$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99c1e46d-ccae-343b-a00b-992c2e80d9a0.roa File: 99c1e46d-ccae-343b-a00b-992c2e80d9a0.roa (raw, json) Hash identifier: Z1X391bIQonOjOvsLhnvjJlNWgwBYiCwbNexRYFwSPw= Subject key identifier: A9:B6:8C:CB:08:DD:BE:12:5F:C3:32:B5:03:BE:F5:6E:CF:81:F1:E0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA4E94B5CC2C1B5325A0FE680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99c1e46d-ccae-343b-a00b-992c2e80d9a0.roa Signing time: Sun 26 Oct 2025 00:10:20 +0000 ROA not before: Sun 26 Oct 2025 00:10:20 +0000 ROA not after: Sat 24 Jan 2026 01:10:20 +0000 asID: 834 IP address blocks: 209.101.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a4:e9:4b:5c:c2:c1:b5:32:5a:0f:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 26 00:10:20 2025 GMT Not After : Jan 24 01:10:20 2026 GMT Subject: CN=8dde6370-6dd9-4f0f-91e2-d2216157645a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:14:41:77:d7:4d:e6:8a:55:46:79:ab:c8:f5: 85:c8:6a:80:bd:d4:0a:fe:5c:3b:c6:8a:c8:9d:b1: 00:d6:19:42:61:d7:29:74:5a:5d:06:c9:52:61:79: f5:74:8d:c5:cd:c6:5b:91:18:b1:bf:e1:c0:cf:cd: ac:f1:0a:bc:07:b3:d0:a2:7c:de:b8:a2:c4:3b:8c: 03:d8:c5:2d:0f:1e:12:c1:ce:36:5c:91:0e:f6:84: 92:f0:b8:06:7d:b8:fa:34:d7:3c:bf:03:85:3d:63: 61:32:e1:9f:5e:65:27:75:66:54:bc:cc:cb:ef:12: 2d:d3:7c:78:d6:c7:84:87:f9:4e:a9:3c:9a:fc:e5: b8:af:93:02:29:ee:96:ac:5a:b6:7e:47:1d:44:9a: 22:35:8c:93:a4:ee:96:d6:09:58:e7:e4:b9:2f:7e: ed:27:94:65:30:ed:56:a0:ea:7e:4e:2c:30:88:95: b8:58:09:7b:bd:80:f5:fb:f9:68:5d:78:28:76:e5: 9c:69:dd:6a:8e:e2:fd:9b:70:28:42:f3:17:7c:22: 8e:fe:dd:45:70:d3:0e:89:63:ae:b6:21:c8:32:2a: 82:cd:71:0a:36:b4:6a:6f:ca:44:02:b1:de:84:61: 0e:09:b1:f0:7d:72:f3:04:e2:57:4f:08:62:58:b5: d1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B6:8C:CB:08:DD:BE:12:5F:C3:32:B5:03:BE:F5:6E:CF:81:F1:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99c1e46d-ccae-343b-a00b-992c2e80d9a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:4c:43:68:94:1c:4d:20:62:29:3a:f5:9d:9b:5a:af:dd:58: f5:fa:b1:23:f8:47:95:6f:22:3b:e5:ab:fe:1f:db:98:cd:3b: 93:91:dd:a1:41:47:ef:56:1f:6a:9e:27:70:ef:17:d6:ec:dd: 63:c2:d7:2e:dd:36:b6:d5:9e:f7:ef:b7:04:bb:c9:f5:9d:2b: 1e:90:3d:28:93:bf:a9:3a:71:d7:0f:74:d9:9d:ef:51:e8:51: 0b:98:0a:e2:60:ca:2f:cf:dd:d2:04:9e:d8:0e:cd:be:04:a7: 53:14:98:79:b3:02:68:0b:0f:8c:d8:67:7a:89:21:76:23:d4: 6c:4d:62:49:06:ce:a6:ad:43:b0:a9:c1:11:4e:5b:2a:22:72: 91:10:59:72:4f:03:02:a3:3e:9b:ed:50:11:d7:4f:e3:ad:60: 72:d0:ea:18:5c:16:98:fc:d4:75:b5:f3:2a:70:2f:30:6d:b3: 5b:5e:5d:74:e3:9c:54:7c:c9:66:aa:19:6f:fb:bc:59:23:fb: 94:b1:17:88:d0:eb:c3:4d:18:b8:0f:4d:12:5b:3f:15:fa:05: c8:d7:22:ca:36:00:36:1d:71:a5:af:d8:b7:f6:da:fe:9d:68: 03:ec:5e:ff:78:b9:89:e4:65:25:14:c3:05:20:af:15:6f:0a: 3f:dd:c6:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuk6UtcwsG1MloP5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNjAwMTAyMFoXDTI2MDEyNDAxMTAyMFowLzEtMCsGA1UEAxMk OGRkZTYzNzAtNmRkOS00ZjBmLTkxZTItZDIyMTYxNTc2NDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxRBd9dN5opVRnmryPWFyGqAvdQK/lw7xorI nbEA1hlCYdcpdFpdBslSYXn1dI3FzcZbkRixv+HAz82s8Qq8B7PQonzeuKLEO4wD 2MUtDx4Swc42XJEO9oSS8LgGfbj6NNc8vwOFPWNhMuGfXmUndWZUvMzL7xIt03x4 1seEh/lOqTya/OW4r5MCKe6WrFq2fkcdRJoiNYyTpO6W1glY5+S5L37tJ5RlMO1W oOp+TiwwiJW4WAl7vYD1+/loXXgoduWcad1qjuL9m3AoQvMXfCKO/t1FcNMOiWOu tiHIMiqCzXEKNrRqb8pEArHehGEOCbHwfXLzBOJXTwhiWLXRbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKm2jMsI3b4SX8MytQO+9W7PgfHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTljMWU0NmQtY2NhZS0z NDNiLWEwMGItOTkyYzJlODBkOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhMQ2iUHE0gYik69Z2bWq/dWPX6sSP4R5VvIjvlq/4f25jNO5OR3aFB R+9WH2qeJ3DvF9bs3WPC1y7dNrbVnvfvtwS7yfWdKx6QPSiTv6k6cdcPdNmd71Ho UQuYCuJgyi/P3dIEntgOzb4Ep1MUmHmzAmgLD4zYZ3qJIXYj1GxNYkkGzqatQ7Cp wRFOWyoicpEQWXJPAwKjPpvtUBHXT+OtYHLQ6hhcFpj81HW18ypwLzBts1teXXTj nFR8yWaqGW/7vFkj+5SxF4jQ68NNGLgPTRJbPxX6BcjXIso2ADYdcaWv2Lf22v6d aAPsXv94uYnkZSUUwwUgrxVvCj/dxuk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:12:00 2025 by rpki-client