$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0fa99189-ac93-3758-92df-1aae51fb1023.roa File: 0fa99189-ac93-3758-92df-1aae51fb1023.roa (raw, json) Hash identifier: p4JJN+q1RIR5XguwmXkrsTIzxuCKvxJOOelY0kc8W38= Subject key identifier: EB:D2:53:DF:9F:38:C4:60:4D:13:CE:46:5D:D1:42:EF:B7:F3:0C:3F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E8F54ED7DAB066585817C62C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0fa99189-ac93-3758-92df-1aae51fb1023.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 212238 IP address blocks: 209.101.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:ed:7d:ab:06:65:85:81:7c:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=8dd19678-8fe7-49cb-bc46-0b8b66ff470b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:06:af:85:66:43:2c:85:46:7c:22:02:27:b1: f2:df:a4:8c:b9:d2:14:87:63:41:a3:5f:43:8f:90: 0f:0a:ec:1a:10:a5:0d:10:77:e7:df:ca:de:0e:08: 85:e1:65:24:3f:83:05:61:e4:5a:fe:e5:88:10:03: 54:73:f9:7d:6f:67:38:69:f1:34:79:2d:f2:fd:6d: 70:3e:99:a3:60:63:17:80:39:69:f2:27:bc:ee:c4: 74:96:d7:75:e0:b4:f0:d1:37:c1:90:30:57:e2:2d: 1c:20:a3:9a:1d:4d:bf:87:31:d9:82:9c:26:a1:99: 2f:01:d9:63:61:e0:e5:39:b9:a9:3e:b8:03:c1:dd: ff:1c:88:52:af:2e:b2:e0:7e:b1:c2:f9:b3:2e:80: 74:d9:df:13:51:f6:39:a1:5c:56:3b:ab:90:52:6d: 48:3e:a6:37:3b:bc:1a:a2:54:fa:3a:4d:6b:a5:48: 4c:c5:e3:4e:cb:f0:b8:96:26:41:c9:f5:a2:89:a6: 21:26:b7:ab:19:3f:97:77:12:aa:b7:fa:78:97:92: a3:fc:b1:44:34:af:56:fd:ea:d2:37:b9:62:8d:e3: 38:4a:cc:16:c2:75:b9:2d:30:63:40:48:97:d3:b0: 18:9b:70:99:70:18:93:4a:b0:1e:bc:7a:88:ad:6d: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D2:53:DF:9F:38:C4:60:4D:13:CE:46:5D:D1:42:EF:B7:F3:0C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0fa99189-ac93-3758-92df-1aae51fb1023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:47:33:72:1e:2a:db:1f:ae:4d:ac:ae:03:79:85:7b:ba:7d: 3b:50:66:c3:53:83:61:0e:80:e6:62:73:b5:94:be:4c:99:4e: 9d:2c:00:c9:12:77:87:70:81:28:7c:7b:fc:36:35:c3:0f:89: e1:c3:3c:92:b0:d4:1b:c4:5e:9e:49:73:ef:c9:0c:5b:96:36: 12:4d:78:df:02:b7:8f:f9:e0:80:0d:0b:07:fd:cb:db:f8:b6: 1f:21:5d:5e:7e:4a:53:06:6f:2b:09:c6:ee:e9:0a:3f:66:05: cb:db:37:5e:c6:63:c9:06:de:87:d6:5a:53:77:bd:8a:ca:18: 0f:41:05:5b:2e:3f:8e:6a:42:f8:4c:67:12:58:48:c4:29:83: 50:82:1f:1c:10:1f:e9:4f:5b:29:03:66:9b:c4:81:89:29:59: 55:c6:fc:c9:fb:41:65:2a:8a:f2:dd:4c:5f:f8:5a:a2:01:d5: 77:0a:e3:a7:14:bd:79:cc:7b:87:52:a1:53:0a:bf:6b:79:88: aa:29:0e:e1:15:be:6b:cf:60:d7:bb:c0:1d:2f:ae:11:40:76: ea:8a:a2:d0:a0:2d:4e:f7:e0:d8:10:e3:fe:73:ad:03:ee:c7: ce:4a:28:81:5d:15:95:94:25:81:ce:5f:70:60:ab:18:7a:8e: de:be:3f:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVO19qwZlhYF8YsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk OGRkMTk2NzgtOGZlNy00OWNiLWJjNDYtMGI4YjY2ZmY0NzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AavhWZDLIVGfCICJ7Hy36SMudIUh2NBo19D j5APCuwaEKUNEHfn38reDgiF4WUkP4MFYeRa/uWIEANUc/l9b2c4afE0eS3y/W1w PpmjYGMXgDlp8ie87sR0ltd14LTw0TfBkDBX4i0cIKOaHU2/hzHZgpwmoZkvAdlj YeDlObmpPrgDwd3/HIhSry6y4H6xwvmzLoB02d8TUfY5oVxWO6uQUm1IPqY3O7wa olT6Ok1rpUhMxeNOy/C4liZByfWiiaYhJrerGT+XdxKqt/p4l5Kj/LFENK9W/erS N7lijeM4SswWwnW5LTBjQEiX07AYm3CZcBiTSrAevHqIrW1J1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvSU9+fOMRgTRPORl3RQu+38ww/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGZhOTkxODktYWM5My0z NzU4LTkyZGYtMWFhZTUxZmIxMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WX+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhHM3IeKtsfrk2srgN5hXu6fTtQZsNTg2EOgOZic7WUvkyZTp0sAMkS d4dwgSh8e/w2NcMPieHDPJKw1BvEXp5Jc+/JDFuWNhJNeN8Ct4/54IANCwf9y9v4 th8hXV5+SlMGbysJxu7pCj9mBcvbN17GY8kG3ofWWlN3vYrKGA9BBVsuP45qQvhM ZxJYSMQpg1CCHxwQH+lPWykDZpvEgYkpWVXG/Mn7QWUqivLdTF/4WqIB1XcK46cU vXnMe4dSoVMKv2t5iKopDuEVvmvPYNe7wB0vrhFAduqKotCgLU734NgQ4/5zrQPu x85KKIFdFZWUJYHOX3Bgqxh6jt6+P1w= -----END CERTIFICATE-----Generated at Thu Jul 23 23:31:42 2026 by rpki-client