$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/45a2f1b3-32d0-3e6d-8ba2-2640f866e929.roa File: 45a2f1b3-32d0-3e6d-8ba2-2640f866e929.roa (raw, json) Hash identifier: xcn0XlYeLFY3PV4wck8Q10MnMxT/82PT+v/lSAt9n1o= Subject key identifier: 78:75:D2:3C:0B:79:39:7D:93:74:C4:AF:5D:4D:FF:83:8E:6D:87:E7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49745F1CCE015AAA44DFA980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/45a2f1b3-32d0-3e6d-8ba2-2640f866e929.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2914 IP address blocks: 209.101.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:5f:1c:ce:01:5a:aa:44:df:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=326cbe0c-509d-4151-b8dd-49dc472f5e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:8a:e9:53:1e:2c:7f:a4:d3:77:d9:a2:f8: b4:39:95:22:0a:88:19:a0:a0:70:5e:79:42:0c:17: 70:45:95:f5:52:db:98:12:5d:7f:9e:70:e9:2f:e9: 6e:b9:60:06:60:f3:db:1f:01:98:b3:6a:13:b2:17: 82:14:9e:1b:14:36:bc:f9:24:01:3b:cd:6a:52:c1: 8d:0f:13:5a:aa:57:f5:9d:bc:50:2b:cb:58:ce:15: 68:d1:ef:7d:29:37:53:3e:0c:26:95:5e:d3:02:13: 66:1c:25:c1:cd:4a:fc:c3:ac:3e:30:a1:ff:2d:26: d7:e1:b0:84:7e:c2:5e:f2:20:30:a1:53:cd:c8:ce: bb:e8:cd:18:82:b1:5e:5f:30:83:e3:4d:35:6d:c9: 36:17:b9:20:18:38:48:8c:98:10:72:3b:9b:56:a7: 9b:b9:14:75:c6:0f:29:33:ef:c3:7c:a0:86:00:89: 0d:c7:16:fb:74:be:b3:63:c6:9c:bc:09:26:57:b8: 84:e3:6d:72:3d:0e:82:04:32:ef:c4:da:94:e2:72: ed:37:73:15:fd:58:79:65:9e:55:66:85:b5:64:68: d9:b7:f0:2b:9a:ce:20:7e:20:6d:41:9e:07:90:43: cb:85:25:4d:3a:fd:fc:07:3e:3f:02:4e:e0:be:74: 74:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:75:D2:3C:0B:79:39:7D:93:74:C4:AF:5D:4D:FF:83:8E:6D:87:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/45a2f1b3-32d0-3e6d-8ba2-2640f866e929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:62:27:29:8c:02:b0:34:21:c4:96:73:6a:9b:01:f8:60:83: ff:19:c6:d6:26:d1:44:16:ba:a5:ea:74:30:a7:56:03:e6:69: 83:f5:76:70:93:65:02:b4:01:24:cf:b0:6e:ea:7a:da:bd:6e: 5b:76:0e:ae:19:db:21:a0:dc:34:4a:16:a6:fb:cd:f7:d9:e6: f7:e5:56:06:79:39:90:57:4c:2b:f8:6e:f1:ac:ff:57:af:d8: 55:a9:97:a8:1f:fc:3d:5b:65:c9:7e:c4:f6:0d:be:be:5a:6d: 04:d0:9f:97:b5:5d:b6:28:04:87:9a:0f:65:d7:43:93:2a:e0: 32:64:dc:43:d9:46:ec:cd:ac:97:95:1b:23:f2:90:7e:d6:c0: 9d:e7:c7:c9:36:44:4b:47:6a:bd:dd:d5:49:51:6f:7e:c5:61: 41:f4:68:7c:ff:6c:65:c1:93:0b:75:08:b1:9b:77:55:7e:56: 1f:39:08:87:6b:b4:3f:df:0c:34:3a:db:b7:f9:8e:56:77:ac: 90:08:08:0d:be:e6:bc:02:cf:3d:3a:55:6f:1a:cc:e7:38:05: bb:ed:6f:83:65:53:45:e2:23:7f:7d:ee:92:7c:88:70:37:83: 45:18:10:1a:ef:2f:82:5f:89:85:20:f9:20:fd:80:75:56:99: eb:04:06:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdF8czgFaqkTfqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzI2Y2JlMGMtNTA5ZC00MTUxLWI4ZGQtNDlkYzQ3MmY1ZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1uK6VMeLH+k03fZovi0OZUiCogZoKBwXnlC DBdwRZX1UtuYEl1/nnDpL+luuWAGYPPbHwGYs2oTsheCFJ4bFDa8+SQBO81qUsGN DxNaqlf1nbxQK8tYzhVo0e99KTdTPgwmlV7TAhNmHCXBzUr8w6w+MKH/LSbX4bCE fsJe8iAwoVPNyM676M0YgrFeXzCD4001bck2F7kgGDhIjJgQcjubVqebuRR1xg8p M+/DfKCGAIkNxxb7dL6zY8acvAkmV7iE421yPQ6CBDLvxNqU4nLtN3MV/Vh5ZZ5V ZoW1ZGjZt/Arms4gfiBtQZ4HkEPLhSVNOv38Bz4/Ak7gvnR0owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHh10jwLeTl9k3TEr11N/4OObYfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDVhMmYxYjMtMzJkMC0z ZTZkLThiYTItMjY0MGY4NjZlOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNiJymMArA0IcSWc2qbAfhgg/8ZxtYm0UQWuqXqdDCnVgPmaYP1dnCT ZQK0ASTPsG7qetq9blt2Dq4Z2yGg3DRKFqb7zffZ5vflVgZ5OZBXTCv4bvGs/1ev 2FWpl6gf/D1bZcl+xPYNvr5abQTQn5e1XbYoBIeaD2XXQ5Mq4DJk3EPZRuzNrJeV GyPykH7WwJ3nx8k2REtHar3d1UlRb37FYUH0aHz/bGXBkwt1CLGbd1V+Vh85CIdr tD/fDDQ627f5jlZ3rJAICA2+5rwCzz06VW8azOc4Bbvtb4NlU0XiI3997pJ8iHA3 g0UYEBrvL4JfiYUg+SD9gHVWmesEBjc= -----END CERTIFICATE-----Generated at Sat Sep 26 07:51:25 2026 by rpki-client