$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9fe280af-482a-310b-a4d2-61a1e5e83d5a.roa File: 9fe280af-482a-310b-a4d2-61a1e5e83d5a.roa (raw, json) Hash identifier: udOY6AzmpR6oKf2m7OjgeH5GLY338RGRmoCu9DYxRKc= Subject key identifier: BE:17:4A:AE:BB:19:BA:8A:3E:B5:C6:40:EA:53:95:BB:22:FB:4C:06 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DBFD075A8CE8955372108AB00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9fe280af-482a-310b-a4d2-61a1e5e83d5a.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 9304 IP address blocks: 209.101.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:75:a8:ce:89:55:37:21:08:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=a7b75af1-3190-4955-8d9e-f3661323ba9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:40:4e:a5:49:38:f9:3b:de:02:06:29:dd: 27:95:d0:7c:b9:7b:60:83:4a:a9:69:40:cd:ec:bc: 29:f9:b8:1e:9e:e7:3b:ec:29:40:e1:02:72:bb:84: 86:e7:08:31:ff:d5:fe:b0:5d:26:4f:7d:fd:4b:8f: 06:80:b2:9a:5a:dc:d9:4b:9e:b5:0e:b0:01:e0:ba: 4a:22:5b:2c:4b:77:83:ee:93:31:57:5d:40:5f:a9: a1:6e:fc:ef:e6:a2:4e:20:2b:b8:82:59:af:70:c5: 82:35:07:72:3a:38:ee:95:5d:9a:b2:30:f5:39:e7: c8:27:84:eb:bc:b8:ca:db:1d:c0:a4:84:40:bf:31: c2:8a:1b:b9:6d:62:e7:a1:f5:55:09:25:29:b1:0d: 80:69:f5:1a:8c:3b:a0:0e:e8:2b:cc:e5:51:58:b7: 3d:ef:1e:38:66:19:73:93:52:8c:b7:77:01:ea:59: 7c:6a:7b:90:13:cf:fb:46:b1:ff:c7:3b:a8:0c:e2: 29:03:be:54:6a:ac:58:2e:3a:ce:7c:4a:95:b6:d5: 39:dd:07:25:11:fd:46:98:8c:86:4c:ed:b5:e8:0e: 81:f1:be:08:ce:b8:99:53:d8:b1:03:18:0f:6f:d7: fb:ca:b0:e0:18:93:14:da:55:6b:05:db:2f:47:01: 9c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:17:4A:AE:BB:19:BA:8A:3E:B5:C6:40:EA:53:95:BB:22:FB:4C:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9fe280af-482a-310b-a4d2-61a1e5e83d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:dd:6a:3b:b4:72:74:ca:97:2f:8e:1b:49:28:aa:01:2a:af: a9:2e:c8:52:aa:7b:02:2a:0a:62:d9:39:7c:2a:df:8f:c1:3f: 89:72:1a:0b:c7:11:4c:40:b2:bc:97:5b:f7:ad:93:16:b8:2a: 39:ef:bd:0e:42:e3:2c:ae:74:1e:c0:a8:d5:de:d0:95:39:2b: b7:db:f2:0b:c4:bf:25:79:69:ae:bd:b1:dc:42:20:25:3c:53: 63:61:8c:83:43:9a:67:a2:0a:ef:d9:4a:1e:57:ee:3e:ed:df: 3c:a3:61:d0:41:15:ce:96:0b:de:d7:6d:1a:ab:27:7e:b4:b4: e0:12:62:42:4e:67:25:5d:c3:f8:d1:06:68:c0:74:26:0c:4d: dd:79:c7:f0:06:fd:6c:b9:af:a8:c3:a3:b6:0a:23:0b:f4:75: ab:3d:ef:09:58:a5:fc:66:9f:7e:62:20:ce:80:80:ce:e1:d3: 64:e7:64:61:52:fd:0b:75:bd:cc:ca:75:59:e1:db:28:3b:ab: 17:67:6a:41:ac:6b:58:d9:74:b4:a7:b2:4a:97:72:de:66:18: a4:76:cb:1f:e7:ac:56:13:29:10:02:c6:99:06:fb:c8:62:25: 9a:a2:d1:fb:1e:39:ad:c2:f7:0f:90:bd:ad:d1:56:67:bd:26: 37:d2:f1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0HWozolVNyEIqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk YTdiNzVhZjEtMzE5MC00OTU1LThkOWUtZjM2NjEzMjNiYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstRATqVJOPk73gIGKd0nldB8uXtgg0qpaUDN 7Lwp+bgenuc77ClA4QJyu4SG5wgx/9X+sF0mT339S48GgLKaWtzZS561DrAB4LpK IlssS3eD7pMxV11AX6mhbvzv5qJOICu4glmvcMWCNQdyOjjulV2asjD1OefIJ4Tr vLjK2x3ApIRAvzHCihu5bWLnofVVCSUpsQ2AafUajDugDugrzOVRWLc97x44Zhlz k1KMt3cB6ll8anuQE8/7RrH/xzuoDOIpA75UaqxYLjrOfEqVttU53QclEf1GmIyG TO216A6B8b4IzriZU9ixAxgPb9f7yrDgGJMU2lVrBdsvRwGcIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4XSq67GbqKPrXGQOpTlbsi+0wGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWZlMjgwYWYtNDgyYS0z MTBiLWE0ZDItNjFhMWU1ZTgzZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXdaju0cnTKly+OG0koqgEqr6kuyFKqewIqCmLZOXwq34/BP4lyGgvH EUxAsryXW/etkxa4KjnvvQ5C4yyudB7AqNXe0JU5K7fb8gvEvyV5aa69sdxCICU8 U2NhjINDmmeiCu/ZSh5X7j7t3zyjYdBBFc6WC97XbRqrJ360tOASYkJOZyVdw/jR BmjAdCYMTd15x/AG/Wy5r6jDo7YKIwv0das97wlYpfxmn35iIM6AgM7h02TnZGFS /Qt1vczKdVnh2yg7qxdnakGsa1jZdLSnskqXct5mGKR2yx/nrFYTKRACxpkG+8hi JZqi0fseOa3C9w+Qva3RVme9JjfS8Qk= -----END CERTIFICATE-----Generated at Wed May 13 11:38:29 2026 by rpki-client