$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d2ca5afb-aee7-34f9-bbb4-8cfcde5ff1a8.roa File: d2ca5afb-aee7-34f9-bbb4-8cfcde5ff1a8.roa (raw, json) Hash identifier: KWHpfYIqst4V10TLmAF+Eys8Lmzq+HZDIQouV8mx7Z8= Subject key identifier: 51:DD:24:CA:0D:AE:48:39:A2:6C:4E:7B:E9:95:41:A3:CF:55:59:00 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BBF2DE74D0CD0A0CE35E67E80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d2ca5afb-aee7-34f9-bbb4-8cfcde5ff1a8.roa Signing time: Tue 04 Nov 2025 09:59:35 +0000 ROA not before: Tue 04 Nov 2025 09:59:35 +0000 ROA not after: Mon 02 Feb 2026 09:59:35 +0000 asID: 53755 IP address blocks: 209.101.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:2d:e7:4d:0c:d0:a0:ce:35:e6:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 4 09:59:35 2025 GMT Not After : Feb 2 09:59:35 2026 GMT Subject: CN=151d4b31-b7b5-4631-b21c-c1b19b829280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:c6:ea:25:e0:f9:ea:56:d2:13:bb:d2:7d: 24:97:6d:b4:e4:a1:1f:00:12:61:cf:e5:99:17:16: 9a:44:4c:e8:dd:38:2f:3b:ad:b8:bd:95:6a:1d:5c: b4:9c:bd:bc:be:f6:08:16:3d:90:72:75:b7:a1:f3: 0c:f6:31:7a:b9:8f:f7:0c:c6:b6:7a:6c:95:ca:67: 88:6f:0e:0c:bf:aa:57:78:07:d5:72:54:a5:b0:71: fa:96:cd:92:86:e9:fb:ff:17:33:c1:64:dd:c4:29: d0:9c:7c:d5:e2:52:0f:66:b0:66:b6:02:73:3f:20: f4:6c:b3:af:6c:77:b5:87:34:bb:5b:fd:c7:06:7c: 99:86:13:86:e4:e0:e9:3c:5b:ed:a8:05:c8:8b:4a: 05:a2:4f:63:6c:21:bd:09:51:64:da:1a:8c:c9:bb: ed:04:15:75:41:ae:3e:c0:97:28:b4:8e:3f:e3:81: 67:71:28:88:f2:4c:01:7f:55:ec:db:b4:85:d0:61: bd:c8:43:fa:39:ba:44:d6:f6:21:ba:cc:d9:95:ec: 7f:38:c6:f9:7c:f3:6e:43:20:8c:fc:b9:76:bc:ad: f9:83:cf:64:de:83:b3:68:05:8a:1a:78:80:79:2c: 0f:d5:b2:be:91:e6:42:f6:0b:69:07:36:8c:2b:77: 37:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DD:24:CA:0D:AE:48:39:A2:6C:4E:7B:E9:95:41:A3:CF:55:59:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d2ca5afb-aee7-34f9-bbb4-8cfcde5ff1a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7e:27:1e:14:22:b9:d1:d1:ec:a0:92:e3:4d:f0:f8:52:4e: a4:cc:61:cc:67:c8:a8:b2:43:53:0b:57:70:43:fe:65:d9:30: f9:10:02:aa:6a:8b:bb:82:40:26:7c:38:d3:09:44:b1:02:a1: 30:cb:41:ce:e5:50:5c:90:68:9f:62:a8:10:af:ad:a2:0d:59: 77:3f:6f:28:27:cb:7f:08:aa:5d:3d:db:03:cc:8c:5f:9f:75: 28:36:a9:23:40:6e:f3:ea:4e:50:b6:62:5c:57:79:eb:58:09: 3f:ae:ae:d1:ec:2d:73:a0:ea:06:7e:8e:79:44:1f:5f:ad:39: 75:48:85:67:bc:3a:ab:78:f5:4a:42:0f:3e:b6:28:2a:38:e6: b2:71:a5:85:7f:2b:dd:be:80:e9:b1:82:96:e3:84:f9:d0:64: 98:ea:78:0a:55:e8:da:4d:bb:a3:4d:e1:c3:a1:20:90:21:7f: 32:99:6c:4d:5a:93:2a:71:f6:ab:83:0f:41:36:5c:cc:f9:7b: 83:6a:c2:e6:2a:71:55:95:92:e9:87:3c:fc:1f:64:11:7a:66: 97:80:2f:ed:5c:10:63:9b:39:cd:57:11:ac:a5:cd:7d:40:af: 83:47:ff:91:09:d5:35:48:ad:af:3f:81:f6:bf:4c:36:df:58: 02:33:27:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/LedNDNCgzjXmfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEwNDA5NTkzNVoXDTI2MDIwMjA5NTkzNVowLzEtMCsGA1UEAxMk MTUxZDRiMzEtYjdiNS00NjMxLWIyMWMtYzFiMTliODI5MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulPG6iXg+epW0hO70n0kl2205KEfABJhz+WZ FxaaREzo3TgvO624vZVqHVy0nL28vvYIFj2QcnW3ofMM9jF6uY/3DMa2emyVymeI bw4Mv6pXeAfVclSlsHH6ls2Shun7/xczwWTdxCnQnHzV4lIPZrBmtgJzPyD0bLOv bHe1hzS7W/3HBnyZhhOG5ODpPFvtqAXIi0oFok9jbCG9CVFk2hqMybvtBBV1Qa4+ wJcotI4/44FncSiI8kwBf1Xs27SF0GG9yEP6ObpE1vYhuszZlex/OMb5fPNuQyCM /Ll2vK35g89k3oOzaAWKGniAeSwP1bK+keZC9gtpBzaMK3c3aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHdJMoNrkg5omxOe+mVQaPPVVkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDJjYTVhZmItYWVlNy0z NGY5LWJiYjQtOGNmY2RlNWZmMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR+Jx4UIrnR0eygkuNN8PhSTqTMYcxnyKiyQ1MLV3BD/mXZMPkQAqpq i7uCQCZ8ONMJRLECoTDLQc7lUFyQaJ9iqBCvraINWXc/bygny38Iql092wPMjF+f dSg2qSNAbvPqTlC2YlxXeetYCT+urtHsLXOg6gZ+jnlEH1+tOXVIhWe8Oqt49UpC Dz62KCo45rJxpYV/K92+gOmxgpbjhPnQZJjqeApV6NpNu6NN4cOhIJAhfzKZbE1a kypx9quDD0E2XMz5e4NqwuYqcVWVkumHPPwfZBF6ZpeAL+1cEGObOc1XEaylzX1A r4NH/5EJ1TVIra8/gfa/TDbfWAIzJ5Q= -----END CERTIFICATE-----Generated at Wed Nov 5 15:30:26 2025 by rpki-client