$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf56833e-14bb-3ea1-ac75-06ebbdf22a6a.roa File: bf56833e-14bb-3ea1-ac75-06ebbdf22a6a.roa (raw, json) Hash identifier: 011W9srRhq/3W/SuMIum3pzEGdTLsCOVXbEJE5YxQn8= Subject key identifier: 2A:63:D2:60:70:72:08:C1:09:19:59:89:17:F2:53:25:93:FA:08:3F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B3F6222F91C7D131301EBFD70 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf56833e-14bb-3ea1-ac75-06ebbdf22a6a.roa Signing time: Fri 19 Sep 2025 15:21:22 +0000 ROA not before: Fri 19 Sep 2025 15:21:22 +0000 ROA not after: Thu 18 Dec 2025 16:21:22 +0000 asID: 5650 IP address blocks: 209.101.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:62:22:f9:1c:7d:13:13:01:eb:fd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 19 15:21:22 2025 GMT Not After : Dec 18 16:21:22 2025 GMT Subject: CN=241bdf5f-0ec6-4a69-8f25-473196b31340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:d7:94:97:8f:f8:fa:fe:39:9d:e6:b3:e3: 20:f1:5c:c9:cf:c4:12:d2:b0:94:35:a3:c7:29:8f: da:3c:2e:f1:f1:5c:e8:7b:59:18:82:32:60:21:58: ff:7f:38:06:d9:73:5f:48:7c:4c:eb:c6:30:d1:1d: 2b:49:b1:f5:58:1b:38:a2:6c:90:d7:1e:13:26:be: d8:42:43:ba:af:46:83:9d:8c:54:2a:30:36:9f:18: 2a:61:3a:5c:02:55:b2:b9:43:09:11:8c:b2:17:03: 13:25:87:7c:d1:b9:0f:d9:1d:6d:70:42:42:e5:f2: 5b:e4:d7:39:0a:1d:b1:46:fd:a3:a8:50:5a:1f:e0: 85:99:a0:ff:e2:b1:8f:06:99:30:99:77:ed:6d:3d: 37:d7:ff:92:f3:e8:63:7e:ef:86:b6:28:e2:6a:c9: 13:ec:96:5d:2e:52:20:11:6d:07:c2:25:ff:51:a9: 32:e7:ad:18:be:3a:69:64:68:ca:a1:2e:5d:ba:a0: 18:ab:db:38:bf:62:d0:ce:9a:76:4b:09:e5:2a:02: 09:b8:f2:a5:2c:98:0d:bd:57:b8:58:51:c5:4a:1c: 9e:d0:2b:b3:8e:79:36:c3:d5:4b:f5:82:83:73:90: 29:b3:32:c2:00:26:b9:d3:68:50:4d:a0:20:48:d9: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:63:D2:60:70:72:08:C1:09:19:59:89:17:F2:53:25:93:FA:08:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf56833e-14bb-3ea1-ac75-06ebbdf22a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d3:92:d3:16:a1:43:14:ad:59:d6:9a:57:15:75:68:a2:7f: 6e:6d:85:fd:ed:c9:58:6f:2b:9e:79:9d:ac:68:c0:5e:98:9a: 63:7f:c7:86:9d:88:37:87:c3:bb:40:73:ee:de:c1:57:e6:38: 4e:6e:3d:80:ef:bf:88:6c:92:81:43:d5:86:27:6b:43:6f:3d: bc:65:4a:10:d3:c4:53:e5:f3:c4:c5:70:cc:8c:55:26:de:97: 2b:34:72:9e:5d:a2:25:6b:6a:0d:9c:3a:75:1f:93:45:05:fa: 8a:41:a4:15:82:84:89:12:b9:bc:58:c1:7a:ae:bf:3a:59:0e: 1c:c6:75:a9:c4:3f:f1:3e:45:9f:6d:28:e9:aa:d3:7d:56:cf: 2b:7a:d0:6a:86:d8:34:35:46:53:66:d7:95:c7:74:7c:20:2f: 07:f4:c1:07:d8:e3:29:e5:8c:a2:df:4d:d8:d4:b8:39:76:f2: f6:39:73:18:db:62:68:ae:86:1b:25:ba:d5:ed:09:5e:bc:f2: 0b:42:2a:fd:d9:e2:14:af:7f:3a:f5:e3:4f:69:b4:30:1a:c5: 5d:7a:dc:e5:58:05:8e:31:44:1c:8a:1b:c5:20:d9:87:cc:d2: 32:19:90:1a:75:a6:56:13:a4:e1:5b:b6:19:07:2c:03:db:f7: 87:ba:b7:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/YiL5HH0TEwHr/XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxOTE1MjEyMloXDTI1MTIxODE2MjEyMlowLzEtMCsGA1UEAxMk MjQxYmRmNWYtMGVjNi00YTY5LThmMjUtNDczMTk2YjMxMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg3XlJeP+Pr+OZ3ms+Mg8VzJz8QS0rCUNaPH KY/aPC7x8Vzoe1kYgjJgIVj/fzgG2XNfSHxM68Yw0R0rSbH1WBs4omyQ1x4TJr7Y QkO6r0aDnYxUKjA2nxgqYTpcAlWyuUMJEYyyFwMTJYd80bkP2R1tcEJC5fJb5Nc5 Ch2xRv2jqFBaH+CFmaD/4rGPBpkwmXftbT031/+S8+hjfu+GtijiaskT7JZdLlIg EW0HwiX/Uaky560YvjppZGjKoS5duqAYq9s4v2LQzpp2SwnlKgIJuPKlLJgNvVe4 WFHFShye0Cuzjnk2w9VL9YKDc5ApszLCACa502hQTaAgSNlY6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpj0mBwcgjBCRlZiRfyUyWT+gg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmY1NjgzM2UtMTRiYi0z ZWExLWFjNzUtMDZlYmJkZjIyYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTTktMWoUMUrVnWmlcVdWiif25thf3tyVhvK555naxowF6YmmN/x4ad iDeHw7tAc+7ewVfmOE5uPYDvv4hskoFD1YYna0NvPbxlShDTxFPl88TFcMyMVSbe lys0cp5doiVrag2cOnUfk0UF+opBpBWChIkSubxYwXquvzpZDhzGdanEP/E+RZ9t KOmq031Wzyt60GqG2DQ1RlNm15XHdHwgLwf0wQfY4ynljKLfTdjUuDl28vY5cxjb YmiuhhslutXtCV688gtCKv3Z4hSvfzr1409ptDAaxV163OVYBY4xRByKG8Ug2YfM 0jIZkBp1plYTpOFbthkHLAPb94e6t60= -----END CERTIFICATE-----Generated at Wed Nov 5 02:15:52 2025 by rpki-client