$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd976902-e7cf-34c8-bfe1-573559021609.roa File: cd976902-e7cf-34c8-bfe1-573559021609.roa (raw, json) Hash identifier: vC9JBp2EZwPN7C3fKS3gLFKTV4rwP+qP2ug7O/6hs4E= Subject key identifier: FB:30:A4:29:6C:0B:17:B2:06:77:52:BF:37:DC:EB:82:AB:BD:B8:4E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC0A8AF03A7F58B50D0800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd976902-e7cf-34c8-bfe1-573559021609.roa Signing time: Mon 08 Sep 2025 07:16:38 +0000 ROA not before: Mon 08 Sep 2025 07:16:38 +0000 ROA not after: Sun 07 Dec 2025 08:16:38 +0000 asID: 401783 IP address blocks: 209.101.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:0a:8a:f0:3a:7f:58:b5:0d:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:38 2025 GMT Not After : Dec 7 08:16:38 2025 GMT Subject: CN=19aa1694-c20f-4adb-b963-cbe348488fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:89:31:cb:4f:4d:f7:37:49:84:55:42:a4: cb:07:33:70:45:99:dd:b1:4d:d7:73:9e:38:2e:ce: 3b:f8:6e:bb:c1:ab:a3:f0:81:c2:01:aa:d3:93:39: 28:b3:25:a7:f6:77:82:da:c9:41:3f:2a:d2:64:a8: c5:1b:6d:45:cb:b6:41:1b:da:86:2e:c9:1c:45:22: 46:f3:57:1f:5f:b8:6b:a1:30:3b:1b:7f:4a:4c:66: 93:1f:84:1b:03:7f:28:fa:aa:1b:55:92:d2:78:53: e3:6e:a8:19:15:3a:a4:f9:b7:ae:c1:c9:73:9e:6e: 67:4b:fe:d8:db:eb:76:df:00:78:87:20:dd:d9:53: d3:ec:3e:62:a0:a3:63:00:b2:b2:4f:fa:a7:93:82: 75:25:a5:df:ac:c9:20:9e:c9:d3:35:47:95:cd:7f: b6:78:21:3e:f0:71:21:94:34:d4:89:fc:14:8c:ea: 9f:28:bd:ea:9d:2f:30:4d:96:2c:51:70:09:20:ee: d0:8b:af:de:2d:05:d0:a7:ab:0f:b7:e0:24:44:31: cb:39:12:1b:8a:d3:e8:f8:b2:df:c4:d6:9a:e5:a1: 70:86:59:4a:bf:6b:d8:c5:d1:1b:95:bb:97:1f:fb: df:70:74:42:72:5b:0e:9d:4e:8d:f8:6d:85:6f:bb: 1b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:30:A4:29:6C:0B:17:B2:06:77:52:BF:37:DC:EB:82:AB:BD:B8:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd976902-e7cf-34c8-bfe1-573559021609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:30:f0:c0:8b:01:77:06:27:14:70:70:7b:8b:fe:2e:91:69: b1:47:ff:e7:13:8b:85:8b:cc:27:57:71:ce:89:98:7a:37:a7: eb:64:57:67:77:9b:9e:b6:56:74:08:25:c6:e5:f3:23:dc:d0: c5:de:a9:8c:64:16:0b:6e:18:c7:75:ae:30:13:1f:bf:34:40: a2:79:51:ae:18:a9:7d:f0:63:17:ab:66:7b:8f:87:c6:34:ec: 93:c2:3c:15:25:1c:45:38:75:c8:e1:53:bc:c3:53:07:1a:5f: b0:10:f1:9f:eb:ce:8a:a7:4f:5c:dc:fe:21:f8:9a:e0:22:f4: af:b4:3c:e5:63:24:e8:be:52:d1:d4:5d:96:c8:30:a6:1d:a0: 5a:9a:12:c7:0f:72:a9:a5:44:2c:45:8c:ac:d7:9d:9e:b1:2a: 8f:08:0b:87:4c:97:79:10:be:0e:78:bb:b3:df:b2:d6:32:a4: 27:5a:4d:a9:fd:06:43:98:51:67:33:fd:7d:47:d4:cd:19:aa: c9:f0:54:12:06:44:4d:43:08:f5:f2:ad:f0:fb:a0:7c:bf:89: ba:6f:b9:ba:56:b7:79:ea:8f:d6:29:c7:55:e7:05:21:29:26: 3f:75:b3:2a:80:7a:ee:09:3b:74:78:9b:db:b4:af:0d:04:95: a0:03:d3:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvAqK8Dp/WLUNCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTYzOFoXDTI1MTIwNzA4MTYzOFowLzEtMCsGA1UEAxMk MTlhYTE2OTQtYzIwZi00YWRiLWI5NjMtY2JlMzQ4NDg4ZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nmJMctPTfc3SYRVQqTLBzNwRZndsU3Xc544 Ls47+G67wauj8IHCAarTkzkosyWn9neC2slBPyrSZKjFG21Fy7ZBG9qGLskcRSJG 81cfX7hroTA7G39KTGaTH4QbA38o+qobVZLSeFPjbqgZFTqk+beuwclznm5nS/7Y 2+t23wB4hyDd2VPT7D5ioKNjALKyT/qnk4J1JaXfrMkgnsnTNUeVzX+2eCE+8HEh lDTUifwUjOqfKL3qnS8wTZYsUXAJIO7Qi6/eLQXQp6sPt+AkRDHLORIbitPo+LLf xNaa5aFwhllKv2vYxdEblbuXH/vfcHRCclsOnU6N+G2Fb7sbVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPswpClsCxeyBndSvzfc64KrvbhOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2Q5NzY5MDItZTdjZi0z NGM4LWJmZTEtNTczNTU5MDIxNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIw8MCLAXcGJxRwcHuL/i6RabFH/+cTi4WLzCdXcc6JmHo3p+tkV2d3 m562VnQIJcbl8yPc0MXeqYxkFgtuGMd1rjATH780QKJ5Ua4YqX3wYxerZnuPh8Y0 7JPCPBUlHEU4dcjhU7zDUwcaX7AQ8Z/rzoqnT1zc/iH4muAi9K+0POVjJOi+UtHU XZbIMKYdoFqaEscPcqmlRCxFjKzXnZ6xKo8IC4dMl3kQvg54u7PfstYypCdaTan9 BkOYUWcz/X1H1M0ZqsnwVBIGRE1DCPXyrfD7oHy/ibpvubpWt3nqj9Ypx1XnBSEp Jj91syqAeu4JO3R4m9u0rw0ElaAD04g= -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:07 2025 by rpki-client