$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41b9d52d-8ea0-3e43-b21a-5bee554b5070.roa File: 41b9d52d-8ea0-3e43-b21a-5bee554b5070.roa (raw, json) Hash identifier: 9dAawKMZdh5y2PixofU7yVqNbgV40R8KY98Q3OY1VbM= Subject key identifier: 3A:FB:74:68:94:D3:90:98:AF:4A:30:95:66:F4:0D:0A:6D:F0:5E:E7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F1732388914555414D2EEFC80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41b9d52d-8ea0-3e43-b21a-5bee554b5070.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 12083 IP address blocks: 209.101.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:38:89:14:55:54:14:d2:ee:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=79bfe91e-1377-417e-9427-9da5a637397d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:14:bb:7c:20:f6:da:d8:0b:ba:81:50:00: d1:6b:14:35:27:71:b0:b5:ea:6f:8e:da:57:c5:1c: 68:f5:c9:8e:c7:6a:49:2d:76:fd:fc:e1:40:0e:68: 6a:66:f7:9c:27:21:65:06:83:13:3d:b2:7d:4b:a1: 2f:bf:8e:53:ca:ee:4b:74:8c:42:ad:01:20:9c:19: 14:0f:9b:3f:22:d6:e5:38:8a:25:cb:6f:65:b3:0f: 3a:bb:64:8f:3c:74:7c:61:64:5d:c5:c2:7c:84:30: 0d:99:b3:e2:6d:ec:ab:b1:2b:f2:19:05:3f:61:1b: 02:9f:8e:d7:a4:7b:67:bd:37:c4:7b:80:cb:64:b4: 2d:69:6e:30:9c:1a:97:31:bd:74:37:62:14:f2:fc: 25:61:a3:5b:2a:5a:32:f1:36:54:9b:db:7b:43:98: 11:72:81:39:c4:b5:1a:6a:9b:45:5d:c5:21:92:5c: 82:f1:df:fa:20:51:8c:d1:01:0f:b3:d9:9e:9f:2f: 94:b1:70:25:16:c5:50:a8:07:32:cf:4e:a5:4a:b7: 74:7f:61:26:28:5c:39:c7:41:4b:c0:53:5a:ea:f4: 5a:65:06:b3:82:71:8a:97:df:61:4c:95:0b:6d:a8: 31:f5:97:c3:81:f2:b2:bb:ad:ec:d8:24:89:4b:0c: 23:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FB:74:68:94:D3:90:98:AF:4A:30:95:66:F4:0D:0A:6D:F0:5E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41b9d52d-8ea0-3e43-b21a-5bee554b5070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:ca:93:b6:06:15:1f:ec:2a:2d:df:7a:d5:98:ec:c6:c6:55: 33:08:b9:0c:99:c2:57:fa:5e:68:be:4a:c1:fa:db:f0:90:8d: 1b:91:ee:06:7b:cc:9c:c7:e7:c9:28:2c:2c:ac:1c:0e:73:95: ae:d2:65:9d:62:4d:62:64:5c:7b:cd:e2:d1:62:24:f4:26:9d: cf:ee:25:09:2a:9f:da:d6:b5:2e:68:93:70:19:dc:8a:7e:4e: 03:d2:30:97:96:90:c5:f5:ae:3f:1f:93:53:46:de:e6:70:53: 5b:32:91:61:22:4d:9e:18:d0:ea:4e:f1:7e:fe:3e:1e:38:be: e0:6d:9f:66:13:11:9e:2a:9e:3c:f6:c6:86:56:8c:1b:bd:9a: 17:4e:f1:d8:d8:e7:32:d1:38:08:c3:42:3d:05:ee:a1:76:21: ca:6b:99:9e:09:08:5d:29:de:7d:1e:7d:35:2d:1a:26:db:92: 0b:33:b2:83:b8:fa:4f:85:82:27:82:4d:b5:ec:b1:e1:b5:b0: 6b:ac:e3:c6:83:ac:02:3e:54:77:d2:ef:b5:27:bc:9b:a5:8f: 41:b9:81:16:01:6f:7a:ef:16:d6:e0:6e:75:4e:88:59:95:47: 7b:39:41:72:fd:b8:54:96:b0:a9:0f:66:89:35:5c:a5:d1:a8: 2b:5c:3d:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjiJFFVUFNLu/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NzliZmU5MWUtMTM3Ny00MTdlLTk0MjctOWRhNWE2MzczOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqckUu3wg9trYC7qBUADRaxQ1J3GwtepvjtpX xRxo9cmOx2pJLXb9/OFADmhqZvecJyFlBoMTPbJ9S6Evv45Tyu5LdIxCrQEgnBkU D5s/ItblOIoly29lsw86u2SPPHR8YWRdxcJ8hDANmbPibeyrsSvyGQU/YRsCn47X pHtnvTfEe4DLZLQtaW4wnBqXMb10N2IU8vwlYaNbKloy8TZUm9t7Q5gRcoE5xLUa aptFXcUhklyC8d/6IFGM0QEPs9meny+UsXAlFsVQqAcyz06lSrd0f2EmKFw5x0FL wFNa6vRaZQazgnGKl99hTJULbagx9ZfDgfKyu63s2CSJSwwjwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr7dGiU05CYr0owlWb0DQpt8F7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDFiOWQ1MmQtOGVhMC0z ZTQzLWIyMWEtNWJlZTU1NGI1MDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjKk7YGFR/sKi3fetWY7MbGVTMIuQyZwlf6Xmi+SsH62/CQjRuR7gZ7 zJzH58koLCysHA5zla7SZZ1iTWJkXHvN4tFiJPQmnc/uJQkqn9rWtS5ok3AZ3Ip+ TgPSMJeWkMX1rj8fk1NG3uZwU1sykWEiTZ4Y0OpO8X7+Ph44vuBtn2YTEZ4qnjz2 xoZWjBu9mhdO8djY5zLROAjDQj0F7qF2IcprmZ4JCF0p3n0efTUtGibbkgszsoO4 +k+FgieCTbXsseG1sGus48aDrAI+VHfS77UnvJulj0G5gRYBb3rvFtbgbnVOiFmV R3s5QXL9uFSWsKkPZok1XKXRqCtcPRg= -----END CERTIFICATE-----Generated at Sun Sep 27 11:38:38 2026 by rpki-client