$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a7de9b5-f4e9-34dc-932e-3f179396b4f4.roa File: 9a7de9b5-f4e9-34dc-932e-3f179396b4f4.roa (raw, json) Hash identifier: 2wZIwmuJBziWErfw1IJt1R4zu0Whfr1MkN8uWWRpwJ8= Subject key identifier: 2A:BC:27:86:62:B4:E1:67:97:0E:7E:49:60:25:1B:D6:45:D2:83:3E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA841D0DBD589323623B61380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a7de9b5-f4e9-34dc-932e-3f179396b4f4.roa Signing time: Mon 27 Oct 2025 04:56:07 +0000 ROA not before: Mon 27 Oct 2025 04:56:07 +0000 ROA not after: Sun 25 Jan 2026 05:56:07 +0000 asID: 9304 IP address blocks: 209.101.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a8:41:d0:db:d5:89:32:36:23:b6:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 27 04:56:07 2025 GMT Not After : Jan 25 05:56:07 2026 GMT Subject: CN=d3104de9-ac57-4f66-b928-bf52a4c37313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:0e:fb:ac:83:c7:4a:5e:f3:a0:95:60:d0: 3f:b2:a8:cf:16:ff:ba:66:ce:9c:93:2f:08:bb:e6: aa:1c:ff:74:2f:4d:75:b5:3b:ba:21:f2:3f:3d:87: cf:f7:66:3e:34:bd:57:24:0b:01:20:2c:cb:81:46: 09:12:1f:c1:39:8e:c6:76:0a:63:72:06:d9:ab:6e: b6:ad:57:3e:cd:89:05:b6:75:af:71:ce:ff:8e:d9: 1e:23:ee:54:7e:f4:38:95:29:0d:fa:2e:c5:5f:1b: ba:a8:7b:2c:71:c4:71:38:7d:b9:a3:d8:9f:3f:fd: 61:a7:0a:a4:72:3f:38:84:dd:c9:52:02:26:24:a0: 60:d0:c6:5d:23:29:8a:3e:06:e3:30:01:c2:75:33: d8:59:5d:e8:c0:ab:05:0e:48:2b:04:0b:ff:19:fa: 32:f9:38:b4:71:83:41:e5:6d:42:b2:4b:ac:50:99: a7:e8:37:f6:30:5c:47:8f:2c:4f:e4:43:ce:41:48: cb:9a:f5:1a:6a:dc:29:47:fb:35:37:90:35:81:07: d0:c7:6a:33:3c:52:96:40:f2:47:a6:7b:c6:ee:ab: 29:80:6d:c4:eb:74:2e:9a:b8:ea:c5:66:30:ee:74: 40:77:b0:61:d4:05:25:e6:21:3e:46:b6:a7:74:d8: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BC:27:86:62:B4:E1:67:97:0E:7E:49:60:25:1B:D6:45:D2:83:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a7de9b5-f4e9-34dc-932e-3f179396b4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:15:5c:d4:0a:10:43:55:73:4a:6d:13:67:6d:b8:04:ed:11: cf:b8:cf:cb:b5:9e:b9:e1:0c:40:f3:99:b6:e6:62:04:e1:e3: 85:15:d3:2c:7c:8c:53:ef:6e:b0:44:fd:bb:22:9a:08:bb:e6: fc:95:b1:ef:60:1b:b2:0b:d0:9d:e2:60:be:e8:0b:76:cd:33: 54:55:bc:35:0b:4f:e7:97:72:b4:6e:7f:c8:65:3e:75:a4:3d: 85:eb:40:97:40:85:e3:b4:c7:e4:5c:b0:de:f5:24:85:65:40: 5c:43:8e:b1:5a:64:10:4d:c1:52:d7:1a:7d:b2:fd:35:65:9c: b5:21:9b:61:db:3c:30:ab:41:b4:71:7d:c6:da:9a:f7:08:57: a6:a7:39:ee:17:b7:43:7b:46:c7:a0:1d:6b:cb:f8:19:b1:bc: 49:ec:ad:7c:b4:3a:7d:7a:c8:16:03:d0:7d:a4:c1:25:2b:35: 71:e2:8a:26:bc:5c:8e:7d:a6:dd:50:45:d7:54:d7:e5:26:a2: bb:d8:eb:5c:ae:14:af:5f:92:d2:33:6b:a1:cf:19:82:54:0b: d5:6c:9c:f7:12:fb:82:ba:67:af:3a:c6:f7:ea:b2:2e:8c:02: 61:a6:f5:be:9f:5f:7c:4f:8f:73:45:15:e1:ca:05:56:6a:aa: 0f:51:3c:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuoQdDb1YkyNiO2E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNzA0NTYwN1oXDTI2MDEyNTA1NTYwN1owLzEtMCsGA1UEAxMk ZDMxMDRkZTktYWM1Ny00ZjY2LWI5MjgtYmY1MmE0YzM3MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOsO+6yDx0pe86CVYNA/sqjPFv+6Zs6cky8I u+aqHP90L011tTu6IfI/PYfP92Y+NL1XJAsBICzLgUYJEh/BOY7GdgpjcgbZq262 rVc+zYkFtnWvcc7/jtkeI+5UfvQ4lSkN+i7FXxu6qHssccRxOH25o9ifP/1hpwqk cj84hN3JUgImJKBg0MZdIymKPgbjMAHCdTPYWV3owKsFDkgrBAv/Gfoy+Ti0cYNB 5W1CskusUJmn6Df2MFxHjyxP5EPOQUjLmvUaatwpR/s1N5A1gQfQx2ozPFKWQPJH pnvG7qspgG3E63QumrjqxWYw7nRAd7Bh1AUl5iE+RrandNiwnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq8J4ZitOFnlw5+SWAlG9ZF0oM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWE3ZGU5YjUtZjRlOS0z NGRjLTkzMmUtM2YxNzkzOTZiNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsVXNQKEENVc0ptE2dtuATtEc+4z8u1nrnhDEDzmbbmYgTh44UV0yx8 jFPvbrBE/bsimgi75vyVse9gG7IL0J3iYL7oC3bNM1RVvDULT+eXcrRuf8hlPnWk PYXrQJdAheO0x+RcsN71JIVlQFxDjrFaZBBNwVLXGn2y/TVlnLUhm2HbPDCrQbRx fcbamvcIV6anOe4Xt0N7RsegHWvL+BmxvEnsrXy0On16yBYD0H2kwSUrNXHiiia8 XI59pt1QRddU1+UmorvY61yuFK9fktIza6HPGYJUC9VsnPcS+4K6Z686xvfqsi6M AmGm9b6fX3xPj3NFFeHKBVZqqg9RPKw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:47:01 2025 by rpki-client