$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e96e6116-8e8e-3111-9337-2d78b5b4eb9e.roa File: e96e6116-8e8e-3111-9337-2d78b5b4eb9e.roa (raw, json) Hash identifier: C8uE4G6t7J9sdRtgpXoMI4QKRpbG2rF8FBEnmvT+tfs= Subject key identifier: 3A:E9:03:38:AC:DA:81:2E:F2:CF:26:38:B4:1B:C1:EB:B4:93:1B:7E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1FBC6E45C1FCCE827A3C7280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e96e6116-8e8e-3111-9337-2d78b5b4eb9e.roa Signing time: Mon 08 Sep 2025 07:17:25 +0000 ROA not before: Mon 08 Sep 2025 07:17:25 +0000 ROA not after: Sun 07 Dec 2025 08:17:25 +0000 asID: 401783 IP address blocks: 209.101.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:bc:6e:45:c1:fc:ce:82:7a:3c:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 07:17:25 2025 GMT Not After : Dec 7 08:17:25 2025 GMT Subject: CN=62766e31-48c8-449c-8add-9ce63428c0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:05:7a:f7:fa:dd:a1:77:75:b4:9a:52:c5: 59:dc:d3:1d:41:f1:7a:53:d5:99:92:9d:4a:48:32: 63:6b:07:c0:14:c5:a8:30:64:56:2b:eb:46:8f:e1: f2:dc:41:47:be:bb:7a:5d:83:cd:a2:30:a0:e8:d7: 3c:c7:a9:38:ea:d4:51:f0:7f:21:fb:0e:1c:39:f4: 0b:10:27:e6:f3:c9:b2:72:cd:ad:18:0d:95:f2:9a: da:d1:95:13:8c:f4:32:eb:11:0e:3a:f8:69:f3:5e: 1f:4b:f2:3c:8a:0c:d0:88:85:4b:3f:12:ac:10:ad: 97:36:b0:04:0e:96:24:da:ac:88:c6:37:75:ad:fb: 4b:2d:89:97:b9:93:ad:78:e2:f0:69:9f:ba:b5:a6: af:f4:61:75:d7:a1:ca:b4:35:54:ca:58:1c:cb:81: 65:97:4a:7d:ee:85:67:4c:b8:d4:d5:95:74:95:7f: dd:42:fb:c5:c5:01:98:2d:ac:53:33:07:03:52:13: e4:c0:77:cb:15:71:64:c1:9c:55:40:f5:79:4f:02: ca:c8:e1:47:19:df:38:99:56:a2:69:9d:2a:4f:b1: b2:e6:e2:6c:fe:85:10:e7:e4:2f:f4:2d:30:48:a8: 01:5a:2d:c9:96:a9:67:07:ea:b4:5c:2f:81:28:64: 73:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E9:03:38:AC:DA:81:2E:F2:CF:26:38:B4:1B:C1:EB:B4:93:1B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e96e6116-8e8e-3111-9337-2d78b5b4eb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:db:7d:6a:8d:cb:26:d5:c2:3d:62:d8:df:64:22:0d:22:a9: af:95:6e:6f:dc:f6:fa:31:11:fa:df:98:e7:24:f6:65:af:83: 01:a7:1e:6b:05:b2:db:02:b1:c5:2d:e8:98:f9:64:ea:fe:be: f7:90:76:5d:db:c5:c5:e1:86:30:29:a1:a5:8c:72:59:9e:1d: 31:c9:28:52:50:e3:84:33:04:d0:d8:03:6e:ff:0c:16:9a:9e: 72:43:cf:68:9a:ed:ab:a7:19:21:fc:25:d7:7e:d0:c3:70:6a: 60:a4:13:51:da:5e:f0:ef:32:87:da:c0:e9:45:b8:32:88:93: 5e:17:48:43:4a:d7:b1:c9:96:4a:5d:31:f6:03:0f:28:47:36: df:6f:6e:33:ff:34:10:a9:73:15:b0:8e:40:22:d2:41:79:dc: 2e:5a:8a:79:7a:a3:70:3e:6e:aa:b0:61:9d:12:0c:13:7d:16: 2e:b3:65:fc:29:b1:9e:14:de:d8:27:0c:9e:9e:1f:59:8b:05: d9:15:8a:a1:fd:bc:4a:21:64:b5:09:5b:59:62:3e:4a:c3:35: 23:a2:36:15:a2:51:2d:3a:a7:85:97:e6:1c:d1:79:84:d5:a7: 1e:05:25:9a:58:82:1d:af:c3:82:4b:fb:29:f2:83:0f:d5:38: 3b:34:78:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfvG5FwfzOgno8coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODA3MTcyNVoXDTI1MTIwNzA4MTcyNVowLzEtMCsGA1UEAxMk NjI3NjZlMzEtNDhjOC00NDljLThhZGQtOWNlNjM0MjhjMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PAFevf63aF3dbSaUsVZ3NMdQfF6U9WZkp1K SDJjawfAFMWoMGRWK+tGj+Hy3EFHvrt6XYPNojCg6Nc8x6k46tRR8H8h+w4cOfQL ECfm88mycs2tGA2V8pra0ZUTjPQy6xEOOvhp814fS/I8igzQiIVLPxKsEK2XNrAE DpYk2qyIxjd1rftLLYmXuZOteOLwaZ+6taav9GF116HKtDVUylgcy4Fll0p97oVn TLjU1ZV0lX/dQvvFxQGYLaxTMwcDUhPkwHfLFXFkwZxVQPV5TwLKyOFHGd84mVai aZ0qT7Gy5uJs/oUQ5+Qv9C0wSKgBWi3JlqlnB+q0XC+BKGRzmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrpAzis2oEu8s8mOLQbweu0kxt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTk2ZTYxMTYtOGU4ZS0z MTExLTkzMzctMmQ3OGI1YjRlYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDbfWqNyybVwj1i2N9kIg0iqa+Vbm/c9voxEfrfmOck9mWvgwGnHmsF stsCscUt6Jj5ZOr+vveQdl3bxcXhhjApoaWMclmeHTHJKFJQ44QzBNDYA27/DBaa nnJDz2ia7aunGSH8Jdd+0MNwamCkE1HaXvDvMofawOlFuDKIk14XSENK17HJlkpd MfYDDyhHNt9vbjP/NBCpcxWwjkAi0kF53C5ainl6o3A+bqqwYZ0SDBN9Fi6zZfwp sZ4U3tgnDJ6eH1mLBdkViqH9vEohZLUJW1liPkrDNSOiNhWiUS06p4WX5hzReYTV px4FJZpYgh2vw4JL+ynygw/VODs0eFc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:11 2025 by rpki-client