$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a3e2938-b599-3768-9323-b1d23b5e42fd.roa File: 2a3e2938-b599-3768-9323-b1d23b5e42fd.roa (raw, json) Hash identifier: 5Yw0GMmxU6rUYwr/CVk7PM6uiRWFsIXT5F2ydjTOHJk= Subject key identifier: 60:24:3A:59:36:35:55:3B:18:A0:01:A5:D0:06:5A:1C:06:D4:44:C5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F42781B5B83BC0D96EE0FE480 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a3e2938-b599-3768-9323-b1d23b5e42fd.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:1b:5b:83:bc:0d:96:ee:0f:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=d76e92e2-6433-45ba-8493-ff739c23d098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:49:98:cf:f8:c0:af:fc:b8:80:27:dd:80: 5e:25:5c:35:04:99:5d:90:8b:96:5e:95:f2:39:b4: a1:fa:ea:51:15:31:87:6a:9d:25:fc:f0:0a:7c:e5: a3:45:ad:97:a8:95:69:04:6b:07:0f:d9:2a:9f:a4: 4d:52:e9:d3:9d:e1:9d:2b:37:d3:ec:55:24:f9:76: 6d:14:c6:3e:da:7f:4c:2a:e2:37:9c:1f:29:58:ca: 01:d9:f3:ac:0f:6e:b7:67:05:0f:7e:38:a8:7a:29: 95:35:27:d3:fd:c6:5e:b8:d6:55:9e:ff:b6:b3:e6: 76:51:d1:19:36:8b:7a:7c:66:cf:63:d7:bc:98:2a: 88:95:77:2b:5c:8b:78:d0:68:3a:f0:2e:be:ae:c5: 85:fc:a6:73:7a:39:b6:e0:e7:8e:6c:48:35:69:fe: 64:2d:82:f6:22:47:12:20:bf:70:8b:77:55:d7:cf: e0:ed:64:b1:52:bd:5e:e9:4c:31:64:ee:8e:5b:90: 39:5f:cc:a2:aa:2a:d4:a9:62:6b:21:51:ea:53:d1: f8:6d:3a:b6:2f:8b:cf:f8:44:fc:25:f1:14:b1:cd: 6b:76:1d:0f:83:99:1a:95:7e:63:9e:77:62:d0:e7: d4:7f:7f:a9:fa:5e:0e:2c:70:fc:d3:53:e0:8e:40: f9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:24:3A:59:36:35:55:3B:18:A0:01:A5:D0:06:5A:1C:06:D4:44:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a3e2938-b599-3768-9323-b1d23b5e42fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:69:77:51:06:9b:32:a2:cc:54:40:c9:f4:5a:fb:ac:a4:10: 6a:ef:28:e5:c4:da:af:3f:7b:8d:0a:e5:d6:5b:48:8f:9d:3b: 52:4c:bc:ce:b2:cd:b8:99:10:c7:ee:a9:ea:89:e5:57:47:de: fe:25:06:c8:87:40:0f:52:5c:d8:9c:c0:cc:07:82:4e:05:59: 04:55:90:97:02:cd:5c:06:c3:5e:9f:9a:f4:5a:a3:7f:3d:2d: 06:c0:c0:65:65:96:f1:5c:63:ba:32:66:66:d9:27:90:99:11: 6c:99:39:d7:ad:9a:18:b4:fb:a6:a6:57:93:90:c1:af:bc:24: 88:cd:4b:ff:83:08:fb:aa:a3:88:cc:6b:b4:18:0d:d6:77:d7: 35:d4:a2:a0:f6:26:78:15:eb:f4:fd:2b:31:10:49:a8:69:0f: 07:1f:39:28:ec:dc:37:9f:47:b5:7a:3c:e7:51:7e:5d:b2:cf: 64:ed:2a:ec:2a:9d:d4:72:0a:de:9c:ae:16:78:2e:1f:fa:95: 8a:a7:ce:2e:87:26:c5:81:5a:3f:c7:cc:7f:89:8d:16:fc:50: e5:ff:20:4e:23:37:25:aa:ea:b9:c4:9b:63:59:33:45:22:75: f2:be:00:1f:ff:76:e3:87:d1:d4:23:2e:45:9b:a3:99:6f:cb: 45:5b:92:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeBtbg7wNlu4P5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZDc2ZTkyZTItNjQzMy00NWJhLTg0OTMtZmY3MzljMjNkMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aVJmM/4wK/8uIAn3YBeJVw1BJldkIuWXpXy ObSh+upRFTGHap0l/PAKfOWjRa2XqJVpBGsHD9kqn6RNUunTneGdKzfT7FUk+XZt FMY+2n9MKuI3nB8pWMoB2fOsD263ZwUPfjioeimVNSfT/cZeuNZVnv+2s+Z2UdEZ Not6fGbPY9e8mCqIlXcrXIt40Gg68C6+rsWF/KZzejm24OeObEg1af5kLYL2IkcS IL9wi3dV18/g7WSxUr1e6UwxZO6OW5A5X8yiqirUqWJrIVHqU9H4bTq2L4vP+ET8 JfEUsc1rdh0Pg5kalX5jnndi0OfUf3+p+l4OLHD801PgjkD5fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAkOlk2NVU7GKABpdAGWhwG1ETFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmEzZTI5MzgtYjU5OS0z NzY4LTkzMjMtYjFkMjNiNWU0MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxpd1EGmzKizFRAyfRa+6ykEGrvKOXE2q8/e40K5dZbSI+dO1JMvM6y zbiZEMfuqeqJ5VdH3v4lBsiHQA9SXNicwMwHgk4FWQRVkJcCzVwGw16fmvRao389 LQbAwGVllvFcY7oyZmbZJ5CZEWyZOdetmhi0+6amV5OQwa+8JIjNS/+DCPuqo4jM a7QYDdZ31zXUoqD2JngV6/T9KzEQSahpDwcfOSjs3DefR7V6POdRfl2yz2TtKuwq ndRyCt6crhZ4Lh/6lYqnzi6HJsWBWj/HzH+JjRb8UOX/IE4jNyWq6rnEm2NZM0Ui dfK+AB//duOH0dQjLkWbo5lvy0Vbkqc= -----END CERTIFICATE-----Generated at Sun Sep 27 01:20:04 2026 by rpki-client