$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/690d093c-a744-3c9f-b721-9b62edbcaf24.roa File: 690d093c-a744-3c9f-b721-9b62edbcaf24.roa (raw, json) Hash identifier: CWyKpU995UrkwgIn6jdIvNg0XWRYbEXha80FF27lJ/I= Subject key identifier: 03:FA:94:08:63:7A:6E:FD:FC:C7:F0:3D:DD:3A:D6:C8:84:52:29:CE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B7993AB2762FF5D364976C380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/690d093c-a744-3c9f-b721-9b62edbcaf24.roa Signing time: Fri 10 Oct 2025 11:38:03 +0000 ROA not before: Fri 10 Oct 2025 11:38:03 +0000 ROA not after: Thu 08 Jan 2026 12:38:03 +0000 asID: 9304 IP address blocks: 209.101.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:93:ab:27:62:ff:5d:36:49:76:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 11:38:03 2025 GMT Not After : Jan 8 12:38:03 2026 GMT Subject: CN=a0273f54-5863-4fc8-b0fb-6f803d42174a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:26:08:0b:21:d2:b8:c8:f7:fd:d8:f5:14: 5b:a8:10:c7:39:8b:fd:e3:fd:a6:91:83:fd:3b:ef: 9a:45:46:c3:f7:58:69:c2:3f:02:26:69:2c:d9:a5: b2:da:43:52:4d:05:34:ca:57:07:3d:28:2f:82:80: e8:28:b4:4f:86:56:67:b6:95:e5:a7:f1:6e:8a:8c: ce:18:de:26:b0:da:50:8f:b7:e3:95:75:86:5c:3d: 83:0d:ed:48:d4:90:75:53:b2:e3:a1:44:6c:b0:c7: 69:ed:60:ab:a5:68:82:54:e0:be:c3:0f:e4:b2:8f: 49:b2:a8:ef:fb:ae:6f:c2:16:cd:6d:42:4a:9c:43: 14:33:d9:9b:34:e6:8c:20:d2:fe:54:a9:a6:2e:eb: e7:91:2c:3e:a9:65:90:bb:6e:6d:2a:2d:d3:0c:15: d1:1e:b9:9a:ba:67:5f:b7:a4:48:d4:a1:1b:56:6b: 78:41:44:84:77:1e:9b:01:70:99:de:d7:ef:a9:48: 43:3c:89:d7:18:b1:f5:08:4c:78:f2:98:0e:90:a9: 06:b5:9b:66:17:12:49:19:74:c2:95:dd:6d:66:d3: 0a:5e:3d:5b:9e:ea:8e:8e:8d:61:24:c6:a8:67:7d: 9b:65:e1:11:5d:5d:98:4f:62:50:d3:30:c0:20:06: 9d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FA:94:08:63:7A:6E:FD:FC:C7:F0:3D:DD:3A:D6:C8:84:52:29:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/690d093c-a744-3c9f-b721-9b62edbcaf24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1e:1a:91:85:73:2d:7f:16:8e:a8:16:9a:67:7c:d8:c4:48: 71:7c:7c:ce:d1:db:f1:9e:2d:43:2b:3b:46:3c:72:01:e7:ff: 73:62:20:d6:24:d5:a5:4a:f6:81:6d:33:62:cc:f0:7f:92:39: c8:c4:1e:5e:7a:8a:d6:8e:6b:b3:aa:a4:d5:a7:9d:a3:a5:d5: 56:97:dc:50:22:5a:20:c2:09:e7:5e:dc:b3:96:a3:95:f6:f5: 8b:01:d7:90:2c:83:c7:18:c8:21:00:f3:4b:12:bc:64:05:1b: 24:4a:be:c8:8e:c9:ff:e2:2c:81:6d:69:01:09:e1:31:96:82: 0c:57:b3:3f:1d:07:24:1b:8e:05:a2:44:58:09:f4:2b:02:d2: db:36:74:02:c0:a2:b0:05:63:e1:75:f9:4c:12:8e:b5:db:1b: da:56:04:66:36:29:8b:25:a5:5d:9e:2a:7b:9a:43:f8:cb:93: 1f:79:16:5b:13:e2:f5:c9:be:8a:c6:c1:46:80:50:79:94:19: 39:91:95:a9:d7:bb:9a:12:fe:e4:82:17:d2:66:4b:3f:93:6e: 88:6c:49:0b:68:48:4f:3f:f1:b1:a5:cb:81:f2:5b:29:ed:31: 99:5b:08:d4:15:ae:84:f2:04:2a:a3:c6:68:4e:9f:5c:79:40: e5:47:3c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5k6snYv9dNkl2w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDExMzgwM1oXDTI2MDEwODEyMzgwM1owLzEtMCsGA1UEAxMk YTAyNzNmNTQtNTg2My00ZmM4LWIwZmItNmY4MDNkNDIxNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfQmCAsh0rjI9/3Y9RRbqBDHOYv94/2mkYP9 O++aRUbD91hpwj8CJmks2aWy2kNSTQU0ylcHPSgvgoDoKLRPhlZntpXlp/FuiozO GN4msNpQj7fjlXWGXD2DDe1I1JB1U7LjoURssMdp7WCrpWiCVOC+ww/kso9Jsqjv +65vwhbNbUJKnEMUM9mbNOaMINL+VKmmLuvnkSw+qWWQu25tKi3TDBXRHrmaumdf t6RI1KEbVmt4QUSEdx6bAXCZ3tfvqUhDPInXGLH1CEx48pgOkKkGtZtmFxJJGXTC ld1tZtMKXj1bnuqOjo1hJMaoZ32bZeERXV2YT2JQ0zDAIAaddQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP6lAhjem79/MfwPd061siEUinOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjkwZDA5M2MtYTc0NC0z YzlmLWI3MjEtOWI2MmVkYmNhZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGseGpGFcy1/Fo6oFppnfNjESHF8fM7R2/GeLUMrO0Y8cgHn/3NiINYk 1aVK9oFtM2LM8H+SOcjEHl56itaOa7OqpNWnnaOl1VaX3FAiWiDCCede3LOWo5X2 9YsB15Asg8cYyCEA80sSvGQFGyRKvsiOyf/iLIFtaQEJ4TGWggxXsz8dByQbjgWi RFgJ9CsC0ts2dALAorAFY+F1+UwSjrXbG9pWBGY2KYslpV2eKnuaQ/jLkx95FlsT 4vXJvorGwUaAUHmUGTmRlanXu5oS/uSCF9JmSz+TbohsSQtoSE8/8bGly4HyWynt MZlbCNQVroTyBCqjxmhOn1x5QOVHPNc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:24:42 2025 by rpki-client