$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38326777-ef13-3c02-b1f1-da890d6765bd.roa File: 38326777-ef13-3c02-b1f1-da890d6765bd.roa (raw, json) Hash identifier: NQbIus0hP5G/hQZkW4c65b7AIN+B+EeN5984aeefZBQ= Subject key identifier: 71:34:9C:24:3B:64:8E:17:29:2E:93:4A:23:8B:5E:A9:DF:5D:FD:9F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4AD3ADEFD6244FC099A40D00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38326777-ef13-3c02-b1f1-da890d6765bd.roa Signing time: Fri 25 Sep 2026 12:51:47 +0000 ROA not before: Fri 25 Sep 2026 12:51:47 +0000 ROA not after: Thu 24 Dec 2026 13:51:47 +0000 asID: 6079 IP address blocks: 209.101.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d3:ad:ef:d6:24:4f:c0:99:a4:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 12:51:47 2026 GMT Not After : Dec 24 13:51:47 2026 GMT Subject: CN=2ee95b92-1262-42bd-8cab-4d13ac76ff38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:fe:55:3f:3d:f4:e4:ba:88:40:c6:76:9f: 06:b5:61:91:77:59:fa:38:c2:02:52:45:64:df:39: 25:34:52:96:0f:1b:c4:6f:87:15:04:3e:2a:99:74: 9e:23:91:fa:44:49:5f:2b:b2:15:6a:55:9d:c1:b5: 8d:aa:68:5f:32:31:7b:7f:b1:af:90:66:a1:74:69: f8:bb:69:8b:02:de:06:d6:3a:91:c9:3e:20:a2:2d: 7d:3e:ef:bb:94:91:49:c4:0a:57:24:1d:8e:a5:d1: 36:0f:35:78:cd:88:d1:94:bc:7e:d3:86:d1:38:48: 20:53:b0:35:d2:e0:49:ee:3c:64:0b:79:b6:dc:dd: 49:d9:a1:ed:56:8b:fc:f4:f6:3c:2e:57:7e:a2:9c: e8:af:8f:59:4b:1e:1c:83:2b:7a:25:09:64:72:53: 14:b3:87:98:52:7e:58:a9:31:9b:72:49:53:93:cb: 26:f2:a4:61:d8:33:3c:a3:5c:14:2d:9b:f2:93:f8: aa:90:95:41:22:ee:2d:27:da:90:dd:f4:f4:82:0c: 70:7f:0a:c0:d8:b5:a1:3d:c0:e4:da:31:62:a2:70: 48:d9:c5:42:8f:83:f2:e7:d2:c2:d2:79:b5:96:81: 6a:0d:3b:48:0f:ac:e4:60:f8:e7:05:04:d6:8e:10: 32:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:34:9C:24:3B:64:8E:17:29:2E:93:4A:23:8B:5E:A9:DF:5D:FD:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38326777-ef13-3c02-b1f1-da890d6765bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:15:db:16:19:44:fc:d1:04:70:d1:2a:31:1a:b5:be:4a:95: f6:0d:72:b8:92:ef:5b:36:2b:78:fb:9b:59:7f:0a:7c:78:73: e7:0e:6d:ab:4c:aa:99:09:f5:c3:f6:21:1f:b5:2a:63:29:b5: ed:d4:da:5c:b5:61:46:e8:f2:44:5f:ba:14:6c:a2:cc:73:20: 86:c5:81:23:d5:8f:71:97:a0:5b:fc:ce:11:a6:a8:a2:21:ad: 05:d9:a1:56:39:b9:67:71:ac:15:68:63:b9:67:35:5c:fd:8a: eb:91:fa:22:62:95:41:ab:49:8b:10:45:70:38:13:2f:51:ad: 4d:13:8a:4e:04:4b:e8:73:d3:cb:b5:90:fb:ef:16:1c:4d:b5: 1e:f7:52:79:cd:64:9b:4f:fd:22:a2:69:b0:22:f7:4f:92:ce: 30:f0:74:d1:e9:16:0c:45:7d:d7:3d:b9:78:5e:0b:cc:25:41: bf:47:45:bb:48:7f:0e:b2:e7:2e:f5:79:18:b3:22:77:a9:b8: 06:18:11:9d:a1:13:8d:4a:49:27:ff:ec:d0:5c:8e:bd:d0:a9: f5:df:8c:6e:5c:e7:40:e7:9b:0b:6f:5f:e1:01:37:de:65:61: c1:da:80:33:e5:d2:da:13:e2:12:a7:f6:a3:2f:da:20:6c:83: 67:0e:b7:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K063v1iRPwJmkDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEyNTE0N1oXDTI2MTIyNDEzNTE0N1owLzEtMCsGA1UEAxMk MmVlOTViOTItMTI2Mi00MmJkLThjYWItNGQxM2FjNzZmZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLL+VT899OS6iEDGdp8GtWGRd1n6OMICUkVk 3zklNFKWDxvEb4cVBD4qmXSeI5H6RElfK7IValWdwbWNqmhfMjF7f7GvkGahdGn4 u2mLAt4G1jqRyT4goi19Pu+7lJFJxApXJB2OpdE2DzV4zYjRlLx+04bROEggU7A1 0uBJ7jxkC3m23N1J2aHtVov89PY8Lld+opzor49ZSx4cgyt6JQlkclMUs4eYUn5Y qTGbcklTk8sm8qRh2DM8o1wULZvyk/iqkJVBIu4tJ9qQ3fT0ggxwfwrA2LWhPcDk 2jFionBI2cVCj4Py59LC0nm1loFqDTtID6zkYPjnBQTWjhAynwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE0nCQ7ZI4XKS6TSiOLXqnfXf2fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzgzMjY3NzctZWYxMy0z YzAyLWIxZjEtZGE4OTBkNjc2NWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkV2xYZRPzRBHDRKjEatb5KlfYNcriS71s2K3j7m1l/Cnx4c+cObatM qpkJ9cP2IR+1KmMpte3U2ly1YUbo8kRfuhRsosxzIIbFgSPVj3GXoFv8zhGmqKIh rQXZoVY5uWdxrBVoY7lnNVz9iuuR+iJilUGrSYsQRXA4Ey9RrU0Tik4ES+hz08u1 kPvvFhxNtR73UnnNZJtP/SKiabAi90+SzjDwdNHpFgxFfdc9uXheC8wlQb9HRbtI fw6y5y71eRizInepuAYYEZ2hE41KSSf/7NBcjr3QqfXfjG5c50DnmwtvX+EBN95l YcHagDPl0toT4hKn9qMv2iBsg2cOt9k= -----END CERTIFICATE-----Generated at Mon Sep 28 22:05:04 2026 by rpki-client