$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9038ba46-0193-3027-9873-dc15e410708a.roa File: 9038ba46-0193-3027-9873-dc15e410708a.roa (raw, json) Hash identifier: WhRodEa2b5nqmtEYu8921pOrFJWRGqGxoS6ICYAqVro= Subject key identifier: C7:B3:83:95:68:F7:CF:CC:4E:EE:A1:CD:11:68:65:D1:DF:71:21:20 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F173239109E3C1297314FD200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9038ba46-0193-3027-9873-dc15e410708a.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 13347 IP address blocks: 209.101.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:39:10:9e:3c:12:97:31:4f:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=e81bffcb-d08b-41a9-9490-f6ac2ec5c5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:3f:22:b5:b8:90:a5:8d:9a:0f:89:08:a1: fa:5b:1b:4e:19:1e:8f:98:8d:d2:c3:74:55:72:0f: 48:26:52:23:8a:ae:4a:16:85:c1:69:02:7b:46:23: 15:84:7e:71:3a:12:46:c2:9e:84:d2:18:b6:bf:81: 49:32:3a:31:e8:cf:de:7e:5f:d8:13:00:e6:b9:9e: e0:e1:1b:6d:74:76:e0:96:ff:b8:3b:43:8a:aa:ea: 6c:fd:ac:70:77:11:5d:79:5c:d2:58:19:6a:a8:84: 4c:0f:ee:3f:ed:a4:a1:40:15:c9:53:60:25:7b:5f: 9b:59:b5:68:4c:91:5a:fc:28:2d:5c:73:cd:ff:16: 22:9f:ef:09:3e:d3:bd:9a:fc:93:1c:69:2c:3f:fa: 8a:fc:86:ad:44:93:5e:02:ee:94:a6:19:71:50:a3: 51:94:69:17:19:55:b3:bc:54:b5:1f:7e:4a:19:21: 2b:3b:c1:89:02:0c:2b:37:7c:ce:1b:fa:de:ff:11: 38:eb:e2:53:4c:7d:5b:5f:0d:b5:03:f2:5c:01:d7: a5:af:cb:b7:5a:9e:f1:6a:0c:60:fd:4f:38:6c:8d: fb:30:ef:73:5a:a9:fc:2c:5f:7b:db:ad:ea:36:50: 87:cd:24:b6:b3:40:04:e0:f2:06:0b:bd:a5:e3:b7: ba:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B3:83:95:68:F7:CF:CC:4E:EE:A1:CD:11:68:65:D1:DF:71:21:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9038ba46-0193-3027-9873-dc15e410708a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ec:d7:fa:bd:8e:5a:b1:e7:ef:dd:eb:64:9b:ec:6c:43:cc: f0:09:98:23:80:31:cf:95:33:f9:6b:cf:e4:a5:ab:0b:54:37: dc:ed:b2:14:46:c1:a7:8b:99:f2:45:9d:51:4a:f3:76:c9:35: 69:1b:4f:7c:67:c8:25:57:0f:e8:43:05:8c:de:c1:27:c0:b1: 26:e4:7a:6a:36:1d:6e:b2:76:29:a1:92:7e:d6:56:eb:18:0d: 7b:9e:b2:d8:81:9e:39:55:e5:af:fb:13:fb:74:e9:55:b4:a1: 0d:02:e1:8a:6f:93:b0:7c:2b:aa:dd:36:4c:0a:52:51:2f:7b: 68:7d:51:43:ec:3e:0b:17:fe:42:a8:b1:6e:9e:5b:49:00:8b: cf:25:c1:01:56:40:97:72:67:d8:38:da:4d:fa:52:89:34:ba: ea:e9:35:98:80:17:b0:10:34:a4:2d:09:af:fc:ba:d0:53:dd: 8d:15:e7:53:41:50:29:a0:5d:d6:3c:6f:33:dd:04:5c:3c:e6: 8d:55:45:65:35:82:13:48:a7:07:1e:f2:1d:c9:f2:9a:5f:b7: a6:3b:b6:7e:b2:4a:5c:7f:78:54:64:a6:3d:af:a7:71:77:78: 15:55:59:79:da:30:4a:b9:82:46:d8:e2:ba:36:d5:79:a2:d5: 60:44:f2:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjkQnjwSlzFP0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZTgxYmZmY2ItZDA4Yi00MWE5LTk0OTAtZjZhYzJlYzVjNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleg/IrW4kKWNmg+JCKH6WxtOGR6PmI3Sw3RV cg9IJlIjiq5KFoXBaQJ7RiMVhH5xOhJGwp6E0hi2v4FJMjox6M/efl/YEwDmuZ7g 4RttdHbglv+4O0OKqups/axwdxFdeVzSWBlqqIRMD+4/7aShQBXJU2Ale1+bWbVo TJFa/CgtXHPN/xYin+8JPtO9mvyTHGksP/qK/IatRJNeAu6UphlxUKNRlGkXGVWz vFS1H35KGSErO8GJAgwrN3zOG/re/xE46+JTTH1bXw21A/JcAdelr8u3Wp7xagxg /U84bI37MO9zWqn8LF97263qNlCHzSS2s0AE4PIGC72l47e6XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMezg5Vo98/MTu6hzRFoZdHfcSEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTAzOGJhNDYtMDE5My0z MDI3LTk4NzMtZGMxNWU0MTA3MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXs1/q9jlqx5+/d62Sb7GxDzPAJmCOAMc+VM/lrz+SlqwtUN9ztshRG waeLmfJFnVFK83bJNWkbT3xnyCVXD+hDBYzewSfAsSbkemo2HW6ydimhkn7WVusY DXuestiBnjlV5a/7E/t06VW0oQ0C4Ypvk7B8K6rdNkwKUlEve2h9UUPsPgsX/kKo sW6eW0kAi88lwQFWQJdyZ9g42k36Uok0uurpNZiAF7AQNKQtCa/8utBT3Y0V51NB UCmgXdY8bzPdBFw85o1VRWU1ghNIpwce8h3J8ppft6Y7tn6ySlx/eFRkpj2vp3F3 eBVVWXnaMEq5gkbY4ro21Xmi1WBE8j0= -----END CERTIFICATE-----Generated at Sat Oct 10 16:58:12 2026 by rpki-client