$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f05059d-6f76-31c3-9d62-2ba81924d871.roa File: 4f05059d-6f76-31c3-9d62-2ba81924d871.roa (raw, json) Hash identifier: 6+rN1H8crm6WRNMqS6iNqyf7+eJIuhJCsUaLrTKYewU= Subject key identifier: BB:76:2C:67:8E:3A:59:E4:93:90:8B:A6:CB:03:62:D8:16:91:EF:85 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC19946CEB2BE1E5383380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f05059d-6f76-31c3-9d62-2ba81924d871.roa Signing time: Mon 08 Sep 2025 07:16:45 +0000 ROA not before: Mon 08 Sep 2025 07:16:45 +0000 ROA not after: Sun 07 Dec 2025 08:16:45 +0000 asID: 401783 IP address blocks: 209.101.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:19:94:6c:eb:2b:e1:e5:38:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:45 2025 GMT Not After : Dec 7 08:16:45 2025 GMT Subject: CN=bd68d3a0-d065-468a-9a14-b0f242439e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:5f:90:7d:94:80:51:93:e6:9d:2a:25:7f: fe:1e:8c:b6:fe:88:1f:c7:9b:ec:88:44:dd:c8:ad: 7b:cf:40:f9:97:24:71:69:69:55:91:f2:85:9a:ed: 1c:a7:65:e4:26:74:a6:35:da:22:cb:89:0c:95:f5: c5:09:39:62:62:67:07:25:19:7a:78:db:dd:73:0b: e7:98:4c:f4:b0:88:9b:b9:62:55:4a:7a:54:82:4d: 88:00:f5:9a:5b:5d:6f:eb:2a:8c:a7:04:77:5c:81: 0d:53:84:24:79:2e:c4:b8:dd:f6:cc:ef:cc:e0:a7: 3f:b6:54:75:eb:70:85:46:cd:5d:a9:0a:dc:2f:c3: ca:01:ba:28:e9:d4:df:25:75:e1:b7:f5:1e:e0:41: 2d:76:0d:fd:90:85:d9:e4:b2:07:67:59:e3:76:d5: bf:65:39:53:df:ed:62:1b:aa:74:9b:3b:f0:c5:6a: 87:67:ee:7a:c3:42:3b:2c:72:8e:6a:bc:c7:7a:88: 74:8b:86:28:81:f7:29:10:dc:c1:94:50:6a:27:8c: 16:5c:82:5a:65:58:9f:c2:6e:af:f2:4b:f9:eb:8a: b2:8c:cd:bb:08:ba:6e:ec:21:ec:ef:49:5e:44:59: 6f:c9:dd:ec:09:b1:b2:aa:9e:85:e2:3f:4b:fa:1f: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:76:2C:67:8E:3A:59:E4:93:90:8B:A6:CB:03:62:D8:16:91:EF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f05059d-6f76-31c3-9d62-2ba81924d871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a3:4a:be:72:2c:3b:1c:58:94:09:39:9b:ac:21:7b:c1:d4: f9:02:82:36:d7:69:d1:f4:1e:51:78:8d:6a:15:28:36:47:b4: 41:88:4f:8e:17:f9:2c:33:8b:49:61:81:9c:19:8b:92:3b:71: cc:94:6a:fd:83:43:7c:df:a7:50:38:6c:5e:d3:24:e8:09:1d: a2:36:61:7b:f5:3d:c9:01:f2:94:e9:24:57:8c:f0:c2:37:ba: 63:38:04:46:57:3f:80:86:a0:92:b9:61:79:fa:ca:ef:81:13: 28:66:d2:0e:e4:74:db:31:1e:6c:9c:8f:55:1c:fb:ff:1f:b4: b1:3b:e2:46:cf:79:27:fc:58:63:77:3a:c0:1a:ee:8d:82:44: 2a:08:6d:f7:ec:de:00:cc:60:02:21:08:f4:9d:92:2d:32:f8: b8:8f:b5:c8:53:8a:60:30:c6:09:94:48:eb:54:e1:ca:50:a6: db:63:0e:a2:3e:3c:6c:88:c9:27:cc:ae:51:2c:8a:9d:ba:54: 2a:7a:53:94:f8:22:73:d7:ea:e0:e7:89:3f:64:2e:43:09:06: 53:8d:8e:52:4a:0c:50:d2:f7:44:83:7c:d3:b7:71:08:7b:6d: 50:ae:a4:66:02:9f:2d:d0:5a:30:0e:80:2b:66:e0:6f:c2:76: 37:1b:8b:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvBmUbOsr4eU4M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTY0NVoXDTI1MTIwNzA4MTY0NVowLzEtMCsGA1UEAxMk YmQ2OGQzYTAtZDA2NS00NjhhLTlhMTQtYjBmMjQyNDM5ZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnpfkH2UgFGT5p0qJX/+Hoy2/ogfx5vsiETd yK17z0D5lyRxaWlVkfKFmu0cp2XkJnSmNdoiy4kMlfXFCTliYmcHJRl6eNvdcwvn mEz0sIibuWJVSnpUgk2IAPWaW11v6yqMpwR3XIENU4QkeS7EuN32zO/M4Kc/tlR1 63CFRs1dqQrcL8PKAboo6dTfJXXht/Ue4EEtdg39kIXZ5LIHZ1njdtW/ZTlT3+1i G6p0mzvwxWqHZ+56w0I7LHKOarzHeoh0i4YogfcpENzBlFBqJ4wWXIJaZVifwm6v 8kv564qyjM27CLpu7CHs70leRFlvyd3sCbGyqp6F4j9L+h8mxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt2LGeOOlnkk5CLpssDYtgWke+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGYwNTA1OWQtNmY3Ni0z MWMzLTlkNjItMmJhODE5MjRkODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmjSr5yLDscWJQJOZusIXvB1PkCgjbXadH0HlF4jWoVKDZHtEGIT44X +Swzi0lhgZwZi5I7ccyUav2DQ3zfp1A4bF7TJOgJHaI2YXv1PckB8pTpJFeM8MI3 umM4BEZXP4CGoJK5YXn6yu+BEyhm0g7kdNsxHmycj1Uc+/8ftLE74kbPeSf8WGN3 OsAa7o2CRCoIbffs3gDMYAIhCPSdki0y+LiPtchTimAwxgmUSOtU4cpQpttjDqI+ PGyIySfMrlEsip26VCp6U5T4InPX6uDniT9kLkMJBlONjlJKDFDS90SDfNO3cQh7 bVCupGYCny3QWjAOgCtm4G/Cdjcbi4c= -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:01 2025 by rpki-client