$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4bb8d8c-5bed-3bf5-902b-7c2884ada497.roa File: d4bb8d8c-5bed-3bf5-902b-7c2884ada497.roa (raw, json) Hash identifier: d1vcPNlVmd97zomRz7vws86pcu9f+wZUgS47Inu+1Fc= Subject key identifier: 7D:BB:63:7A:86:CB:12:A4:71:78:AE:E8:17:D2:D7:01:F3:D0:5E:7A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBCBF75E3A5AA6955442180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4bb8d8c-5bed-3bf5-902b-7c2884ada497.roa Signing time: Mon 08 Sep 2025 07:18:04 +0000 ROA not before: Mon 08 Sep 2025 07:18:04 +0000 ROA not after: Sun 07 Dec 2025 08:18:04 +0000 asID: 401783 IP address blocks: 209.101.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:bf:75:e3:a5:aa:69:55:44:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:18:04 2025 GMT Not After : Dec 7 08:18:04 2025 GMT Subject: CN=a4b9a463-297d-4ca7-9ed0-200b5d7fe77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b1:eb:24:63:a6:9f:03:53:e9:3e:ed:d6:a4: 30:86:b0:d4:7f:6b:a0:52:69:4a:64:74:9d:67:47: b3:8e:65:2e:f1:2e:35:8b:d9:77:7b:1a:3e:67:9a: f6:f4:20:a4:ac:5b:9d:e6:87:62:e6:83:6a:e5:81: 53:90:5d:06:77:a8:8e:cd:05:00:39:44:ef:76:f9: 45:a6:5d:b6:f6:e6:6a:33:ee:b3:f0:c5:21:bb:f2: 63:57:70:e5:5c:03:e2:08:4e:f1:df:7e:f1:76:ee: cc:fd:54:e1:ca:10:5c:18:da:6e:79:59:33:f8:f9: 37:2c:d4:32:a6:a2:62:2c:fc:eb:d9:ae:b3:27:f6: 6c:bb:3c:7e:9f:5b:2d:a0:49:5d:d3:73:50:46:3f: be:03:d2:9c:02:97:ad:20:9c:9f:3a:66:c8:eb:e4: 44:fe:89:ae:09:bb:73:1c:ce:0d:3a:47:f0:67:46: 4c:14:bd:e1:83:d3:27:12:71:cc:f0:c7:ca:51:79: 0e:2f:0c:49:30:d5:d3:0f:4e:b6:fe:b2:72:2f:ec: 69:6b:54:f4:56:63:7c:92:59:df:b1:69:1b:1b:33: 83:7d:40:87:8d:ed:55:90:97:25:2e:1f:c6:e4:57: dc:d9:51:08:3a:29:ed:d5:99:52:53:92:3f:8a:51: 0c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BB:63:7A:86:CB:12:A4:71:78:AE:E8:17:D2:D7:01:F3:D0:5E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4bb8d8c-5bed-3bf5-902b-7c2884ada497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d0:ee:a0:88:48:0e:b5:3b:49:5f:d1:be:92:2b:d5:21:64: 5f:71:81:c6:13:f7:5a:e9:80:19:33:40:6c:e7:29:33:94:ba: 42:5f:b8:77:e5:47:29:ca:6c:b6:e8:d9:af:a1:07:50:ae:6f: 2c:cc:af:24:55:e6:33:c4:de:a9:d9:41:36:04:89:c1:86:10: ce:63:b2:36:b7:9b:eb:e5:d8:9b:22:8e:6c:44:6d:31:6a:66: 0a:d6:72:76:73:04:96:0a:11:17:69:bf:ca:d0:87:35:1c:0d: eb:6f:81:0a:3d:07:0b:1a:af:e4:2f:3d:e4:77:fd:92:4f:16: 86:22:85:30:5a:df:dc:65:7b:d1:20:dd:8f:f4:db:f6:a8:c9: c8:eb:ca:eb:55:ab:c0:28:03:ce:e9:08:cc:f1:a8:97:25:a8: 5a:00:37:05:02:bf:86:a5:e2:a9:e4:3c:79:07:a4:b5:c1:92: fb:ab:30:40:e8:da:67:ae:41:ba:c9:ac:1e:91:59:cc:db:56: 40:6d:0b:0f:a2:6a:c6:8a:7a:d0:95:fc:00:ad:c7:86:b4:c3: 7d:1b:e7:1a:d7:ad:0a:a3:53:84:72:85:e7:81:40:40:12:0b: e5:a4:bf:7e:32:37:ee:6b:f0:19:83:41:1c:93:9c:af:d8:96: 97:33:e9:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvL9146WqaVVEIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTgwNFoXDTI1MTIwNzA4MTgwNFowLzEtMCsGA1UEAxMk YTRiOWE0NjMtMjk3ZC00Y2E3LTllZDAtMjAwYjVkN2ZlNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrHrJGOmnwNT6T7t1qQwhrDUf2ugUmlKZHSd Z0ezjmUu8S41i9l3exo+Z5r29CCkrFud5odi5oNq5YFTkF0Gd6iOzQUAOUTvdvlF pl229uZqM+6z8MUhu/JjV3DlXAPiCE7x337xdu7M/VThyhBcGNpueVkz+Pk3LNQy pqJiLPzr2a6zJ/Zsuzx+n1stoEld03NQRj++A9KcApetIJyfOmbI6+RE/omuCbtz HM4NOkfwZ0ZMFL3hg9MnEnHM8MfKUXkOLwxJMNXTD062/rJyL+xpa1T0VmN8klnf sWkbGzODfUCHje1VkJclLh/G5Ffc2VEIOint1ZlSU5I/ilEMCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH27Y3qGyxKkcXiu6BfS1wHz0F56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDRiYjhkOGMtNWJlZC0z YmY1LTkwMmItN2MyODg0YWRhNDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDQ7qCISA61O0lf0b6SK9UhZF9xgcYT91rpgBkzQGznKTOUukJfuHfl RynKbLbo2a+hB1CubyzMryRV5jPE3qnZQTYEicGGEM5jsja3m+vl2JsijmxEbTFq ZgrWcnZzBJYKERdpv8rQhzUcDetvgQo9Bwsar+QvPeR3/ZJPFoYihTBa39xle9Eg 3Y/02/aoycjryutVq8AoA87pCMzxqJclqFoANwUCv4al4qnkPHkHpLXBkvurMEDo 2meuQbrJrB6RWczbVkBtCw+iasaKetCV/ACtx4a0w30b5xrXrQqjU4RyheeBQEAS C+Wkv34yN+5r8BmDQRyTnK/Ylpcz6cE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:09 2025 by rpki-client