$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a9bdc6d5-ca7f-3dc6-bb21-094c39db1fe4.roa File: a9bdc6d5-ca7f-3dc6-bb21-094c39db1fe4.roa (raw, json) Hash identifier: 55XXxFCM2lbNbi196HDfl2sNJ13+jT5e+TdWMZUzwrE= Subject key identifier: CB:67:B0:BF:52:38:57:7E:83:1B:68:F5:BE:0F:8C:DC:57:0D:D6:89 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4AD3BC40F651917053E22D60 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a9bdc6d5-ca7f-3dc6-bb21-094c39db1fe4.roa Signing time: Fri 25 Sep 2026 12:51:53 +0000 ROA not before: Fri 25 Sep 2026 12:51:53 +0000 ROA not after: Thu 24 Dec 2026 13:51:53 +0000 asID: 6079 IP address blocks: 209.101.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d3:bc:40:f6:51:91:70:53:e2:2d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 12:51:53 2026 GMT Not After : Dec 24 13:51:53 2026 GMT Subject: CN=62d9ab4a-815b-4fbc-83f5-b79107855e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:cf:a6:a5:41:8c:c5:1f:f0:b9:5c:ef:11: 6b:7d:fc:fc:9f:e6:06:35:28:0e:88:5b:03:d5:78: ea:f4:ec:ec:5f:dc:54:b7:ad:2b:18:eb:56:9e:f8: 45:40:16:ef:39:da:69:d4:3e:e4:de:a2:69:19:29: 66:c9:be:05:64:a4:4e:28:57:e0:9c:27:76:dc:e6: d6:91:39:74:e5:c0:f6:99:68:ce:4b:c2:f6:db:7d: 1d:60:5e:cb:15:35:70:9a:62:9f:93:07:fb:2e:4d: 1b:2f:df:fd:ef:0e:77:95:f7:bb:c6:70:54:fe:ec: d1:a5:2e:10:db:6b:a5:bd:ab:2c:9c:73:21:22:ae: 76:a0:22:4a:f5:0b:ac:f5:f4:b6:40:b0:43:f6:55: 7a:18:58:82:8f:f1:97:98:e9:cc:aa:08:f2:e7:7f: f2:a7:e9:10:bd:93:00:30:2f:5d:1c:9a:69:c1:a0: cf:50:d3:c2:39:84:e3:1f:3a:80:f1:46:ff:2c:f9: e5:9a:b5:7c:c3:d1:8a:de:72:16:eb:6f:dc:4d:23: d7:7b:f8:ab:b1:68:30:72:c5:9d:28:55:d9:b4:fb: d5:62:86:0f:94:8e:b4:4d:ad:76:ce:ca:87:38:9e: 18:75:0a:77:71:d0:6e:aa:fd:d3:0b:1e:a1:b5:0b: c2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:67:B0:BF:52:38:57:7E:83:1B:68:F5:BE:0F:8C:DC:57:0D:D6:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a9bdc6d5-ca7f-3dc6-bb21-094c39db1fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e8:64:17:34:07:0d:13:7c:47:f6:70:1b:57:65:01:69:24: f8:cd:ba:9c:02:9c:8d:da:24:99:82:8b:95:a4:10:55:9d:2b: f5:58:b1:45:1b:0c:33:63:0c:11:2a:56:5c:d5:50:83:93:ad: 6f:b2:42:6e:22:de:be:32:ec:be:b1:9c:68:0c:f7:67:26:a9: da:35:3b:b3:97:22:6e:df:33:08:a7:e6:29:25:27:e9:7b:72: e3:46:c5:89:42:f6:03:8d:21:9d:a6:b4:8d:3e:2a:7e:d9:70: bd:ab:88:2c:f3:38:f5:9d:8c:2d:4f:d3:ea:2c:2c:c4:fc:70: eb:cb:aa:0d:b9:3c:7c:86:79:22:59:46:29:8b:df:bf:e8:90: 0f:21:7a:dd:ea:e9:85:a2:3b:cb:99:bc:7f:5b:0b:ae:77:c0: ec:aa:4a:f6:b9:e5:33:aa:2f:b0:8c:40:12:0c:ff:92:b5:a4: 18:84:22:52:05:4a:c2:02:2a:20:7a:bb:45:ce:4e:42:20:fd: d0:f1:af:15:ef:a3:a8:a2:84:c8:26:c5:d5:61:66:a8:12:17: 58:3a:3d:0d:ca:f9:50:30:93:54:b5:41:a7:d7:16:a5:fb:85: a9:56:6b:53:aa:fb:72:6b:38:6e:2f:12:22:e4:21:68:37:2e: 44:4e:bf:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K07xA9lGRcFPiLWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEyNTE1M1oXDTI2MTIyNDEzNTE1M1owLzEtMCsGA1UEAxMk NjJkOWFiNGEtODE1Yi00ZmJjLTgzZjUtYjc5MTA3ODU1ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEPPpqVBjMUf8Llc7xFrffz8n+YGNSgOiFsD 1Xjq9OzsX9xUt60rGOtWnvhFQBbvOdpp1D7k3qJpGSlmyb4FZKROKFfgnCd23ObW kTl05cD2mWjOS8L2230dYF7LFTVwmmKfkwf7Lk0bL9/97w53lfe7xnBU/uzRpS4Q 22ulvassnHMhIq52oCJK9Qus9fS2QLBD9lV6GFiCj/GXmOnMqgjy53/yp+kQvZMA MC9dHJppwaDPUNPCOYTjHzqA8Ub/LPnlmrV8w9GK3nIW62/cTSPXe/irsWgwcsWd KFXZtPvVYoYPlI60Ta12zsqHOJ4YdQp3cdBuqv3TCx6htQvC9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtnsL9SOFd+gxto9b4PjNxXDdaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTliZGM2ZDUtY2E3Zi0z ZGM2LWJiMjEtMDk0YzM5ZGIxZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnoZBc0Bw0TfEf2cBtXZQFpJPjNupwCnI3aJJmCi5WkEFWdK/VYsUUb DDNjDBEqVlzVUIOTrW+yQm4i3r4y7L6xnGgM92cmqdo1O7OXIm7fMwin5iklJ+l7 cuNGxYlC9gONIZ2mtI0+Kn7ZcL2riCzzOPWdjC1P0+osLMT8cOvLqg25PHyGeSJZ RimL37/okA8het3q6YWiO8uZvH9bC653wOyqSva55TOqL7CMQBIM/5K1pBiEIlIF SsICKiB6u0XOTkIg/dDxrxXvo6iihMgmxdVhZqgSF1g6PQ3K+VAwk1S1QafXFqX7 halWa1Oq+3JrOG4vEiLkIWg3LkROv4s= -----END CERTIFICATE-----Generated at Sat Oct 3 12:50:56 2026 by rpki-client