$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7603c42-cdb9-3e0a-af16-bf7e6387ff1e.roa File: a7603c42-cdb9-3e0a-af16-bf7e6387ff1e.roa (raw, json) Hash identifier: ikdCVqFvssTK11iVI5pdgFNxsWbQMNxiaOpI1/Cda4A= Subject key identifier: 86:96:0F:91:5A:0C:CF:A4:39:6E:94:65:E8:B0:19:F1:F6:15:F6:5E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4AD3C5D6803AEBF322EEA9B4 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7603c42-cdb9-3e0a-af16-bf7e6387ff1e.roa Signing time: Fri 25 Sep 2026 12:51:58 +0000 ROA not before: Fri 25 Sep 2026 12:51:58 +0000 ROA not after: Thu 24 Dec 2026 13:51:58 +0000 asID: 6079 IP address blocks: 209.101.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d3:c5:d6:80:3a:eb:f3:22:ee:a9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 12:51:58 2026 GMT Not After : Dec 24 13:51:58 2026 GMT Subject: CN=411100dc-5eef-497e-8c78-045b08e11846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:de:b1:c9:47:67:e2:91:e0:c5:c8:7a:e6:6f: 69:1e:5a:63:33:47:e0:b6:8d:fa:18:ef:0f:a7:02: 9d:1a:2a:d0:d1:14:98:8e:92:e3:a1:19:3b:23:60: 7d:6d:42:3f:8d:59:68:53:61:1c:47:73:61:7f:5e: c3:5a:33:b9:e3:5c:db:44:3b:0f:d6:3b:6b:4e:f1: a3:fc:f3:68:27:dc:6f:d9:00:b3:f4:2c:30:d3:84: c2:ef:81:32:76:8e:7a:16:d1:10:92:5b:76:86:e6: 5f:75:0c:fa:e7:bc:f6:09:34:00:59:f3:0b:e1:a9: d8:3b:06:16:a1:c1:42:a7:1c:ec:5a:fa:85:b7:fa: 1b:23:58:bb:50:c4:69:0b:25:64:4e:e8:16:5d:67: bb:ba:6b:0e:58:58:cb:f4:c2:0a:de:1c:32:e7:d4: 10:80:e0:1c:21:e4:34:09:76:93:ac:40:82:30:9d: fc:0c:91:b4:20:70:71:3f:dc:a4:5c:35:0d:20:c3: 4f:bf:57:75:79:fd:66:b0:69:5e:06:6f:03:9c:0c: 7c:40:ca:89:62:7a:23:04:7d:25:29:ea:f7:76:f1: fc:62:18:e6:f0:0e:28:6a:89:d8:42:9e:c2:01:b2: 26:2d:4f:3a:03:3a:22:f3:8c:07:b7:79:e3:9d:3e: 0f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:96:0F:91:5A:0C:CF:A4:39:6E:94:65:E8:B0:19:F1:F6:15:F6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7603c42-cdb9-3e0a-af16-bf7e6387ff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b2:08:1e:ec:0e:6f:ab:e3:de:9e:9c:57:39:64:95:09:1a: 97:6b:9b:73:3c:e5:35:84:d7:3a:ce:53:7f:71:ed:0b:c5:ad: d4:e9:0e:54:a9:66:c6:61:69:68:c4:4a:f8:cb:62:28:05:ab: dd:6f:9a:c7:da:0f:1c:be:7d:ee:17:61:56:2b:02:f7:43:38: ab:77:06:fc:b5:06:be:db:73:6e:29:60:9a:74:28:33:42:31: 60:f8:cd:77:3b:2b:e7:2c:99:23:d9:7d:c8:6f:c4:d7:88:8c: 78:34:1e:0b:c2:60:6a:81:ef:5a:fd:67:0c:0f:d6:85:c9:e4: 90:86:d8:60:98:75:8a:00:9f:b5:95:d1:7d:5c:cd:c6:70:66: 11:84:17:32:79:8d:e3:82:8f:64:9c:fc:cd:18:f1:69:f9:40: d7:fd:d3:aa:25:fe:92:77:d8:ff:96:d5:1f:d3:ca:b5:83:77: 87:7a:dd:1e:de:35:3a:8f:64:c9:a5:c8:cd:af:0f:0b:40:21: c6:9d:43:29:96:95:c8:c6:32:00:bf:88:a9:c5:90:fd:cd:af: 12:e8:0f:6a:a9:35:76:4f:28:cc:02:f5:fb:72:dc:26:65:23: 5d:40:38:d2:6f:94:a8:81:41:d3:c2:23:3d:be:ed:02:38:1a: 30:b1:7a:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K08XWgDrr8yLuqbQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEyNTE1OFoXDTI2MTIyNDEzNTE1OFowLzEtMCsGA1UEAxMk NDExMTAwZGMtNWVlZi00OTdlLThjNzgtMDQ1YjA4ZTExODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN6xyUdn4pHgxch65m9pHlpjM0fgto36GO8P pwKdGirQ0RSYjpLjoRk7I2B9bUI/jVloU2EcR3Nhf17DWjO541zbRDsP1jtrTvGj /PNoJ9xv2QCz9Cww04TC74Eydo56FtEQklt2huZfdQz657z2CTQAWfML4anYOwYW ocFCpxzsWvqFt/obI1i7UMRpCyVkTugWXWe7umsOWFjL9MIK3hwy59QQgOAcIeQ0 CXaTrECCMJ38DJG0IHBxP9ykXDUNIMNPv1d1ef1msGleBm8DnAx8QMqJYnojBH0l Ker3dvH8Yhjm8A4oaonYQp7CAbImLU86Azoi84wHt3njnT4PXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaWD5FaDM+kOW6UZeiwGfH2FfZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTc2MDNjNDItY2RiOS0z ZTBhLWFmMTYtYmY3ZTYzODdmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2yCB7sDm+r496enFc5ZJUJGpdrm3M85TWE1zrOU39x7QvFrdTpDlSp ZsZhaWjESvjLYigFq91vmsfaDxy+fe4XYVYrAvdDOKt3Bvy1Br7bc24pYJp0KDNC MWD4zXc7K+csmSPZfchvxNeIjHg0HgvCYGqB71r9ZwwP1oXJ5JCG2GCYdYoAn7WV 0X1czcZwZhGEFzJ5jeOCj2Sc/M0Y8Wn5QNf906ol/pJ32P+W1R/TyrWDd4d63R7e NTqPZMmlyM2vDwtAIcadQymWlcjGMgC/iKnFkP3NrxLoD2qpNXZPKMwC9fty3CZl I11AONJvlKiBQdPCIz2+7QI4GjCxeic= -----END CERTIFICATE-----Generated at Mon Sep 28 00:05:36 2026 by rpki-client