$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa File: 33bcd53a-1310-3cd5-91f3-46979f980f8e.roa (raw, json) Hash identifier: cz30USNwVfill4ZgS/MECYeKv0I+9rw7hbrFg9qF1fQ= Subject key identifier: 32:EC:A1:65:C5:89:60:AC:77:A9:DA:BD:C6:9E:2A:E7:58:F4:AD:97 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4277E6C94DAF5007E67B2600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:e6:c9:4d:af:50:07:e6:7b:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=29c6736d-9d49-4d3a-925b-2ffa64c8468f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f4:4d:2c:a4:8b:b8:31:16:08:17:b9:46:c7: e9:cf:b3:72:56:ee:d0:38:8d:f6:65:5d:5f:4e:5b: 2a:81:6b:38:fa:1a:55:7e:91:11:46:24:d4:7f:7e: 2a:94:ee:97:b2:df:39:f8:34:8e:8a:96:97:68:2f: 9a:3f:2a:d9:e4:1d:11:86:00:4e:5c:62:84:a2:72: 36:5b:a4:37:af:0f:68:e5:f7:88:f4:05:20:b1:95: ed:b7:b9:7b:dc:e6:67:41:20:84:e0:4d:1f:5a:56: cc:1e:98:8e:1b:d4:77:56:82:9c:bd:a3:c0:c7:7e: 5a:9a:51:cc:79:6d:59:b9:d3:5b:e1:fc:f8:2a:52: d2:5c:ef:de:06:51:f5:f4:cc:6d:5c:b0:8e:ce:a8: d7:90:df:bc:6a:dd:03:62:54:0f:39:19:35:63:3d: 7f:6a:3e:3e:2f:d5:1b:91:3f:23:45:68:5e:91:c7: 9a:00:4c:f1:dc:9e:89:dc:ae:db:41:51:4f:cb:f7: 45:52:56:16:13:b8:87:f2:60:4d:15:fb:32:28:c0: ac:30:e5:78:2f:4b:b4:ae:2c:4b:8d:cb:5b:a9:bb: e5:c1:1b:7d:70:6d:f5:b9:25:0e:df:84:ee:c7:50: 0f:b3:f6:d0:0b:c1:c0:7f:bb:18:60:2b:de:17:31: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EC:A1:65:C5:89:60:AC:77:A9:DA:BD:C6:9E:2A:E7:58:F4:AD:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:98:ad:ae:3f:dd:39:96:4d:96:1f:19:9c:f8:5e:47:83:86: 72:4e:89:33:fa:a9:85:4f:f4:db:82:ed:21:33:81:4a:0b:40: 28:ea:1b:be:04:cf:c5:2b:1c:64:a4:0c:36:a9:6a:7b:8d:5a: 83:f4:3c:8d:a5:6d:d0:8a:2d:38:5d:1d:68:56:73:38:1f:d8: 29:ab:0b:ee:4b:42:7e:82:da:ff:e2:d5:02:09:40:0b:33:85: e4:9b:30:1f:60:03:1a:47:d4:42:a8:e9:85:48:13:d1:eb:4f: 2e:f2:d9:52:39:4d:ff:36:d0:1e:32:a9:5e:27:29:de:bf:34: e4:d6:cf:2d:1a:b2:d7:5f:c8:a4:24:fc:d9:c2:6f:dc:19:9b: 3b:39:bc:ef:b0:83:d8:eb:f5:82:f8:c2:11:9b:7f:b4:04:c0: 02:48:1f:71:1c:23:3d:e6:ff:1e:44:3c:31:5c:29:75:b6:9b: b9:ac:a5:7e:81:9c:d6:4b:c5:f1:ca:bd:2f:f7:aa:f4:4e:0b: 33:8d:02:62:37:f1:8d:83:73:74:89:94:2a:cf:2b:18:6f:89: a3:b8:da:99:72:86:1e:41:df:87:8a:08:c5:7b:8f:70:6e:28: cf:1f:23:f9:d0:15:65:b8:13:c3:60:47:82:91:f0:20:15:98: a8:5e:a3:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd+bJTa9QB+Z7JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MjljNjczNmQtOWQ0OS00ZDNhLTkyNWItMmZmYTY0Yzg0NjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivRNLKSLuDEWCBe5Rsfpz7NyVu7QOI32ZV1f TlsqgWs4+hpVfpERRiTUf34qlO6Xst85+DSOipaXaC+aPyrZ5B0RhgBOXGKEonI2 W6Q3rw9o5feI9AUgsZXtt7l73OZnQSCE4E0fWlbMHpiOG9R3VoKcvaPAx35amlHM eW1ZudNb4fz4KlLSXO/eBlH19MxtXLCOzqjXkN+8at0DYlQPORk1Yz1/aj4+L9Ub kT8jRWhekceaAEzx3J6J3K7bQVFPy/dFUlYWE7iH8mBNFfsyKMCsMOV4L0u0rixL jctbqbvlwRt9cG31uSUO34Tux1APs/bQC8HAf7sYYCveFzFXPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLsoWXFiWCsd6navcaeKudY9K2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzNiY2Q1M2EtMTMxMC0z Y2Q1LTkxZjMtNDY5NzlmOTgwZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSYra4/3TmWTZYfGZz4XkeDhnJOiTP6qYVP9NuC7SEzgUoLQCjqG74E z8UrHGSkDDapanuNWoP0PI2lbdCKLThdHWhWczgf2CmrC+5LQn6C2v/i1QIJQAsz heSbMB9gAxpH1EKo6YVIE9HrTy7y2VI5Tf820B4yqV4nKd6/NOTWzy0astdfyKQk /NnCb9wZmzs5vO+wg9jr9YL4whGbf7QEwAJIH3EcIz3m/x5EPDFcKXW2m7mspX6B nNZLxfHKvS/3qvROCzONAmI38Y2Dc3SJlCrPKxhviaO42plyhh5B34eKCMV7j3Bu KM8fI/nQFWW4E8NgR4KR8CAVmKheoy8= -----END CERTIFICATE-----Generated at Thu Oct 8 16:18:32 2026 by rpki-client