$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8dbd10b1-07b5-358a-afee-4dce5675f190.roa File: 8dbd10b1-07b5-358a-afee-4dce5675f190.roa (raw, json) Hash identifier: TG1uycjBVaYNHrkyZyYrNUarJRdol8LjVLy+63cZRfU= Subject key identifier: 60:FF:2D:79:42:46:9E:70:35:88:42:2E:AF:99:45:37:FF:2D:4A:11 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4277D7DC899CDD7E7AED97CA Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8dbd10b1-07b5-358a-afee-4dce5675f190.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:d7:dc:89:9c:dd:7e:7a:ed:97:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=6cdfaf49-4ef8-4b48-a8a7-78eb146a58a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:20:b3:87:f2:d6:96:66:38:2d:36:1f:07:c5: 0c:6d:c8:04:b4:dd:a3:37:4a:ca:ac:f9:1c:7f:d2: 75:8a:be:5f:9e:98:4e:d6:9f:84:8f:8d:32:ae:bd: 3a:a7:a4:0a:66:cf:e4:00:52:be:61:a2:1d:73:a8: ea:6d:c8:21:0a:7c:5d:a9:ce:8c:0c:f6:f2:a7:bf: d1:09:4c:5c:44:6d:ab:d7:59:04:c0:74:b2:89:28: 4b:11:7f:fc:47:f1:70:09:1b:03:3d:8a:bb:6e:db: 77:8d:2f:d2:64:7b:48:5f:81:01:1c:c2:f7:29:84: 3f:3c:ce:00:22:1a:8b:a5:07:e2:4b:03:b2:b3:b6: dc:b8:c3:ae:e3:8a:d0:69:be:be:c1:31:52:fd:b8: cd:ac:39:8f:d5:cf:eb:7d:d8:84:b3:f1:c2:47:1e: 88:45:0c:b4:2b:36:0e:00:89:40:cc:ce:23:35:fd: 41:83:6e:d4:b9:eb:06:4d:0f:b4:28:3f:4d:9e:a1: 1a:e4:35:8a:cf:64:ad:d1:d6:37:6e:92:38:b3:59: 70:5a:1b:2e:36:10:f9:87:7a:2c:91:33:1f:75:2e: 8f:01:c4:43:16:5b:17:2c:27:9e:85:e1:86:44:e4: 28:c2:dd:87:e9:a3:27:9b:08:fa:74:76:a3:66:84: 97:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FF:2D:79:42:46:9E:70:35:88:42:2E:AF:99:45:37:FF:2D:4A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8dbd10b1-07b5-358a-afee-4dce5675f190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:39:6c:f4:d8:56:a0:3e:27:e5:a1:c2:5d:f6:3e:b1:49:08: a9:ce:64:48:8c:79:36:54:bd:e3:74:26:c8:d2:67:c6:79:cf: 97:76:6c:b6:94:9e:83:e6:17:70:7f:bd:c5:16:ed:7f:df:76: 23:25:b0:ff:c3:11:53:5e:63:cc:b7:89:a3:21:40:aa:0e:48: 47:04:a3:31:69:e3:b3:c4:ef:97:90:26:d8:0b:60:7e:40:f7: 7c:91:56:b3:c1:73:99:8a:17:1d:ac:05:83:c1:ec:df:b4:4b: 27:3e:de:56:f9:13:1b:f1:e2:f1:eb:27:16:35:5a:0e:65:38: e6:df:bd:db:a1:29:e0:40:d4:5a:07:e3:8a:a3:fb:22:20:f8: 67:41:23:1b:b9:19:2f:d3:7b:a5:4e:67:91:47:60:08:76:03: 09:57:4c:57:b8:37:e6:8e:25:e1:bd:02:ef:3e:53:26:70:f6: 63:4c:94:0d:3b:e2:cb:52:2d:47:d7:e1:34:bf:9e:22:a1:c0: 07:45:5e:01:48:2b:b9:57:f9:2e:21:7b:ac:c9:6d:1a:a6:10: 4b:e7:77:ff:17:6a:93:67:b7:c8:64:28:60:8d:20:9f:53:08: 14:34:6d:a3:82:98:10:b2:e9:ba:fc:86:09:e4:45:cf:15:65: 54:2b:6e:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd9fciZzdfnrtl8owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NmNkZmFmNDktNGVmOC00YjQ4LWE4YTctNzhlYjE0NmE1OGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCCzh/LWlmY4LTYfB8UMbcgEtN2jN0rKrPkc f9J1ir5fnphO1p+Ej40yrr06p6QKZs/kAFK+YaIdc6jqbcghCnxdqc6MDPbyp7/R CUxcRG2r11kEwHSyiShLEX/8R/FwCRsDPYq7btt3jS/SZHtIX4EBHML3KYQ/PM4A IhqLpQfiSwOys7bcuMOu44rQab6+wTFS/bjNrDmP1c/rfdiEs/HCRx6IRQy0KzYO AIlAzM4jNf1Bg27UuesGTQ+0KD9NnqEa5DWKz2St0dY3bpI4s1lwWhsuNhD5h3os kTMfdS6PAcRDFlsXLCeeheGGROQowt2H6aMnmwj6dHajZoSXmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGD/LXlCRp5wNYhCLq+ZRTf/LUoRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGRiZDEwYjEtMDdiNS0z NThhLWFmZWUtNGRjZTU2NzVmMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB85bPTYVqA+J+Whwl32PrFJCKnOZEiMeTZUveN0JsjSZ8Z5z5d2bLaU noPmF3B/vcUW7X/fdiMlsP/DEVNeY8y3iaMhQKoOSEcEozFp47PE75eQJtgLYH5A 93yRVrPBc5mKFx2sBYPB7N+0Syc+3lb5Exvx4vHrJxY1Wg5lOObfvduhKeBA1FoH 44qj+yIg+GdBIxu5GS/Te6VOZ5FHYAh2AwlXTFe4N+aOJeG9Au8+UyZw9mNMlA07 4stSLUfX4TS/niKhwAdFXgFIK7lX+S4he6zJbRqmEEvnd/8XapNnt8hkKGCNIJ9T CBQ0baOCmBCy6br8hgnkRc8VZVQrbh4= -----END CERTIFICATE-----Generated at Sat Sep 26 15:31:58 2026 by rpki-client