$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a123fef2-a457-3457-ac7c-1b68161f2df7.roa File: a123fef2-a457-3457-ac7c-1b68161f2df7.roa (raw, json) Hash identifier: qFSQGMgVA4Pw7oqfwj7HPVcn9mE6be12db43SjhF2fA= Subject key identifier: BF:27:C4:A0:85:D9:DC:15:C4:E0:A1:34:A5:4C:BA:20:67:CE:95:C6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4974D6B3F795997C25A867C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a123fef2-a457-3457-ac7c-1b68161f2df7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 209.101.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d6:b3:f7:95:99:7c:25:a8:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4846c5f7-50a5-460f-8ff1-d5c265409bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:a8:14:ac:ca:75:3b:e2:bc:78:59:68:e4: cf:73:0f:aa:3e:bb:8b:63:eb:2c:2a:6d:18:98:16: 31:ea:82:07:29:bc:2e:44:3d:72:f3:3e:ae:fe:b1: 2b:16:83:47:be:5e:45:38:d7:c0:c9:de:be:90:7c: ad:cb:cf:06:1d:ba:20:2c:7b:fd:cd:94:09:d9:f3: 51:e5:62:e3:be:07:b1:ce:cd:0a:83:30:d8:f0:d3: ea:c6:51:8c:7d:57:ab:eb:30:d4:b5:cb:72:a8:a4: e4:78:48:26:5c:3c:08:d2:c3:29:d6:b8:1c:d6:21: 2c:a7:b1:d3:ab:cb:bb:fe:1b:b8:b6:de:df:5c:e1: 25:2a:fa:76:71:e0:c7:b9:09:f0:ee:89:b4:a5:6e: 21:c8:0d:cc:4e:09:9b:f5:68:bb:73:7c:9c:95:6b: 4d:95:3d:70:7b:4c:79:e4:70:f0:fd:dc:0d:da:0d: d9:f9:33:4e:df:24:c2:7e:ec:59:44:c0:0c:0d:dd: 1e:ac:18:59:08:98:b6:c4:f0:67:e9:9c:85:07:5a: 88:92:6d:37:5b:18:54:f5:75:9d:fd:29:db:a3:06: 3d:f5:b6:a5:f2:3c:7a:fb:63:4e:f0:0c:1f:d1:f5: ac:82:84:b8:6d:72:bc:92:6b:74:d8:de:27:40:a9: 96:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:27:C4:A0:85:D9:DC:15:C4:E0:A1:34:A5:4C:BA:20:67:CE:95:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a123fef2-a457-3457-ac7c-1b68161f2df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:4e:ea:8a:33:68:b5:6e:26:d6:3f:4d:2f:98:a2:25:de:74: 19:7d:22:43:6f:74:af:31:d1:54:f0:95:bc:12:24:59:70:6a: 70:fe:dc:6a:25:b4:f8:f1:be:e9:ca:be:01:99:38:5a:4b:3d: f0:d5:38:9d:0a:04:df:7f:80:68:53:c8:d7:bf:e7:68:62:ca: 6a:92:ef:fe:a8:52:64:c6:65:f7:de:ce:9f:e7:6e:00:4d:a9: db:3a:a1:e3:1b:ef:11:e7:57:12:f3:3f:a5:94:be:86:1f:c1: cf:21:d5:df:d7:cf:d6:30:f1:e4:d6:41:7a:7a:83:fd:ab:5d: f7:8a:6e:66:3a:72:ba:be:6f:25:1d:36:45:f8:36:b3:8b:a1: 71:5a:5d:c0:9f:0f:24:ef:70:8d:2a:5d:a3:81:c2:8c:d2:d0: 92:77:b6:3a:d7:39:cc:0e:31:71:f4:c0:57:dc:67:64:ea:0d: e4:a6:f9:d0:70:10:24:8b:1c:26:7c:86:87:d6:c6:b5:5b:e2: d9:75:d4:c5:96:34:76:81:64:09:ff:f0:cf:3b:cc:61:ad:32: 41:dd:58:bd:6b:be:05:e4:c9:dd:98:fd:40:1d:de:30:67:1f: 57:43:0d:c2:fc:31:d8:17:28:02:9b:80:19:11:58:b5:79:7b: cc:49:03:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNaz95WZfCWoZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDg0NmM1ZjctNTBhNS00NjBmLThmZjEtZDVjMjY1NDA5YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosGoFKzKdTvivHhZaOTPcw+qPruLY+ssKm0Y mBYx6oIHKbwuRD1y8z6u/rErFoNHvl5FONfAyd6+kHyty88GHbogLHv9zZQJ2fNR 5WLjvgexzs0KgzDY8NPqxlGMfVer6zDUtctyqKTkeEgmXDwI0sMp1rgc1iEsp7HT q8u7/hu4tt7fXOElKvp2ceDHuQnw7om0pW4hyA3MTgmb9Wi7c3yclWtNlT1we0x5 5HDw/dwN2g3Z+TNO3yTCfuxZRMAMDd0erBhZCJi2xPBn6ZyFB1qIkm03WxhU9XWd /SnbowY99bal8jx6+2NO8Awf0fWsgoS4bXK8kmt02N4nQKmWAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8nxKCF2dwVxOChNKVMuiBnzpXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTEyM2ZlZjItYTQ1Ny0z NDU3LWFjN2MtMWI2ODE2MWYyZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJO6oozaLVuJtY/TS+YoiXedBl9IkNvdK8x0VTwlbwSJFlwanD+3Gol tPjxvunKvgGZOFpLPfDVOJ0KBN9/gGhTyNe/52hiymqS7/6oUmTGZffezp/nbgBN qds6oeMb7xHnVxLzP6WUvoYfwc8h1d/Xz9Yw8eTWQXp6g/2rXfeKbmY6crq+byUd NkX4NrOLoXFaXcCfDyTvcI0qXaOBwozS0JJ3tjrXOcwOMXH0wFfcZ2TqDeSm+dBw ECSLHCZ8hofWxrVb4tl11MWWNHaBZAn/8M87zGGtMkHdWL1rvgXkyd2Y/UAd3jBn H1dDDcL8MdgXKAKbgBkRWLV5e8xJA8c= -----END CERTIFICATE-----Generated at Mon Oct 5 06:53:25 2026 by rpki-client