$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3783c64e-c484-3d83-98b2-2682a6aa7d73.roa File: 3783c64e-c484-3d83-98b2-2682a6aa7d73.roa (raw, json) Hash identifier: qJlRbc1uEZuG8X8r+IapOtweovtfOB0o2yCPK8Ll4nk= Subject key identifier: 24:78:D1:BD:58:52:AF:D4:D3:E0:C0:51:04:CA:69:0C:ED:0B:D7:14 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4972C5482D86E0776AC6F240 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3783c64e-c484-3d83-98b2-2682a6aa7d73.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 209.101.22.0/23 maxlen: 23 209.101.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c5:48:2d:86:e0:77:6a:c6:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aa1f4a8b-f65f-48de-b696-d813d1a65b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:5e:28:2a:ab:f5:9f:6f:46:31:40:bf:3b: 03:83:7c:92:2c:7b:8a:6a:6a:d1:36:49:8a:a1:5f: cc:40:e1:79:49:1a:28:31:2a:00:93:91:86:44:62: 56:f0:8f:47:b7:e2:ba:a2:a4:95:a0:31:30:53:5b: 34:08:6b:35:66:5f:9d:ee:f8:49:95:49:1a:a8:42: 3b:b1:55:a7:e7:6f:f9:62:4a:56:ae:82:b9:52:2b: 85:d5:9f:d9:d2:b9:64:9c:77:83:e4:12:cb:58:37: 84:ab:49:3e:c8:36:fd:95:29:3d:af:33:aa:b7:33: 13:fc:7e:5c:19:73:1f:0c:67:2c:dd:93:ec:0c:30: 2a:7e:e3:ae:e7:c3:0a:8f:8d:73:92:11:73:0e:26: 1c:3d:b3:d7:46:51:48:ea:9a:b5:08:09:8c:1b:36: 24:8c:bb:e4:27:dd:7c:b1:ab:a1:03:ef:83:31:5c: 8b:90:ce:19:0d:b6:b0:d0:c9:79:46:3b:47:aa:30: 29:92:b7:ff:35:51:51:bf:b3:d8:cb:d9:9b:31:27: 3c:1a:0d:9f:65:56:41:67:c4:87:28:a8:9b:8e:dd: 15:79:f5:dc:dc:bb:fa:8f:60:2f:5d:eb:a6:eb:dc: 3a:fd:4b:1b:e0:a3:a1:8d:aa:72:0c:5f:25:e8:2e: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:78:D1:BD:58:52:AF:D4:D3:E0:C0:51:04:CA:69:0C:ED:0B:D7:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3783c64e-c484-3d83-98b2-2682a6aa7d73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.22.0/23 209.101.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:38:b1:3e:0c:e2:3d:28:79:8e:c2:b6:3b:4d:7f:db:b4:65: 76:5c:70:b9:41:1d:7d:74:e8:04:46:89:df:7d:d3:07:ee:9a: 41:a4:e2:a9:88:ca:93:c4:b0:63:0a:9a:57:c2:72:5f:d5:31: 8b:a7:3a:05:45:1c:ee:4f:5e:64:94:14:88:54:aa:ac:b5:43: 4c:ba:fc:98:7f:87:a9:e6:c9:e3:a1:dc:4e:2b:a5:8a:e6:b7: 84:c0:67:eb:58:53:e2:02:a3:38:7a:13:52:d7:cf:b4:02:2e: 82:7b:e8:e8:bf:af:25:9c:ed:15:77:0b:be:4b:ab:62:77:92: b6:2f:88:a5:d0:48:34:8d:53:f4:fa:c0:07:78:2e:3e:49:57: ef:b7:7e:27:48:3e:b4:aa:66:61:ee:f6:52:7f:64:38:36:85: 85:4a:13:f4:8c:ed:35:ff:8e:d7:aa:5e:d5:85:39:69:d4:08: 8d:3a:1d:b1:98:a1:72:88:ce:50:d9:32:cf:ad:7e:90:df:9e: 35:2d:d5:92:ae:15:ad:8d:6d:ab:cb:4b:78:1c:df:43:ba:7e: 6c:61:e0:9a:8c:73:56:b8:d2:47:6d:71:d5:7e:c0:d4:11:15: ca:75:d5:8f:5d:ef:48:08:2c:b9:d2:f5:18:b9:b5:69:73:b9: 48:b3:94:fd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JcsVILYbgd2rG8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWExZjRhOGItZjY1Zi00OGRlLWI2OTYtZDgxM2QxYTY1YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5VeKCqr9Z9vRjFAvzsDg3ySLHuKamrRNkmK oV/MQOF5SRooMSoAk5GGRGJW8I9Ht+K6oqSVoDEwU1s0CGs1Zl+d7vhJlUkaqEI7 sVWn52/5YkpWroK5UiuF1Z/Z0rlknHeD5BLLWDeEq0k+yDb9lSk9rzOqtzMT/H5c GXMfDGcs3ZPsDDAqfuOu58MKj41zkhFzDiYcPbPXRlFI6pq1CAmMGzYkjLvkJ918 sauhA++DMVyLkM4ZDbaw0Ml5RjtHqjApkrf/NVFRv7PYy9mbMSc8Gg2fZVZBZ8SH KKibjt0VefXc3Lv6j2AvXeum69w6/Usb4KOhjapyDF8l6C4M/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCR40b1YUq/U0+DAUQTKaQztC9cUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzc4M2M2NGUtYzQ4NC0z ZDgzLTk4YjItMjY4MmE2YWE3ZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0WUWAwQA 0WU/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJM4sT4M4j0oeY7CtjtNf9u0ZXZccLlBHX106ARGid990wfu mkGk4qmIypPEsGMKmlfCcl/VMYunOgVFHO5PXmSUFIhUqqy1Q0y6/Jh/h6nmyeOh 3E4rpYrmt4TAZ+tYU+ICozh6E1LXz7QCLoJ76Oi/ryWc7RV3C75Lq2J3krYviKXQ SDSNU/T6wAd4Lj5JV++3fidIPrSqZmHu9lJ/ZDg2hYVKE/SM7TX/jteqXtWFOWnU CI06HbGYoXKIzlDZMs+tfpDfnjUt1ZKuFa2NbavLS3gc30O6fmxh4JqMc1a40kdt cdV+wNQRFcp11Y9d70gILLnS9Ri5tWlzuUizlP0= -----END CERTIFICATE-----Generated at Sun Oct 4 01:26:38 2026 by rpki-client