$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa File: 4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa (raw, json) Hash identifier: BaE0jVcl6Fm0N8HEnVpq6FT76jAKvoShzjm2wuAXYUM= Subject key identifier: 9D:64:A4:07:5A:F5:A5:D7:9F:5A:04:1F:CB:9E:74:27:76:07:4B:55 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4277D203D7E5F86751136280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:d2:03:d7:e5:f8:67:51:13:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=9c67d72c-3317-4e17-80ec-adb04780efc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:db:06:45:00:d3:61:08:aa:80:34:a0:a6:99: eb:00:bc:16:d3:d1:0b:33:bb:3a:17:69:f8:84:27: 8e:ef:ab:e5:45:45:10:1c:32:ad:87:0e:4d:02:ad: 80:a7:64:94:40:23:40:80:5f:7d:1b:d1:e3:c6:c6: f3:b9:76:1e:87:13:a9:45:05:73:36:28:0c:e5:0f: 3d:05:66:40:cc:06:34:8c:70:da:a1:21:1c:09:92: 8c:b2:f5:ce:d9:d7:55:bf:10:d8:cd:54:99:04:e4: cf:8f:78:11:9d:60:37:f8:24:d6:f2:35:2c:57:9c: 9e:be:c4:cc:54:31:ce:e7:3a:cd:e3:ea:00:cc:2f: f4:aa:94:58:b2:aa:5d:97:c7:a4:00:9c:0b:94:79: 67:20:42:8c:a4:ba:dc:e8:f5:bb:39:c4:19:da:08: 37:d1:96:5c:ea:a5:22:b6:d5:78:31:38:4a:9a:76: 82:ea:5e:39:d1:f0:75:c4:3e:10:84:a8:08:7a:35: 67:f5:e5:c1:40:f1:bc:51:db:9f:ac:01:92:44:08: 6c:f9:af:68:29:ac:ca:51:d5:86:23:d1:c2:cc:88: c3:93:c4:7e:8f:df:80:84:35:fd:81:14:a8:30:85: f3:6e:0e:33:6d:ea:0d:97:ba:87:14:31:e5:2a:26: a5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:64:A4:07:5A:F5:A5:D7:9F:5A:04:1F:CB:9E:74:27:76:07:4B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f8:ab:64:68:ca:d6:69:53:25:96:56:46:e9:22:e9:c3:e0: c6:f0:a9:bf:2c:63:7d:a8:7d:3a:3e:83:a3:5c:1a:96:1a:9f: c9:6e:ce:34:77:bb:03:ef:f5:5e:87:0c:47:98:e3:c8:5e:34: c3:17:12:d9:8f:99:1b:eb:53:3e:4a:aa:7c:35:f9:0f:4b:b4: ee:a2:eb:ac:ba:2b:d8:e8:7e:81:5c:9e:c5:37:4d:ab:05:ce: 1f:c1:44:fa:62:a6:1c:03:a8:6f:c2:c2:e1:3a:70:69:cf:48: 3b:98:61:2e:ef:ff:9b:9f:fc:24:7a:6c:15:19:28:33:a0:90: 4a:b8:88:0b:0e:68:47:42:21:2f:66:90:53:64:e4:61:a7:f2: 5a:89:52:cf:65:e6:5d:bc:6f:ef:e6:8c:26:73:a4:27:03:86: 24:a2:67:d6:08:3b:1d:9f:da:c8:4a:74:46:83:73:76:a1:de: 17:79:65:eb:0a:3e:a2:3b:ec:e4:d5:82:1b:1a:b2:32:3a:db: 21:a2:09:85:18:c8:b5:e3:ba:46:66:58:ec:83:e7:c6:11:fb: 27:75:c5:ad:b0:08:26:0a:ba:ab:47:ab:9c:f6:8e:a6:3e:0f: b0:e0:90:a7:c4:be:62:87:d1:61:5c:8c:47:f5:fd:9f:a6:54: e4:b5:ca:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd9ID1+X4Z1ETYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk OWM2N2Q3MmMtMzMxNy00ZTE3LTgwZWMtYWRiMDQ3ODBlZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NsGRQDTYQiqgDSgppnrALwW09ELM7s6F2n4 hCeO76vlRUUQHDKthw5NAq2Ap2SUQCNAgF99G9HjxsbzuXYehxOpRQVzNigM5Q89 BWZAzAY0jHDaoSEcCZKMsvXO2ddVvxDYzVSZBOTPj3gRnWA3+CTW8jUsV5yevsTM VDHO5zrN4+oAzC/0qpRYsqpdl8ekAJwLlHlnIEKMpLrc6PW7OcQZ2gg30ZZc6qUi ttV4MThKmnaC6l450fB1xD4QhKgIejVn9eXBQPG8UdufrAGSRAhs+a9oKazKUdWG I9HCzIjDk8R+j9+AhDX9gRSoMIXzbg4zbeoNl7qHFDHlKialUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1kpAda9aXXn1oEH8uedCd2B0tVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGRiZmJhOTYtZWQ3Yi0z ZGVlLWE2MTQtNTMwZmFhZjZmY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX4q2RoytZpUyWWVkbpIunD4Mbwqb8sY32ofTo+g6NcGpYan8luzjR3 uwPv9V6HDEeY48heNMMXEtmPmRvrUz5Kqnw1+Q9LtO6i66y6K9jofoFcnsU3TasF zh/BRPpiphwDqG/CwuE6cGnPSDuYYS7v/5uf/CR6bBUZKDOgkEq4iAsOaEdCIS9m kFNk5GGn8lqJUs9l5l28b+/mjCZzpCcDhiSiZ9YIOx2f2shKdEaDc3ah3hd5ZesK PqI77OTVghsasjI62yGiCYUYyLXjukZmWOyD58YR+yd1xa2wCCYKuqtHq5z2jqY+ D7DgkKfEvmKH0WFcjEf1/Z+mVOS1ymM= -----END CERTIFICATE-----Generated at Sun Sep 27 19:27:46 2026 by rpki-client