$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9833be99-92e9-3b4b-8554-3061b5775993.roa File: 9833be99-92e9-3b4b-8554-3061b5775993.roa (raw, json) Hash identifier: 7QaS2Wi7s4XJfdhD8PlQog+Vyatlk4U+sgjHWOKPLgg= Subject key identifier: 1C:21:6C:84:45:C4:C3:23:A7:26:DD:59:C4:68:FE:26:14:B9:FA:EF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EFCACEE18952F27E570A5BA00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9833be99-92e9-3b4b-8554-3061b5775993.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 834 IP address blocks: 209.101.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:ee:18:95:2f:27:e5:70:a5:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=ec6a7507-603c-45cb-9bc9-99f839f3da82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:75:04:cf:9b:3a:43:ca:9a:8c:1d:b2:55: ca:d4:0a:9b:cb:d3:de:ee:a6:91:fd:7d:43:38:8f: 1b:6b:2b:66:87:3e:87:37:0e:cb:11:88:e6:3e:d1: ea:74:c4:66:90:2d:8d:71:c6:e6:99:d7:71:95:61: 19:c0:40:85:26:fa:c7:86:fc:45:16:47:e1:bf:f0: ca:db:39:6c:8e:7e:a9:a8:20:1a:3f:4a:9d:d1:12: e4:b0:d8:7c:bf:69:7e:b0:96:06:e6:6f:0b:4f:12: 15:b2:b0:c6:24:a1:b9:f8:49:7a:c9:8d:f6:0c:b9: d8:8a:f7:ee:fb:b4:51:f7:d8:71:ed:6c:3c:1c:6a: 6a:25:d5:a7:29:c9:67:c5:8f:32:30:08:4a:d0:76: 03:21:e6:ac:af:42:dc:08:dd:61:d2:16:18:d4:81: 81:a6:c4:ea:4e:9d:25:e7:73:da:9c:03:3e:d5:d5: 4e:2d:35:2f:ff:b4:d0:8e:eb:72:ac:eb:63:ae:cc: 02:2b:6a:29:8e:60:67:30:bb:f8:b8:e2:f2:5d:ba: 64:51:b6:f1:0c:95:3e:f9:52:aa:a8:a0:ac:04:d8: 26:0f:e1:01:7a:8f:44:4b:f3:79:98:1f:8b:d6:e8: 10:d3:36:7b:f7:33:d4:c5:9e:df:0c:8a:49:1c:6f: f7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:21:6C:84:45:C4:C3:23:A7:26:DD:59:C4:68:FE:26:14:B9:FA:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9833be99-92e9-3b4b-8554-3061b5775993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:86:c3:04:82:fc:55:23:d5:11:38:d1:bd:4c:63:5f:f6:33: a6:e9:b4:1f:1e:41:02:3a:9d:7b:21:6a:fa:04:d5:94:1c:56: a7:b8:21:50:f3:bd:63:ce:58:23:d6:12:e6:64:97:37:cd:5b: 97:91:0e:e3:5b:6d:91:25:15:5b:7f:11:c9:af:74:d4:ba:f8: b7:d9:4e:25:46:de:fe:53:c0:33:00:e2:93:67:46:30:85:df: b7:77:85:69:e9:b2:22:bf:bb:09:71:b7:e4:ce:20:ac:5b:ec: 30:1b:fb:9c:a7:5a:97:f0:f8:82:e0:91:f7:b3:bd:8e:a3:51: 9f:ee:4f:e8:77:c2:d2:b6:98:cb:2d:cd:77:d0:e2:21:ef:bc: da:21:fd:e8:76:f3:00:db:55:e4:7a:8f:28:61:31:bb:a1:b9: 50:e4:7f:06:15:e0:7c:04:7a:f1:6f:8d:04:eb:fa:34:fd:0c: 29:c1:4c:32:86:e6:d3:26:26:0b:c0:60:db:4a:0e:e2:4c:fe: 14:70:ff:07:2e:2c:41:c4:c4:5e:e9:bb:32:06:3a:cc:a7:bd: 5b:c2:99:6b:77:8d:50:e2:fe:37:f4:cf:f5:e8:03:e4:3b:78: 85:95:0d:db:45:c3:7d:d9:17:48:09:fa:6d:b6:51:e7:a3:5b: e1:fb:df:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rO4YlS8n5XClugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZWM2YTc1MDctNjAzYy00NWNiLTliYzktOTlmODM5ZjNkYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhd1BM+bOkPKmowdslXK1Aqby9Pe7qaR/X1D OI8baytmhz6HNw7LEYjmPtHqdMRmkC2NccbmmddxlWEZwECFJvrHhvxFFkfhv/DK 2zlsjn6pqCAaP0qd0RLksNh8v2l+sJYG5m8LTxIVsrDGJKG5+El6yY32DLnYivfu +7RR99hx7Ww8HGpqJdWnKclnxY8yMAhK0HYDIeasr0LcCN1h0hYY1IGBpsTqTp0l 53PanAM+1dVOLTUv/7TQjutyrOtjrswCK2opjmBnMLv4uOLyXbpkUbbxDJU++VKq qKCsBNgmD+EBeo9ES/N5mB+L1ugQ0zZ79zPUxZ7fDIpJHG/3cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwhbIRFxMMjpybdWcRo/iYUufrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTgzM2JlOTktOTJlOS0z YjRiLTg1NTQtMzA2MWI1Nzc1OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKGwwSC/FUj1RE40b1MY1/2M6bptB8eQQI6nXshavoE1ZQcVqe4IVDz vWPOWCPWEuZklzfNW5eRDuNbbZElFVt/EcmvdNS6+LfZTiVG3v5TwDMA4pNnRjCF 37d3hWnpsiK/uwlxt+TOIKxb7DAb+5ynWpfw+ILgkfezvY6jUZ/uT+h3wtK2mMst zXfQ4iHvvNoh/eh28wDbVeR6jyhhMbuhuVDkfwYV4HwEevFvjQTr+jT9DCnBTDKG 5tMmJgvAYNtKDuJM/hRw/wcuLEHExF7puzIGOsynvVvCmWt3jVDi/jf0z/XoA+Q7 eIWVDdtFw33ZF0gJ+m22UeejW+H735k= -----END CERTIFICATE-----Generated at Sun Oct 11 07:41:13 2026 by rpki-client