$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa File: 8703fce2-71f2-3ab4-962f-b12e334f9207.roa (raw, json) Hash identifier: 6uH6qO8hsxX7ThEhrfWEXTv5ytdMCZmKQJWw1RjOkRg= Subject key identifier: 86:41:D8:95:19:F1:CF:1C:89:93:D0:7E:74:4F:7B:E0:3F:40:3E:5A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F42783CD13DF4238B1F7CAD80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:3c:d1:3d:f4:23:8b:1f:7c:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=98f53889-7116-480b-886d-fb30e9bd0514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a3:d2:e2:9d:0b:d8:2c:7a:d7:02:7a:b2:96: 44:36:88:81:53:ae:ca:e4:16:ce:c0:57:7a:f0:f5: 50:60:4b:b1:c9:be:66:4b:8d:3f:e7:c1:af:39:bb: 0e:d0:55:58:ae:74:d6:1d:a0:10:4d:29:55:ab:9f: d7:a5:ec:28:13:89:c5:74:07:c2:3d:05:79:37:12: 52:be:65:76:7e:28:66:21:92:1b:ac:5d:fb:99:e8: 4a:b1:af:7f:1b:e2:f8:cc:73:d8:d3:9a:59:95:57: e8:56:86:f3:81:25:22:f8:06:8d:b0:75:65:7a:8b: 79:26:73:19:0e:56:28:df:ba:e5:32:97:a1:b5:88: fb:1b:9f:77:61:65:39:fe:b4:b8:8b:5b:4c:7a:3f: 58:2e:bb:7e:a9:59:63:06:77:55:fa:9f:d0:34:49: 83:d3:ad:4a:98:91:ef:6e:97:65:25:28:0c:57:3e: 58:25:b4:2c:dc:36:03:54:7c:55:28:9f:fe:fe:35: 60:d3:b4:41:0f:2e:79:f0:3a:0f:83:22:46:a3:ef: 3f:22:57:60:89:61:1c:5e:de:fa:33:54:3b:d1:2c: 1d:cc:b1:ae:52:03:0a:4b:e6:3b:4c:d5:84:dc:1e: b6:f3:4e:bf:c5:2b:42:88:71:ce:b4:99:a0:10:08: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:41:D8:95:19:F1:CF:1C:89:93:D0:7E:74:4F:7B:E0:3F:40:3E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ef:bf:84:ae:4b:72:4c:c9:fc:56:88:ed:e9:50:6d:81:f4: d3:09:64:85:c2:d1:58:85:04:38:5f:67:1f:bc:cb:55:ce:99: a6:f5:dd:47:65:29:bb:00:18:b2:29:e4:ae:c0:6f:27:f4:33: c2:ef:9b:40:28:dc:cc:fc:f7:22:54:9c:f3:ca:e9:f6:4e:68: 55:56:e5:a4:c9:1c:f3:0c:a2:00:a7:d6:56:be:f6:b6:b4:ac: cd:70:d5:4b:75:aa:04:0e:09:ed:6b:72:fa:31:42:80:a3:c5: 2c:b1:d2:fd:41:44:b2:53:34:a6:5c:9c:77:b2:f9:89:ec:87: 7e:0b:8a:95:c8:d4:8b:e9:7d:bf:ae:8e:6b:f6:69:e0:7f:2b: a2:d3:c2:8c:03:10:ab:cd:2a:c8:05:7f:61:29:8e:3e:54:a3: 5d:41:ae:7c:db:05:2b:48:f8:a8:b6:d2:b4:e3:01:7e:3d:d2: d3:30:c2:76:25:6d:0e:70:e8:b4:d6:89:e2:b4:c0:52:bd:67: f8:ff:b3:03:36:2f:5a:f9:29:52:22:18:32:ad:5d:8d:8f:a7: 7f:9c:e5:76:e2:69:51:7f:36:4d:e3:22:db:8e:5e:33:4d:d8: 98:4a:31:47:32:a8:63:1c:3a:11:a4:d6:04:62:fa:9c:8a:dd: a9:ad:31:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeDzRPfQjix98rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk OThmNTM4ODktNzExNi00ODBiLTg4NmQtZmIzMGU5YmQwNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaPS4p0L2Cx61wJ6spZENoiBU67K5BbOwFd6 8PVQYEuxyb5mS40/58GvObsO0FVYrnTWHaAQTSlVq5/XpewoE4nFdAfCPQV5NxJS vmV2fihmIZIbrF37mehKsa9/G+L4zHPY05pZlVfoVobzgSUi+AaNsHVleot5JnMZ DlYo37rlMpehtYj7G593YWU5/rS4i1tMej9YLrt+qVljBndV+p/QNEmD061KmJHv bpdlJSgMVz5YJbQs3DYDVHxVKJ/+/jVg07RBDy558DoPgyJGo+8/IldgiWEcXt76 M1Q70SwdzLGuUgMKS+Y7TNWE3B62806/xStCiHHOtJmgEAiS3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZB2JUZ8c8ciZPQfnRPe+A/QD5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODcwM2ZjZTItNzFmMi0z YWI0LTk2MmYtYjEyZTMzNGY5MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnvv4SuS3JMyfxWiO3pUG2B9NMJZIXC0ViFBDhfZx+8y1XOmab13Udl KbsAGLIp5K7Abyf0M8Lvm0Ao3Mz89yJUnPPK6fZOaFVW5aTJHPMMogCn1la+9ra0 rM1w1Ut1qgQOCe1rcvoxQoCjxSyx0v1BRLJTNKZcnHey+Ynsh34LipXI1Ivpfb+u jmv2aeB/K6LTwowDEKvNKsgFf2Epjj5Uo11BrnzbBStI+Ki20rTjAX490tMwwnYl bQ5w6LTWieK0wFK9Z/j/swM2L1r5KVIiGDKtXY2Pp3+c5XbiaVF/Nk3jItuOXjNN 2JhKMUcyqGMcOhGk1gRi+pyK3amtMU8= -----END CERTIFICATE-----Generated at Tue Sep 29 00:56:46 2026 by rpki-client