c3: 1a:08:26:76:b7:06:39:9f:bb:6d:d2:25:fc:2e:67: e5:3c:e5:b6:6c:96:e5:89:32:5e:66:b0:45:aa:1a: c9:4e:29:91:d1:31:a3:4e:57:6e:cb:8c:e1:c5:b6: 2e:1e:ea:ad:d1:fc:ff:8b:82:67:62:5a:48:fd:f9: 6b:8e:af:12:c9:3a:d1:18:56:41:2d:22:85:68:43: 9f:49:bd:de:fd:4a:22:fd:95:13:55:90:43:19:c7: 09:96:52:21:64:8f:c6:f8:eb:de:b7:c0:52:c7:f3: c5:08:e5:25:22:48:ca:f6:79:f8:99:b8:23:8b:24: d8:84:b2:37:d6:1b:99:20:e9:27:67:1c:30:59:44: cf:54:41:ca:a1:cf:51:8e:4d:c4:02:cc:b6:08:ed: 5d:39:94:2e:6d:0c:56:49:20:8a:db:73:30:52:08: 3c:1a:da:d5:89:66:35:e3:36:c0:58:22:de:41:34: e3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E2:8F:82:16:48:6B:3D:1A:79:92:36:56:F6:A8:A2:DA:54:86:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/281dd464-d9d7-3382-987b-a9b35e6198a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9c:89:6d:a4:d9:29:d1:29:6a:93:2d:90:b5:02:78:af:e9: b4:9e:12:50:d0:09:02:c5:c9:ce:2a:5b:22:99:ba:06:ac:45: 22:17:9b:2e:be:7f:2f:0f:a6:0c:4a:5e:e7:af:0e:6d:ec:bc: 65:e2:f0:e7:97:05:01:b0:f9:02:40:a0:73:9b:30:39:c7:d3: 3e:97:81:98:d2:5a:07:8b:51:b4:78:05:f1:ea:9f:c4:33:98: b4:ea:d8:f2:7d:6f:b8:37:2f:3d:ee:25:b1:ca:05:cd:1e:0e: 66:36:19:64:b9:ab:ed:9c:13:17:d7:83:5a:f8:ee:67:a2:6e: 6c:11:90:da:61:68:06:ea:64:b5:e8:b8:0a:c7:70:7b:7a:c9: 97:cc:52:66:17:f4:43:65:7b:27:fc:2e:4f:71:97:20:0a:65: 12:ef:85:07:8a:0f:c1:6c:8c:22:cb:69:81:77:b3:89:7b:f0: 2a:ee:75:70:46:35:a9:1d:21:6c:fa:3c:b2:fc:21:d4:3d:83: d5:79:a8:18:f0:29:dd:5a:51:4e:ee:40:0f:7e:1e:bd:18:e1: f7:e8:bf:22:90:84:ef:f9:46:86:f6:39:18:b3:33:4f:32:b5: ac:a3:70:4a:0f:6b:3f:ab:e9:4a:77:14:67:b8:06:a8:1a:2c: 6e:06:54:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/YjZPFKdGvWOxewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxOTE1MjEzMVoXDTI1MTIxODE2MjEzMVowLzEtMCsGA1UEAxMk OWQ2OWZkN2MtYjJkOS00ODExLWEzZmMtMTZkMWUxM2Q3OTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r7X6rdNLBxBCiGPx4ThcMkb2p4OWzOv1M8A 69F3iAgvjS+EhowqRHHXpkShgiqpgSh4q/H5+2g6gRTbR6TgklNcfaXnWnscQ8Ma CCZ2twY5n7tt0iX8LmflPOW2bJbliTJeZrBFqhrJTimR0TGjTlduy4zhxbYuHuqt 0fz/i4JnYlpI/flrjq8SyTrRGFZBLSKFaEOfSb3e/Uoi/ZUTVZBDGccJllIhZI/G +Ovet8BSx/PFCOUlIkjK9nn4mbgjiyTYhLI31huZIOknZxwwWUTPVEHKoc9Rjk3E Asy2CO1dOZQubQxWSSCK23MwUgg8GtrViWY14zbAWCLeQTTj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLij4IWSGs9GnmSNlb2qKLaVIYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjgxZGQ0NjQtZDlkNy0z MzgyLTk4N2ItYTliMzVlNjE5OGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaciW2k2SnRKWqTLZC1Aniv6bSeElDQCQLFyc4qWyKZugasRSIXmy6+ fy8PpgxKXuevDm3svGXi8OeXBQGw+QJAoHObMDnH0z6XgZjSWgeLUbR4BfHqn8Qz mLTq2PJ9b7g3Lz3uJbHKBc0eDmY2GWS5q+2cExfXg1r47meibmwRkNphaAbqZLXo uArHcHt6yZfMUmYX9ENleyf8Lk9xlyAKZRLvhQeKD8FsjCLLaYF3s4l78CrudXBG NakdIWz6PLL8IdQ9g9V5qBjwKd1aUU7uQA9+Hr0Y4ffovyKQhO/5Rob2ORizM08y tayjcEoPaz+r6Up3FGe4BqgaLG4GVGM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:15:57 2025 by rpki-client