$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c6f2988-1992-31c8-b280-0e89f1f7086e.roa File: 9c6f2988-1992-31c8-b280-0e89f1f7086e.roa (raw, json) Hash identifier: Gq8bEROBLsa5yRxnyNfBfLkWmHwZoA6GdiirhnUC5CM= Subject key identifier: 59:B1:2E:81:D9:54:99:07:72:E8:FE:C1:7A:79:1D:C1:64:8F:F5:03 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E885A58EB84FB58431F0BC700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c6f2988-1992-31c8-b280-0e89f1f7086e.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 16276 IP address blocks: 209.101.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:58:eb:84:fb:58:43:1f:0b:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=8be6ed36-f7d8-4b3d-9e8b-19f9a7d92074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:3c:f6:52:db:a8:a1:7d:5c:26:09:55:c1: 49:53:db:45:28:4a:7e:62:bc:19:be:dc:9a:8b:03: e6:35:0b:ad:63:1e:63:3d:d5:aa:ff:e1:99:20:b7: bf:bb:0d:fc:e0:63:97:86:06:62:f1:39:10:c6:76: ae:83:a2:e4:f4:f3:9d:e9:54:9d:89:05:e8:93:4d: 64:bd:ec:ce:44:db:ba:64:a5:af:6a:87:47:62:24: e5:52:29:c1:58:41:94:b8:53:0b:2e:a2:67:ef:1d: 39:42:77:96:76:ad:79:10:52:3c:57:ea:f7:f0:6a: 31:3b:3d:98:ac:96:ca:41:e9:74:a5:a6:43:7d:bb: 30:92:38:d5:73:45:be:b1:b2:b0:b6:49:7b:dd:cc: 33:5b:49:70:81:3a:bd:a5:22:3e:3c:c8:1f:4f:d4: 63:83:b5:50:50:b8:53:50:d9:a3:6b:ff:a2:77:2c: 0d:cd:d2:e8:ef:0a:0a:11:fb:20:b8:39:58:b2:e5: 15:bf:67:9f:72:78:9c:bb:c8:ae:fc:1a:76:46:27: 70:04:87:9d:1e:2b:94:b7:87:3e:b8:a9:7e:3c:71: 7b:7a:11:13:ac:cc:6f:1c:a6:e5:bd:40:36:e1:68: 03:54:a0:22:aa:dc:c8:13:9b:78:ea:52:e2:e4:7a: 13:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:2E:81:D9:54:99:07:72:E8:FE:C1:7A:79:1D:C1:64:8F:F5:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c6f2988-1992-31c8-b280-0e89f1f7086e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:97:36:ed:71:b3:0c:07:27:55:c6:e8:dc:e7:24:dc:a1:71: 0d:9a:55:ff:0b:7d:44:6a:f1:26:a5:2f:fd:5f:cb:95:d7:4c: 4f:dd:2f:07:ab:dc:a1:34:8e:dd:b1:62:d8:93:e3:b1:26:90: c1:dc:8d:aa:ac:62:83:5c:c7:5a:18:5d:0a:a9:e7:53:68:f7: 27:3b:d5:27:5e:9e:2f:f8:c9:1f:93:86:2d:39:a7:2a:dd:41: 77:56:de:51:d3:c1:9b:6d:80:b1:b4:a1:f9:0b:ce:28:3e:15: a6:a7:66:12:15:54:44:7d:7d:30:54:61:f8:19:e8:4e:5d:b1: ce:18:51:b3:39:8c:bc:ab:c3:61:67:1c:b5:6f:98:9e:dd:b2: c8:6e:30:d3:ea:71:73:18:1a:3d:3f:8d:96:f2:50:d4:fc:dd: c6:03:cf:3e:c3:b3:01:c7:da:f0:18:0a:4a:b4:0e:4b:7e:af: 18:90:ef:03:1d:db:56:c4:8d:f3:f4:8b:fd:f8:93:15:b9:72: 74:5d:dc:46:ee:67:ec:bb:b6:8b:72:a1:3c:ee:9c:cf:10:c4: f1:43:63:d8:f7:a9:f9:90:f8:41:11:f6:c2:5a:87:ba:ce:68: fe:42:09:0b:ca:32:df:b8:8f:cf:25:25:b2:b0:39:d0:82:06: cd:7b:9c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWljrhPtYQx8LxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk OGJlNmVkMzYtZjdkOC00YjNkLTllOGItMTlmOWE3ZDkyMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzio89lLbqKF9XCYJVcFJU9tFKEp+YrwZvtya iwPmNQutYx5jPdWq/+GZILe/uw384GOXhgZi8TkQxnaug6Lk9POd6VSdiQXok01k vezORNu6ZKWvaodHYiTlUinBWEGUuFMLLqJn7x05QneWdq15EFI8V+r38GoxOz2Y rJbKQel0paZDfbswkjjVc0W+sbKwtkl73cwzW0lwgTq9pSI+PMgfT9Rjg7VQULhT UNmja/+idywNzdLo7woKEfsguDlYsuUVv2efcnicu8iu/Bp2RidwBIedHiuUt4c+ uKl+PHF7ehETrMxvHKblvUA24WgDVKAiqtzIE5t46lLi5HoT1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmxLoHZVJkHcuj+wXp5HcFkj/UDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWM2ZjI5ODgtMTk5Mi0z MWM4LWIyODAtMGU4OWYxZjcwODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOXNu1xswwHJ1XG6NznJNyhcQ2aVf8LfURq8SalL/1fy5XXTE/dLwer 3KE0jt2xYtiT47EmkMHcjaqsYoNcx1oYXQqp51No9yc71Sdeni/4yR+Thi05pyrd QXdW3lHTwZttgLG0ofkLzig+FaanZhIVVER9fTBUYfgZ6E5dsc4YUbM5jLyrw2Fn HLVvmJ7dsshuMNPqcXMYGj0/jZbyUNT83cYDzz7DswHH2vAYCkq0Dkt+rxiQ7wMd 21bEjfP0i/34kxW5cnRd3EbuZ+y7totyoTzunM8QxPFDY9j3qfmQ+EER9sJah7rO aP5CCQvKMt+4j88lJbKwOdCCBs17nEE= -----END CERTIFICATE-----Generated at Thu Jul 23 21:58:44 2026 by rpki-client