$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e91139a-1899-321a-a9d8-e06b5d529e8c.roa File: 7e91139a-1899-321a-a9d8-e06b5d529e8c.roa (raw, json) Hash identifier: 1d36qSnbne4KtactPPAK00VSXzzcrDTab5i7PUJvrF8= Subject key identifier: 2E:6B:27:5C:CE:21:AC:09:9E:66:3D:D7:A4:7C:CB:4D:B6:97:6D:E3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F30526EDAFE5CF388970B5780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e91139a-1899-321a-a9d8-e06b5d529e8c.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 399955 IP address blocks: 209.101.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:6e:da:fe:5c:f3:88:97:0b:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=4c3464cf-0e66-4b66-898f-645500a8de01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:41:70:3a:8d:5f:1f:35:31:84:af:a7:5c:66: 1a:2d:a4:69:76:28:82:3f:42:0a:25:36:c8:5c:c3: be:58:90:ef:74:5a:98:0f:8b:f2:a2:dd:91:6f:3b: b4:37:6e:7d:36:be:a9:69:a7:a3:b9:da:0f:9a:8c: 94:65:9a:d3:9a:a6:bc:d2:22:82:10:1d:c8:72:a3: ff:c7:93:0c:e1:d8:bd:50:d5:ec:dd:4c:b8:96:11: a5:6e:d6:62:9d:6b:3f:9d:05:b4:a0:6c:bb:d4:d9: f4:7f:3f:b7:08:50:aa:c6:3c:55:e8:b5:9f:e0:8e: 9e:49:38:d1:b1:d3:c7:69:92:cc:96:17:03:ad:b6: 76:2f:de:48:d9:a5:cb:33:59:a5:22:31:7b:2c:6c: cd:6f:32:1f:a3:2b:61:cd:f0:cb:64:f5:1c:a5:01: b4:79:38:ea:df:52:a9:23:db:b8:be:bb:5e:e1:12: 26:a0:5a:ec:95:b3:f6:a7:77:be:42:df:e7:9f:2f: 35:1f:75:1c:22:fd:40:01:08:b0:b8:6c:00:c4:c6: bf:48:68:23:f8:4a:85:31:19:2a:b3:68:64:13:dc: 84:40:ba:53:33:a2:1f:95:d4:59:1b:bc:f6:4b:9a: bf:4e:44:e4:81:a4:af:28:e9:aa:04:9c:22:45:74: 00:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6B:27:5C:CE:21:AC:09:9E:66:3D:D7:A4:7C:CB:4D:B6:97:6D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e91139a-1899-321a-a9d8-e06b5d529e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:22:be:bc:74:a3:c8:e9:16:2f:8a:c0:57:2d:d3:ca:eb:c2: ac:c9:9f:87:35:ac:79:6b:7d:81:c7:a8:0e:03:88:ad:57:57: 07:87:df:bb:c8:c9:76:86:79:51:6c:73:d4:4c:b4:fb:f1:aa: bf:ae:b6:43:c0:b6:3a:38:d4:82:31:29:58:2c:39:c1:8e:d3: 64:95:45:e5:4d:04:14:4a:b8:f6:c2:9c:cc:c7:f8:d5:3e:35: ce:dc:b0:ca:91:7a:d5:2d:5a:da:47:e3:20:b0:78:1b:b9:2f: a6:a0:82:de:c5:37:90:52:cc:a4:9f:1a:21:e0:94:d2:45:aa: 5c:2a:5a:d2:66:f6:33:0f:07:62:45:ac:47:63:d5:ba:21:73: b8:99:cb:fb:0b:a8:5f:6a:ff:3b:38:6b:e6:ef:e5:33:3b:06: ec:bc:90:2a:d2:64:ce:bd:f8:c2:32:15:1f:ee:bd:76:05:0e: 80:ba:67:af:8b:a0:62:76:50:01:e2:cd:3f:46:a8:d2:7f:e8: 46:fc:a0:a5:79:11:01:45:27:a7:61:eb:7b:20:d0:3f:3b:ce: 88:02:38:37:18:f7:d7:5a:eb:fb:e8:59:0b:4c:53:39:6b:bc: 54:ad:75:c5:a7:f0:06:31:e2:24:b0:88:a0:17:7a:7b:63:9a: a9:10:8e:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUm7a/lzziJcLV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk NGMzNDY0Y2YtMGU2Ni00YjY2LTg5OGYtNjQ1NTAwYThkZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEFwOo1fHzUxhK+nXGYaLaRpdiiCP0IKJTbI XMO+WJDvdFqYD4vyot2Rbzu0N259Nr6paaejudoPmoyUZZrTmqa80iKCEB3IcqP/ x5MM4di9UNXs3Uy4lhGlbtZinWs/nQW0oGy71Nn0fz+3CFCqxjxV6LWf4I6eSTjR sdPHaZLMlhcDrbZ2L95I2aXLM1mlIjF7LGzNbzIfoythzfDLZPUcpQG0eTjq31Kp I9u4vrte4RImoFrslbP2p3e+Qt/nny81H3UcIv1AAQiwuGwAxMa/SGgj+EqFMRkq s2hkE9yEQLpTM6IfldRZG7z2S5q/TkTkgaSvKOmqBJwiRXQAEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5rJ1zOIawJnmY916R8y022l23jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2U5MTEzOWEtMTg5OS0z MjFhLWE5ZDgtZTA2YjVkNTI5ZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUivrx0o8jpFi+KwFct08rrwqzJn4c1rHlrfYHHqA4DiK1XVweH37vI yXaGeVFsc9RMtPvxqr+utkPAtjo41IIxKVgsOcGO02SVReVNBBRKuPbCnMzH+NU+ Nc7csMqRetUtWtpH4yCweBu5L6aggt7FN5BSzKSfGiHglNJFqlwqWtJm9jMPB2JF rEdj1bohc7iZy/sLqF9q/zs4a+bv5TM7Buy8kCrSZM69+MIyFR/uvXYFDoC6Z6+L oGJ2UAHizT9GqNJ/6Eb8oKV5EQFFJ6dh63sg0D87zogCODcY99da6/voWQtMUzlr vFStdcWn8AYx4iSwiKAXentjmqkQjiA= -----END CERTIFICATE-----Generated at Sun Sep 27 12:46:05 2026 by rpki-client