$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa File: 9f872cec-cb89-3d99-a275-e385fd188443.roa (raw, json) Hash identifier: Nuu/Bkj14e6dWFvm/BZneTpCxKzjagnb54mTJEJdi6c= Subject key identifier: 65:62:73:94:21:D3:4A:09:1A:88:66:79:FE:B2:C7:C5:0B:B0:89:C5 Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f Certificate serial: 010D0C9F4328584AE4611EA74005D40CFF030980 Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 2572 IP address blocks: 209.106.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1e:a7:40:05:d4:0c:ff:03:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=db57683b-ec23-4ec3-a1f0-aa2aa0bf4bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9d:62:79:26:3a:76:de:11:d8:46:51:44:14: f1:90:60:2e:1e:cf:07:a3:35:fb:2f:2d:44:a9:69: 34:e6:b2:fb:52:fe:b4:b7:d2:54:50:5b:0f:28:09: 5d:3e:2f:09:d9:3a:32:ca:ae:42:96:24:d0:b4:87: ac:a3:d2:2d:a4:1f:e3:2e:98:38:b7:6d:f8:e3:ad: 04:ba:25:6e:af:15:6f:f6:11:c6:49:4d:a5:0f:51: 93:a9:9b:fc:9f:49:af:55:0b:70:20:75:95:b2:14: 63:c7:d1:b0:60:5a:fa:1a:2a:31:36:84:13:86:19: d6:df:ca:a6:1d:e2:90:41:cc:3c:91:8e:c9:55:85: c4:45:40:43:92:e8:d7:08:1e:26:1d:d7:63:13:8c: 5e:4b:85:b1:85:a6:f5:5e:7b:e8:87:fb:3b:65:a1: 07:34:10:4e:49:b8:65:47:0c:7b:54:21:71:03:fe: ca:94:17:e2:dd:f3:d4:86:b1:69:66:85:78:fb:ee: 12:68:18:b7:ca:9e:7e:60:8d:4a:88:b8:e5:f8:f6: 39:9e:23:99:17:e1:fb:cb:5c:0a:c5:65:b0:cc:ac: a3:4c:5d:ce:28:75:65:4b:cd:24:9f:51:58:5f:47: 4b:db:d9:45:88:0b:f5:71:00:44:ba:25:48:14:df: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:62:73:94:21:D3:4A:09:1A:88:66:79:FE:B2:C7:C5:0B:B0:89:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl X509v3 Authority Key Identifier: keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer sbgp-ipAddrBlock: critical IPv4: 209.106.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:7f:d1:ee:28:af:3f:39:08:87:a7:f0:43:81:86:2b:42:02: a2:09:d6:46:b5:97:65:cc:79:c7:df:f1:df:f7:4e:1a:72:d1: d4:97:33:05:09:75:fa:93:67:d2:3b:4d:35:b4:96:41:ca:ee: 17:5a:19:cd:2b:d2:ed:1a:04:ad:c9:e2:ef:da:44:13:6f:03: 95:cf:b8:a1:4e:22:b6:37:74:ee:30:9b:a6:c0:e7:a3:c1:38: 44:c7:7d:ab:e0:7b:8b:27:2a:51:61:fd:f0:3b:c7:12:e1:8f: 58:e3:7c:dd:c0:a2:93:06:2a:b3:c2:78:d1:01:9b:4e:47:4d: d1:44:d3:53:13:4d:27:ab:00:cb:be:04:1c:c6:01:11:23:11: 79:5a:40:f4:81:60:ad:64:0e:bf:27:0b:65:a2:76:76:e1:ce: cb:d7:cf:d4:d1:d6:aa:c6:9b:81:d6:e5:5e:37:eb:5f:98:67: 9e:a1:21:29:ab:68:7f:8e:9a:11:86:a2:28:40:0c:7c:1e:0a: 85:6e:8a:05:bc:06:19:88:f7:c9:a5:5a:1b:c8:20:a3:55:b3: f0:63:59:ba:04:7e:86:9b:fb:8f:19:bf:01:d7:f4:37:8a:76: 18:25:6a:ed:9c:db:e7:73:1a:85:1d:52:5a:f9:03:1c:31:37: 66:2e:27:6a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErkYR6nQAXUDP8DCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5MDc4ZTQtM2FkNS00MjQyLTlmM2UtMDU4MTYxYzk3 YTlmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGI1NzY4M2ItZWMyMy00ZWMzLWExZjAtYWEyYWEwYmY0YmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj51ieSY6dt4R2EZRRBTxkGAuHs8HozX7Ly1E qWk05rL7Uv60t9JUUFsPKAldPi8J2Toyyq5CliTQtIeso9ItpB/jLpg4t234460E uiVurxVv9hHGSU2lD1GTqZv8n0mvVQtwIHWVshRjx9GwYFr6GioxNoQThhnW38qm HeKQQcw8kY7JVYXERUBDkujXCB4mHddjE4xeS4Wxhab1Xnvoh/s7ZaEHNBBOSbhl Rwx7VCFxA/7KlBfi3fPUhrFpZoV4++4SaBi3yp5+YI1KiLjl+PY5niOZF+H7y1wK xWWwzKyjTF3OKHVlS80kn1FYX0dL29lFiAv1cQBEuiVIFN/P8QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGVic5Qh00oJGohmef6yx8ULsInFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMDkw NzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgxNjFjOTdhOWYvOWY4NzJjZWMtY2I4OS0z ZDk5LWEyNzUtZTM4NWZkMTg4NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTA5MDc4ZTQtM2FkNS00MjQyLTlm M2UtMDU4MTYxYzk3YTlmLzEwOTA3OGU0LTNhZDUtNDI0Mi05ZjNlLTA1ODE2MWM5 N2E5Zi5jcmwwHwYDVR0jBBgwFoAU1x7+GbjHHxN4q9PR4KiPNXpWxhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMDkwNzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgx NjFjOTdhOWYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0WowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcn/R7iivPzkIh6fwQ4GGK0ICognWRrWXZcx5x9/x3/dOGnLR1JczBQl1 +pNn0jtNNbSWQcruF1oZzSvS7RoErcni79pEE28Dlc+4oU4itjd07jCbpsDno8E4 RMd9q+B7iycqUWH98DvHEuGPWON83cCikwYqs8J40QGbTkdN0UTTUxNNJ6sAy74E HMYBESMReVpA9IFgrWQOvycLZaJ2duHOy9fP1NHWqsabgdblXjfrX5hnnqEhKato f46aEYaiKEAMfB4KhW6KBbwGGYj3yaVaG8ggo1Wz8GNZugR+hpv7jxm/Adf0N4p2 GCVq7Zzb53MahR1SWvkDHDE3Zi4nag== -----END CERTIFICATE-----Generated at Sat Aug 23 22:58:28 2025 by rpki-client