$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d7e759f1-8b30-3497-b8bf-93c1c7224300.roa File: d7e759f1-8b30-3497-b8bf-93c1c7224300.roa (raw, json) Hash identifier: K+XCay+0Qn7Qx9yymZLtnBWPCtKqzgubSYjud8/w7W8= Subject key identifier: B5:03:BF:5D:62:40:6A:D9:5A:8B:8F:9F:75:27:CA:29:38:6D:8C:DE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBBD84FC174F25D5EAF6680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d7e759f1-8b30-3497-b8bf-93c1c7224300.roa Signing time: Mon 08 Sep 2025 07:16:15 +0000 ROA not before: Mon 08 Sep 2025 07:16:15 +0000 ROA not after: Sun 07 Dec 2025 08:16:15 +0000 asID: 401783 IP address blocks: 209.101.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bb:d8:4f:c1:74:f2:5d:5e:af:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:16:15 2025 GMT Not After : Dec 7 08:16:15 2025 GMT Subject: CN=95efa854-6320-47d6-b524-48f6e0b17e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:04:05:db:03:1f:66:dc:7e:bc:2c:3a:63: 0f:fa:4a:45:42:ec:4a:95:e5:11:33:38:0e:c4:54: dc:10:b2:a5:77:ec:f6:23:f0:94:75:b5:97:08:73: 89:0d:52:5d:b1:6c:02:34:78:15:33:60:fa:be:bd: 5c:a0:79:97:02:d3:4a:fc:e3:8d:ad:fb:41:ce:2c: b1:61:fa:49:37:3e:be:9c:14:24:e3:4e:2f:d6:2c: e6:c7:51:24:e6:98:d8:d8:61:b9:ac:f8:59:e2:cc: 50:3c:7d:7e:5c:df:dc:41:02:2a:ce:50:c8:5c:19: d7:a7:20:09:f5:27:df:28:7d:1d:f8:f7:bc:97:29: 63:39:4e:4a:c9:39:6b:05:b3:c9:0d:76:30:a2:00: a2:c3:39:f2:18:d1:64:ff:1a:63:0a:1e:43:c9:40: e6:37:ad:f2:53:58:c9:24:76:92:9b:74:cf:05:73: 7d:1f:50:83:c0:c5:dd:7c:89:ea:bf:31:1e:99:98: 06:7b:2b:e8:56:dc:aa:ad:2c:a9:0e:48:4f:61:4c: c2:22:08:c4:2e:f0:63:0e:64:83:86:c3:30:88:28: 97:d9:8a:b8:13:72:53:c9:2b:3c:02:f5:bb:dc:17: 79:0c:a9:6a:d2:f9:77:79:d8:5e:25:aa:6c:5b:ea: e7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:03:BF:5D:62:40:6A:D9:5A:8B:8F:9F:75:27:CA:29:38:6D:8C:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d7e759f1-8b30-3497-b8bf-93c1c7224300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:98:3a:02:8e:bd:a1:e4:4c:ca:a6:5e:b2:3c:f4:b8:05:e3: 8e:c4:7a:d7:12:ff:f2:d8:bd:93:dc:9d:76:c8:b7:7c:b6:bd: 6d:db:87:72:e7:e3:7c:a4:39:ce:6e:11:4d:f2:05:58:6f:ed: 48:04:2e:01:fa:4a:0f:13:35:0d:88:13:87:fa:5a:44:bc:7a: 28:fc:b0:df:57:b8:28:bd:5a:08:dd:51:d7:22:38:0f:08:5d: df:a2:f5:9f:e4:7a:6b:80:1a:76:01:69:a0:c7:00:82:d3:4c: 2a:9a:c6:1b:17:11:1c:d9:28:d7:38:ab:c6:32:01:4b:cf:cb: 4f:d3:62:33:9c:1a:41:15:15:c5:79:91:0f:ce:e3:3a:df:a3: fe:c5:14:9e:a4:6b:17:15:0b:90:93:8c:43:d8:8e:01:96:89: d9:3d:23:63:6e:fa:e0:21:9f:fd:31:b3:36:54:77:0a:0f:b5: 41:35:79:97:3a:f4:72:ee:d1:13:5f:b6:bb:7a:55:a2:3d:c6: 48:f9:85:83:5c:3a:87:eb:f3:09:c9:f8:8c:61:91:25:af:ba: 75:24:f2:3c:9f:1d:4f:24:e1:94:7f:d7:93:0d:02:85:8c:9b: 48:3f:08:19:92:90:8b:1c:95:f9:ad:22:c4:ae:62:56:07:44: 52:39:61:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfu9hPwXTyXV6vZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTYxNVoXDTI1MTIwNzA4MTYxNVowLzEtMCsGA1UEAxMk OTVlZmE4NTQtNjMyMC00N2Q2LWI1MjQtNDhmNmUwYjE3ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmacEBdsDH2bcfrwsOmMP+kpFQuxKleURMzgO xFTcELKld+z2I/CUdbWXCHOJDVJdsWwCNHgVM2D6vr1coHmXAtNK/OONrftBziyx YfpJNz6+nBQk404v1izmx1Ek5pjY2GG5rPhZ4sxQPH1+XN/cQQIqzlDIXBnXpyAJ 9SffKH0d+Pe8lyljOU5KyTlrBbPJDXYwogCiwznyGNFk/xpjCh5DyUDmN63yU1jJ JHaSm3TPBXN9H1CDwMXdfInqvzEemZgGeyvoVtyqrSypDkhPYUzCIgjELvBjDmSD hsMwiCiX2Yq4E3JTySs8AvW73Bd5DKlq0vl3edheJapsW+rn5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUDv11iQGrZWouPn3Unyik4bYzeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDdlNzU5ZjEtOGIzMC0z NDk3LWI4YmYtOTNjMWM3MjI0MzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmYOgKOvaHkTMqmXrI89LgF447EetcS//LYvZPcnXbIt3y2vW3bh3Ln 43ykOc5uEU3yBVhv7UgELgH6Sg8TNQ2IE4f6WkS8eij8sN9XuCi9WgjdUdciOA8I Xd+i9Z/kemuAGnYBaaDHAILTTCqaxhsXERzZKNc4q8YyAUvPy0/TYjOcGkEVFcV5 kQ/O4zrfo/7FFJ6kaxcVC5CTjEPYjgGWidk9I2Nu+uAhn/0xszZUdwoPtUE1eZc6 9HLu0RNftrt6VaI9xkj5hYNcOofr8wnJ+IxhkSWvunUk8jyfHU8k4ZR/15MNAoWM m0g/CBmSkIsclfmtIsSuYlYHRFI5Ye8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:45:52 2025 by rpki-client