$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa File: 67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa (raw, json) Hash identifier: OPnjkvwUvg8J42Dg37LJkV6L9l2+sW0FG409VJB/1RY= Subject key identifier: E4:24:00:FA:44:94:45:E3:71:8A:81:C4:E1:A5:FC:96:1A:B4:22:F2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBBDD60FE9968C179FA1360 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa Signing time: Mon 08 Sep 2025 07:16:17 +0000 ROA not before: Mon 08 Sep 2025 07:16:17 +0000 ROA not after: Sun 07 Dec 2025 08:16:17 +0000 asID: 401783 IP address blocks: 209.101.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bb:dd:60:fe:99:68:c1:79:fa:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:17 2025 GMT Not After : Dec 7 08:16:17 2025 GMT Subject: CN=d31aee4a-d4cb-414d-85c7-b441a04a84d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ff:91:ed:23:7a:93:8d:de:b0:ba:a3:fe:98: 0f:89:15:03:a9:53:bf:55:46:b6:a8:8e:14:18:0d: 20:7b:7a:42:74:3c:15:3b:34:7f:37:0a:3a:21:c1: de:b3:f9:94:8c:e4:6e:7e:b0:a4:6d:a3:53:6f:aa: a1:b0:ce:68:fa:5f:2a:55:a1:37:b0:f0:4a:b4:05: 73:3f:26:50:4f:39:c7:d7:29:85:61:19:47:8f:2e: dd:3c:c3:15:c0:50:92:2e:81:b5:2f:0c:8f:cb:43: 33:0d:a9:af:64:48:38:6c:22:66:ea:77:c9:3e:10: 9c:8f:d9:fc:11:32:e2:04:88:8f:10:d6:4c:fe:d7: 94:00:ad:bf:ee:fc:93:98:16:1e:85:92:c8:42:0f: 46:f5:07:06:51:55:8d:e0:53:d5:98:62:e8:6c:d5: 84:80:1f:ab:0e:e8:a5:6c:4a:83:5e:e0:b5:6b:2f: 3a:5c:d2:7d:37:5b:bd:89:db:fd:b4:8f:80:29:b2: 8d:87:a7:df:8b:ae:1d:68:cf:77:f5:ad:43:4f:d9: 28:a3:2d:e2:8a:49:46:42:06:07:7f:91:73:53:f8: 2a:06:e2:e8:48:e5:8e:ab:d9:5e:90:d4:98:08:cb: 4a:1e:44:76:c4:1d:82:3c:1b:89:24:05:0f:8b:dd: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:24:00:FA:44:94:45:E3:71:8A:81:C4:E1:A5:FC:96:1A:B4:22:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:41:84:85:69:30:01:7d:52:8b:ba:b6:df:02:95:4e:47:e5: 71:05:7b:c3:2a:72:dc:a8:1c:cf:df:d2:1f:83:48:9b:19:0e: 9c:5c:25:68:e3:1b:27:98:7d:18:8a:01:f7:07:45:5a:14:a7: 6d:1b:16:b8:ed:f5:be:e3:bf:7a:b8:ae:54:4b:b9:fc:cf:78: c6:87:7d:14:ed:57:87:ca:31:fc:5d:e0:5b:4c:6c:de:d5:82: e5:68:03:a5:8d:5a:ac:ef:dc:73:8b:eb:57:1c:8a:e0:b0:05: 25:48:c5:47:ae:7f:fc:6c:78:f6:2d:62:eb:a3:79:7c:05:6d: 25:44:12:1e:7b:2f:fe:9e:a8:ef:09:fa:21:2a:66:b8:b0:e9: 98:0c:2f:90:5b:cf:d0:2e:39:7b:de:6c:be:cf:26:f1:61:7e: d8:cd:60:71:63:48:dc:66:16:0f:52:c0:2b:25:e0:e3:0a:3c: 2d:50:5d:7b:2c:d3:67:c8:20:f7:a8:49:1a:a0:6a:fc:ab:8a: 69:08:b9:95:ae:cd:5e:02:b9:e3:dd:1f:d9:a0:94:e4:5a:90: 51:10:5f:17:9e:5e:d1:65:75:6d:6a:45:ae:87:c8:8e:4a:2b: 76:22:17:29:6e:15:01:13:dc:83:95:4c:a1:ad:7f:a4:29:62: 1b:1e:d2:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfu91g/plowXn6E2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTYxN1oXDTI1MTIwNzA4MTYxN1owLzEtMCsGA1UEAxMk ZDMxYWVlNGEtZDRjYi00MTRkLTg1YzctYjQ0MWEwNGE4NGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP+R7SN6k43esLqj/pgPiRUDqVO/VUa2qI4U GA0ge3pCdDwVOzR/Nwo6IcHes/mUjORufrCkbaNTb6qhsM5o+l8qVaE3sPBKtAVz PyZQTznH1ymFYRlHjy7dPMMVwFCSLoG1LwyPy0MzDamvZEg4bCJm6nfJPhCcj9n8 ETLiBIiPENZM/teUAK2/7vyTmBYehZLIQg9G9QcGUVWN4FPVmGLobNWEgB+rDuil bEqDXuC1ay86XNJ9N1u9idv9tI+AKbKNh6ffi64daM939a1DT9kooy3iiklGQgYH f5FzU/gqBuLoSOWOq9lekNSYCMtKHkR2xB2CPBuJJAUPi92HIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQkAPpElEXjcYqBxOGl/JYatCLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjczNDFlZjEtOGVhNy0z NmZhLWFiNmQtZTc5Y2UyMGFmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhBhIVpMAF9Uou6tt8ClU5H5XEFe8MqctyoHM/f0h+DSJsZDpxcJWjj GyeYfRiKAfcHRVoUp20bFrjt9b7jv3q4rlRLufzPeMaHfRTtV4fKMfxd4FtMbN7V guVoA6WNWqzv3HOL61cciuCwBSVIxUeuf/xsePYtYuujeXwFbSVEEh57L/6eqO8J +iEqZriw6ZgML5Bbz9AuOXvebL7PJvFhftjNYHFjSNxmFg9SwCsl4OMKPC1QXXss 02fIIPeoSRqgavyrimkIuZWuzV4CuePdH9mglORakFEQXxeeXtFldW1qRa6HyI5K K3YiFyluFQET3IOVTKGtf6QpYhse0ok= -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:09 2025 by rpki-client