$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/94273c26-a6ef-3563-a210-6468cd02376f.roa File: 94273c26-a6ef-3563-a210-6468cd02376f.roa (raw, json) Hash identifier: l/dNfmmymDoQb0NLrrSSr9VQYZry9//6SHlJMM7se/I= Subject key identifier: DB:18:BA:38:D3:60:E4:5F:56:0D:A0:CC:F4:7B:CC:2C:42:4E:F0:43 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC6477D22CB59AA22A5A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/94273c26-a6ef-3563-a210-6468cd02376f.roa Signing time: Mon 08 Sep 2025 07:17:21 +0000 ROA not before: Mon 08 Sep 2025 07:17:21 +0000 ROA not after: Sun 07 Dec 2025 08:17:21 +0000 asID: 401783 IP address blocks: 209.101.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:64:77:d2:2c:b5:9a:a2:2a:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:21 2025 GMT Not After : Dec 7 08:17:21 2025 GMT Subject: CN=cde7bd2b-33cb-44a6-b146-b3b764881409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:a7:e8:76:2c:b6:83:ad:59:34:2e:4c:ac: 2d:0e:19:dd:d6:b4:dc:d2:0d:34:4d:cb:a2:8b:66: c0:2a:52:fa:f7:d5:97:f4:96:3b:db:81:33:f4:f9: cd:13:80:f4:73:3f:44:51:57:0e:72:cf:78:ff:73: 62:af:cd:73:dc:81:9b:1b:0a:21:78:77:81:7a:53: cd:15:54:51:10:14:3f:02:69:03:1f:14:19:a1:59: 3f:66:13:50:a3:42:b5:73:d9:cf:be:52:7c:42:f7: dd:86:38:33:37:6f:34:98:5f:1d:d9:98:a0:d2:8b: 4d:d4:cf:95:c5:c9:6d:0d:71:0f:2f:79:83:38:ab: fb:73:ff:64:70:9f:b5:53:48:08:93:ba:c2:62:4a: 21:34:0c:ee:d5:e7:db:75:68:04:eb:0a:ce:29:ba: e0:04:a4:48:72:88:65:35:f2:f1:2d:f5:e6:2c:fe: 42:85:64:7c:14:ac:88:1b:19:37:02:09:9c:11:4b: 2c:52:02:eb:ba:98:d6:ef:e1:da:7d:c3:df:75:01: 8d:8f:06:66:ae:36:2c:c6:5f:48:f5:9e:56:df:fa: ea:ea:f7:fd:41:e2:31:21:39:3b:e0:7f:1c:ae:d1: d9:64:b1:32:2c:b6:05:56:c2:8a:10:bb:f2:47:53: 5d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:18:BA:38:D3:60:E4:5F:56:0D:A0:CC:F4:7B:CC:2C:42:4E:F0:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/94273c26-a6ef-3563-a210-6468cd02376f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c3:a2:a4:96:f8:ae:56:49:40:45:6d:a6:cd:4b:5a:3e:bc: ba:84:52:fc:ca:ce:c9:91:0f:a3:7a:34:93:a5:4d:fd:8b:8d: aa:3d:02:ca:5e:c2:ab:2e:e2:06:ee:9a:b8:f8:e2:be:0e:d1: fc:8b:4f:82:d0:b0:5e:11:ff:f3:7e:5b:0e:16:33:b2:bf:38: b4:32:93:1b:b2:52:68:10:a0:5a:35:29:04:e6:97:09:a1:80: f3:47:17:24:65:66:e2:c0:84:08:f3:7a:c4:78:75:62:7a:8f: cf:80:e1:3a:29:bb:38:22:cc:6e:89:7f:bc:45:35:43:d5:62: 09:c8:65:5d:73:6f:6a:11:83:0d:36:48:05:98:80:23:8a:a0: ae:d1:f7:ae:19:26:5d:44:5a:56:b7:a6:12:24:b2:9a:35:4f: 5e:6d:3d:8a:c9:09:82:7e:dd:09:5f:5f:8d:4a:8d:29:8f:0b: 09:cf:cf:8b:b3:04:3b:d1:5a:15:35:3b:ef:2a:66:11:76:73: ab:af:cf:29:a9:b7:59:50:7d:17:70:91:f0:2c:26:72:37:06: ee:04:b7:8e:44:d5:4c:89:77:25:33:a3:f1:11:55:14:a1:92: 7d:54:74:3f:f9:e8:3d:49:12:98:c1:fc:8e:39:54:d7:85:ad: dc:66:df:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvGR30iy1mqIqWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTcyMVoXDTI1MTIwNzA4MTcyMVowLzEtMCsGA1UEAxMk Y2RlN2JkMmItMzNjYi00NGE2LWIxNDYtYjNiNzY0ODgxNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfOn6HYstoOtWTQuTKwtDhnd1rTc0g00Tcui i2bAKlL699WX9JY724Ez9PnNE4D0cz9EUVcOcs94/3Nir81z3IGbGwoheHeBelPN FVRREBQ/AmkDHxQZoVk/ZhNQo0K1c9nPvlJ8QvfdhjgzN280mF8d2Zig0otN1M+V xcltDXEPL3mDOKv7c/9kcJ+1U0gIk7rCYkohNAzu1efbdWgE6wrOKbrgBKRIcohl NfLxLfXmLP5ChWR8FKyIGxk3AgmcEUssUgLrupjW7+HafcPfdQGNjwZmrjYsxl9I 9Z5W3/rq6vf9QeIxITk74H8crtHZZLEyLLYFVsKKELvyR1Nd4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsYujjTYORfVg2gzPR7zCxCTvBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTQyNzNjMjYtYTZlZi0z NTYzLWEyMTAtNjQ2OGNkMDIzNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfDoqSW+K5WSUBFbabNS1o+vLqEUvzKzsmRD6N6NJOlTf2Ljao9Aspe wqsu4gbumrj44r4O0fyLT4LQsF4R//N+Ww4WM7K/OLQykxuyUmgQoFo1KQTmlwmh gPNHFyRlZuLAhAjzesR4dWJ6j8+A4TopuzgizG6Jf7xFNUPVYgnIZV1zb2oRgw02 SAWYgCOKoK7R964ZJl1EWla3phIkspo1T15tPYrJCYJ+3QlfX41KjSmPCwnPz4uz BDvRWhU1O+8qZhF2c6uvzympt1lQfRdwkfAsJnI3Bu4Et45E1UyJdyUzo/ERVRSh kn1UdD/56D1JEpjB/I45VNeFrdxm39s= -----END CERTIFICATE-----Generated at Tue Nov 4 21:45:56 2025 by rpki-client