$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2bdd7792-8aca-3b3d-b98c-4036e4da946c.roa File: 2bdd7792-8aca-3b3d-b98c-4036e4da946c.roa (raw, json) Hash identifier: 0ahcz9tIhgZQgO1mROQDzV1q9tiesokUleqjVaFP38Y= Subject key identifier: FD:D3:89:84:4E:F8:3D:D1:D2:3B:F4:AB:4C:02:F6:B9:24:F8:76:FA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA3E994E64D3536B51D0A8100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2bdd7792-8aca-3b3d-b98c-4036e4da946c.roa Signing time: Sat 25 Oct 2025 15:35:06 +0000 ROA not before: Sat 25 Oct 2025 15:35:06 +0000 ROA not after: Fri 23 Jan 2026 16:35:06 +0000 asID: 9304 IP address blocks: 209.101.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:e9:94:e6:4d:35:36:b5:1d:0a:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 25 15:35:06 2025 GMT Not After : Jan 23 16:35:06 2026 GMT Subject: CN=3f7d68eb-2054-4247-8dde-3a8b433bccf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ee:19:2d:d7:c7:ed:62:dd:a4:79:ed:87:d6: 04:77:75:c6:44:81:31:ad:9d:f9:79:38:7f:18:81: 41:07:4d:a5:ca:32:ff:3b:ca:89:32:77:f8:0e:5e: c6:54:22:78:6f:17:c0:1a:65:97:f0:eb:91:38:40: ad:6d:58:d9:51:b7:cf:9c:f4:1c:92:84:9e:8e:5c: b2:5f:61:05:26:ab:e1:1a:a8:e9:9d:7c:22:a9:1e: f9:f0:0f:88:51:90:6a:f5:95:6e:ea:8f:cd:51:f4: 12:83:e3:af:44:ed:62:c9:93:d1:96:e6:63:f2:5e: 92:17:41:d4:1a:7d:b0:1d:8a:d6:64:93:2f:d1:27: f7:db:e2:4b:b1:da:5f:a0:c5:a3:d4:b0:1e:69:38: c9:e6:e8:48:64:3b:1b:20:d4:c4:93:0d:bc:bc:a7: 1d:c2:5a:fd:40:d8:f9:04:7c:dc:d7:9e:98:54:57: e8:60:a4:a2:ad:1f:5e:c3:3d:de:1e:63:c1:2a:84: 4b:38:55:39:78:bd:a4:40:df:55:f5:c1:2d:aa:58: 8f:8e:0f:aa:9e:fb:88:7b:c9:8b:47:8e:1c:c7:97: 1e:8b:5b:dc:ac:4a:15:10:81:02:b7:5f:3f:a1:14: f1:7d:23:3b:45:ff:81:2d:e6:d0:8d:12:bb:21:52: 3e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D3:89:84:4E:F8:3D:D1:D2:3B:F4:AB:4C:02:F6:B9:24:F8:76:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2bdd7792-8aca-3b3d-b98c-4036e4da946c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6c:df:a6:de:57:22:c8:e2:02:7b:dc:85:d3:6e:bc:5c:2b: 4e:16:86:aa:da:ba:77:65:e7:75:59:ae:df:7f:12:fc:16:9b: c0:ae:48:05:71:f5:45:31:9c:b1:8e:22:ad:9b:bf:6d:f1:5a: 1f:0f:6f:84:87:e6:e1:89:01:1b:09:fa:be:3a:45:75:6e:43: 06:68:a3:22:be:db:05:9a:34:99:71:1c:6d:be:50:85:f6:d2: cc:41:69:7f:35:09:d1:27:80:c2:66:6a:7b:1b:b4:3f:e3:23: 06:72:51:2e:ef:f3:04:7a:38:92:53:4b:00:8c:66:26:b5:1a: 16:9c:e7:0f:9b:f7:d3:e7:58:39:33:d6:98:d4:6b:5f:53:9f: 90:d3:37:86:cb:88:15:b3:85:32:60:86:e2:2e:06:87:d2:e7: 6e:c1:59:17:61:72:16:15:eb:cb:b5:fc:45:1c:0d:dc:ba:ed: cb:41:7a:44:a4:47:d9:41:fa:37:2e:4c:a6:c7:8c:99:f7:fa: a3:ff:95:07:34:96:48:8a:1c:56:cf:7c:3d:80:a7:e4:ba:96: a0:45:0f:d1:9f:62:5f:c7:52:6b:7b:d9:e6:80:72:53:62:93: b8:c8:99:77:4f:9c:6e:ff:2b:f9:38:26:46:45:71:8c:ff:80: ce:24:63:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuj6ZTmTTU2tR0KgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNTE1MzUwNloXDTI2MDEyMzE2MzUwNlowLzEtMCsGA1UEAxMk M2Y3ZDY4ZWItMjA1NC00MjQ3LThkZGUtM2E4YjQzM2JjY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze4ZLdfH7WLdpHnth9YEd3XGRIExrZ35eTh/ GIFBB02lyjL/O8qJMnf4Dl7GVCJ4bxfAGmWX8OuROECtbVjZUbfPnPQckoSejlyy X2EFJqvhGqjpnXwiqR758A+IUZBq9ZVu6o/NUfQSg+OvRO1iyZPRluZj8l6SF0HU Gn2wHYrWZJMv0Sf32+JLsdpfoMWj1LAeaTjJ5uhIZDsbINTEkw28vKcdwlr9QNj5 BHzc156YVFfoYKSirR9ewz3eHmPBKoRLOFU5eL2kQN9V9cEtqliPjg+qnvuIe8mL R44cx5cei1vcrEoVEIECt18/oRTxfSM7Rf+BLebQjRK7IVI+VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3TiYRO+D3R0jv0q0wC9rkk+Hb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmJkZDc3OTItOGFjYS0z YjNkLWI5OGMtNDAzNmU0ZGE5NDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJs36beVyLI4gJ73IXTbrxcK04Whqraundl53VZrt9/EvwWm8CuSAVx 9UUxnLGOIq2bv23xWh8Pb4SH5uGJARsJ+r46RXVuQwZooyK+2wWaNJlxHG2+UIX2 0sxBaX81CdEngMJmansbtD/jIwZyUS7v8wR6OJJTSwCMZia1Ghac5w+b99PnWDkz 1pjUa19Tn5DTN4bLiBWzhTJghuIuBofS527BWRdhchYV68u1/EUcDdy67ctBekSk R9lB+jcuTKbHjJn3+qP/lQc0lkiKHFbPfD2Ap+S6lqBFD9GfYl/HUmt72eaAclNi k7jImXdPnG7/K/k4JkZFcYz/gM4kY7U= -----END CERTIFICATE-----Generated at Tue Nov 4 22:47:00 2025 by rpki-client