$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b65b89f1-96b1-3ddd-8772-63484052b2b9.roa File: b65b89f1-96b1-3ddd-8772-63484052b2b9.roa (raw, json) Hash identifier: IaOVPg+kzxhZJviHa8MNnN3MgISx4WxnwOg8VYVpZyI= Subject key identifier: C6:7C:82:94:DE:22:72:9E:64:5B:E4:22:28:B7:0F:6B:8A:56:91:71 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4CB82721EBBD8FE770622C40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b65b89f1-96b1-3ddd-8772-63484052b2b9.roa Signing time: Wed 24 Sep 2025 10:00:11 +0000 ROA not before: Wed 24 Sep 2025 10:00:11 +0000 ROA not after: Tue 23 Dec 2025 11:00:11 +0000 asID: 400031 IP address blocks: 209.101.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4c:b8:27:21:eb:bd:8f:e7:70:62:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 24 10:00:11 2025 GMT Not After : Dec 23 11:00:11 2025 GMT Subject: CN=4cf9326c-dcfe-441f-be02-77799664ab12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a9:97:ad:d7:cf:42:e1:4a:ff:10:73:73:87: cb:55:b4:ab:6c:91:76:78:b0:06:b0:aa:9c:ba:23: 10:90:92:db:6e:83:85:05:d7:95:af:c3:59:fd:be: f5:e1:28:f7:08:f6:ca:8d:8b:37:d4:3b:ae:de:c2: 6f:80:ff:6c:42:79:17:1b:02:88:cf:ee:00:2e:3d: 65:2f:f5:85:5c:a0:a3:3a:7a:82:1b:d7:4c:a3:88: a8:60:ee:2a:8b:ba:34:e4:3e:7b:90:92:8c:fd:44: 32:a2:0c:90:71:14:4b:b1:98:eb:2c:8a:25:78:c0: 2e:53:c4:f4:a1:e7:aa:91:e3:a0:da:89:59:5e:84: 82:3b:40:1c:b8:21:01:dd:49:6f:3b:43:6a:70:bb: 74:6d:5f:40:16:7f:27:10:74:7a:00:0a:b5:6e:43: f9:3b:8d:67:de:65:ff:f4:28:ab:6b:aa:3e:d4:2f: cd:62:05:ce:0f:2d:cb:a9:ee:7d:a1:3f:14:c1:fe: 61:d2:55:a6:8d:23:c4:ef:70:75:2c:2a:88:e0:71: 3e:86:fd:80:de:93:9c:68:d7:e6:6c:f9:df:45:61: 9b:f9:9f:7b:a6:96:19:05:8d:c9:55:ed:05:b7:18: 19:7c:3a:ba:ac:68:cb:3b:94:9b:61:61:95:79:40: 79:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7C:82:94:DE:22:72:9E:64:5B:E4:22:28:B7:0F:6B:8A:56:91:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b65b89f1-96b1-3ddd-8772-63484052b2b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:96:98:81:c2:6c:1b:2a:1b:31:6f:96:60:ae:af:57:f2:c8: 64:54:f3:05:57:a7:6f:1d:ec:22:04:55:49:71:f6:45:d9:55: 4a:42:e5:a5:44:a4:68:f8:bf:2e:c9:8e:bd:73:38:5c:70:80: 4c:7d:3b:94:5c:56:14:0c:d6:c7:b6:8e:b0:64:df:a4:a4:37: 69:35:86:6f:80:28:c0:44:14:fc:67:73:fc:e0:63:69:f4:eb: 44:66:43:48:40:57:eb:d5:b5:04:72:8c:51:88:f2:f9:df:a8: ae:53:18:87:a3:a3:1a:1b:32:ea:77:ef:8a:d7:d6:7a:ae:f2: ff:c0:c6:c1:54:52:b7:f0:ae:c2:d4:27:22:fc:4e:44:33:ce: b8:73:70:23:d3:98:6f:38:08:c0:dd:fc:71:13:1a:f5:db:82: 61:b4:b5:c0:65:08:0a:86:c9:d8:c2:88:58:d5:43:3f:8f:ff: 10:f0:a0:11:c8:40:09:34:b8:59:a1:45:e6:00:71:63:0c:3b: b2:09:be:20:a1:a7:93:95:e9:28:33:0c:58:41:b7:94:2b:9f: c9:0b:88:15:f1:44:3c:d7:79:16:61:e2:08:05:cd:05:79:97: 82:87:9c:2d:1c:92:19:01:71:42:d8:21:7e:8d:b1:bc:e2:f9: 29:05:dc:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtMuCch672P53BiLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNDEwMDAxMVoXDTI1MTIyMzExMDAxMVowLzEtMCsGA1UEAxMk NGNmOTMyNmMtZGNmZS00NDFmLWJlMDItNzc3OTk2NjRhYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqmXrdfPQuFK/xBzc4fLVbSrbJF2eLAGsKqc uiMQkJLbboOFBdeVr8NZ/b714Sj3CPbKjYs31Duu3sJvgP9sQnkXGwKIz+4ALj1l L/WFXKCjOnqCG9dMo4ioYO4qi7o05D57kJKM/UQyogyQcRRLsZjrLIoleMAuU8T0 oeeqkeOg2olZXoSCO0AcuCEB3UlvO0NqcLt0bV9AFn8nEHR6AAq1bkP5O41n3mX/ 9Cira6o+1C/NYgXODy3Lqe59oT8Uwf5h0lWmjSPE73B1LCqI4HE+hv2A3pOcaNfm bPnfRWGb+Z97ppYZBY3JVe0FtxgZfDq6rGjLO5SbYWGVeUB5HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZ8gpTeInKeZFvkIii3D2uKVpFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjY1Yjg5ZjEtOTZiMS0z ZGRkLTg3NzItNjM0ODQwNTJiMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGWmIHCbBsqGzFvlmCur1fyyGRU8wVXp28d7CIEVUlx9kXZVUpC5aVE pGj4vy7Jjr1zOFxwgEx9O5RcVhQM1se2jrBk36SkN2k1hm+AKMBEFPxnc/zgY2n0 60RmQ0hAV+vVtQRyjFGI8vnfqK5TGIejoxobMup374rX1nqu8v/AxsFUUrfwrsLU JyL8TkQzzrhzcCPTmG84CMDd/HETGvXbgmG0tcBlCAqGydjCiFjVQz+P/xDwoBHI QAk0uFmhReYAcWMMO7IJviChp5OV6SgzDFhBt5Qrn8kLiBXxRDzXeRZh4ggFzQV5 l4KHnC0ckhkBcULYIX6Nsbzi+SkF3As= -----END CERTIFICATE-----Generated at Wed Nov 5 05:00:38 2025 by rpki-client