$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5dbd998d-a750-3f80-bebd-298a7f1d9883.roa File: 5dbd998d-a750-3f80-bebd-298a7f1d9883.roa (raw, json) Hash identifier: +CQh/pSp9Iezlhd9QXDQLaPuD6GcTgmrmb4LxAcWmRo= Subject key identifier: 94:2D:40:46:9E:C6:8C:C6:3D:0E:45:91:A8:19:72:43:4C:80:29:B0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49747FCC21484D5D58D0BD80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5dbd998d-a750-3f80-bebd-298a7f1d9883.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2914 IP address blocks: 209.101.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:7f:cc:21:48:4d:5d:58:d0:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e99eb880-907a-4361-b27b-0f543777a100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:43:88:8c:c9:26:35:c0:1f:b0:dc:ba:b8: 50:cb:a7:29:8b:ab:c9:0c:23:17:05:41:f1:53:37: 7b:9d:66:ae:b6:c4:1c:7c:d1:c2:c5:65:4e:c7:87: f0:94:79:82:af:63:d3:d4:eb:fc:05:b7:dc:d2:85: 3c:e1:bf:66:77:f0:a4:1b:fc:a7:98:80:c5:a6:33: 10:7c:22:1e:e0:73:6d:1c:6f:3e:89:d9:fb:2b:9e: 0a:69:10:67:08:c2:be:08:4e:4e:d2:a5:3a:6c:55: 12:ad:dd:85:08:45:91:ad:21:4c:79:cb:a5:04:8d: 31:43:c3:15:17:f3:ec:b6:a8:c8:e8:04:d0:11:fb: 78:36:6f:c1:b6:0a:98:cc:29:8c:03:1a:74:5d:f4: 43:af:1e:48:7b:50:1b:34:01:83:54:8a:79:c9:e7: dc:38:0b:e7:70:4d:52:b0:50:28:1d:6d:32:2c:13: 34:37:7a:d6:de:6c:c8:da:a4:e4:bb:a3:2e:60:6c: 3c:17:c3:1b:5b:00:d6:7a:14:7a:bf:d3:42:04:0f: e0:56:06:03:35:f8:c9:aa:ce:e1:39:10:05:1e:d6: 3d:25:d0:96:b1:46:3a:49:dd:47:e9:6b:68:e9:5c: a0:36:96:96:a4:02:25:99:fe:96:ad:c2:d5:17:68: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2D:40:46:9E:C6:8C:C6:3D:0E:45:91:A8:19:72:43:4C:80:29:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5dbd998d-a750-3f80-bebd-298a7f1d9883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f6:c4:4b:57:92:9c:f7:dd:40:9d:e1:59:ed:a6:3b:bf:6e: e6:e0:c4:77:d3:ce:3b:59:c0:08:20:d6:ea:1a:83:f5:c4:a3: ac:58:26:92:78:b4:95:bd:7d:06:77:16:3f:a9:0b:57:a6:a4: aa:2e:43:69:35:33:40:c7:8f:63:be:86:67:22:8f:06:ce:ab: a7:21:67:2d:12:a1:d5:ad:02:fd:8b:65:12:da:64:c7:b3:21: 67:26:44:34:d2:95:05:39:fa:68:f7:8b:c3:64:6a:4b:8a:1d: 8e:a0:b5:e6:e9:87:fe:fa:a0:f8:eb:d5:4f:66:8e:b1:b1:51: 69:e7:30:cd:e6:ef:86:19:4d:fb:79:75:7b:0e:7e:a7:f9:99: fa:4e:06:f0:e3:2b:ea:60:7b:be:6c:fb:32:80:9d:c6:3e:d3: 09:0f:5d:6a:ae:87:29:15:c5:ce:c3:9e:af:62:5c:8e:f2:43: 91:83:f1:79:ab:b2:08:fd:fa:fa:6f:f5:fa:13:51:a7:f2:85: 82:b3:c4:76:37:71:45:b8:5e:e6:01:52:ac:ca:24:a0:a8:df: cd:75:54:4f:f9:0a:53:56:04:1b:08:78:95:85:fb:a2:b1:43: ad:75:9f:16:67:c2:a4:55:0c:78:d3:9b:a3:21:36:9d:76:a6: 3f:60:2d:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdH/MIUhNXVjQvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTk5ZWI4ODAtOTA3YS00MzYxLWIyN2ItMGY1NDM3NzdhMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiBDiIzJJjXAH7DcurhQy6cpi6vJDCMXBUHx Uzd7nWautsQcfNHCxWVOx4fwlHmCr2PT1Ov8Bbfc0oU84b9md/CkG/ynmIDFpjMQ fCIe4HNtHG8+idn7K54KaRBnCMK+CE5O0qU6bFUSrd2FCEWRrSFMeculBI0xQ8MV F/PstqjI6ATQEft4Nm/BtgqYzCmMAxp0XfRDrx5Ie1AbNAGDVIp5yefcOAvncE1S sFAoHW0yLBM0N3rW3mzI2qTku6MuYGw8F8MbWwDWehR6v9NCBA/gVgYDNfjJqs7h ORAFHtY9JdCWsUY6Sd1H6Wto6VygNpaWpAIlmf6WrcLVF2icpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQtQEaexozGPQ5FkagZckNMgCmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWRiZDk5OGQtYTc1MC0z ZjgwLWJlYmQtMjk4YTdmMWQ5ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH2xEtXkpz33UCd4Vntpju/bubgxHfTzjtZwAgg1uoag/XEo6xYJpJ4 tJW9fQZ3Fj+pC1empKouQ2k1M0DHj2O+hmcijwbOq6chZy0SodWtAv2LZRLaZMez IWcmRDTSlQU5+mj3i8NkakuKHY6gtebph/76oPjr1U9mjrGxUWnnMM3m74YZTft5 dXsOfqf5mfpOBvDjK+pge75s+zKAncY+0wkPXWquhykVxc7Dnq9iXI7yQ5GD8Xmr sgj9+vpv9foTUafyhYKzxHY3cUW4XuYBUqzKJKCo3811VE/5ClNWBBsIeJWF+6Kx Q611nxZnwqRVDHjTm6MhNp12pj9gLY8= -----END CERTIFICATE-----Generated at Mon Sep 28 06:22:50 2026 by rpki-client