$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb2034cf-1c88-3c0f-a10b-38102a828254.roa File: cb2034cf-1c88-3c0f-a10b-38102a828254.roa (raw, json) Hash identifier: 3Bmuy6ziZlB+2KUa5/60DI6ISDctgEgms56768ngWi4= Subject key identifier: D1:08:DC:70:1A:FB:F3:12:DE:58:F9:E4:18:F4:B5:B6:E5:59:D9:91 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E8DEF965876A4017FA84F9940 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb2034cf-1c88-3c0f-a10b-38102a828254.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 399955 IP address blocks: 209.101.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:96:58:76:a4:01:7f:a8:4f:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=845c472b-cabb-4847-851f-48ad07b76962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:80:f1:4a:62:17:b3:86:50:da:05:90:e4:93: 69:55:15:31:28:4f:ff:50:fd:c3:f7:61:38:6f:72: 68:9d:24:3f:09:c5:e3:56:16:3b:b1:de:df:13:d1: 49:fb:60:b6:4d:9c:ef:8c:1a:a1:49:46:4f:ec:b2: 23:6e:0a:ab:5f:66:c6:16:77:59:c5:33:0f:5e:16: b5:47:b1:e1:eb:18:e7:03:b7:90:8c:75:d9:85:31: 9b:d6:84:89:52:34:58:c3:4b:f9:ec:ee:c2:12:4d: 6e:0f:9c:1e:a2:23:ff:df:5b:6c:7c:1f:0b:ff:e7: ec:62:c1:43:64:40:6d:d9:d5:21:38:05:cc:67:0b: 14:e2:d1:e1:0a:7f:c6:ff:be:0a:3a:88:02:95:bd: b9:98:d6:fa:52:06:ca:7a:cc:66:a1:e4:e6:7d:62: 7a:9c:b3:ee:75:01:e7:cd:62:1a:dd:ff:f5:15:c0: f7:05:97:45:e5:34:7f:b2:17:c5:7d:a6:f5:59:35: c7:88:0f:4c:5c:1d:70:63:cd:fb:04:0c:23:48:03: 37:79:16:c8:64:d1:4d:84:48:44:3b:36:51:9f:1a: 1c:3a:2b:99:e8:8f:cb:bf:81:ea:b4:1f:57:d1:37: 1b:2d:cc:6b:6c:a5:3e:17:3c:40:cf:cf:9f:bb:2d: 89:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:08:DC:70:1A:FB:F3:12:DE:58:F9:E4:18:F4:B5:B6:E5:59:D9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb2034cf-1c88-3c0f-a10b-38102a828254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:01:34:58:b0:c6:ff:37:d0:fd:aa:d3:1b:f6:64:25:b6:e1: ad:b4:23:15:95:11:b1:e2:71:d9:5c:bc:20:b7:2e:8c:54:2d: f9:f3:d1:0f:f5:5b:09:10:27:af:5c:30:20:43:bf:02:3a:3c: 4f:98:c5:83:33:24:b6:11:3f:5f:73:ab:09:75:3e:07:a6:73: 01:d9:20:3f:31:22:58:f1:e8:5f:c9:d0:24:a7:e4:13:83:50: b1:8a:1f:b3:c1:86:f4:86:02:10:4c:eb:b0:2d:08:67:ac:0a: 63:af:9a:b1:b1:77:a1:71:ad:5c:71:06:4f:02:4a:88:09:2a: b0:a3:56:65:47:6b:c5:1b:eb:96:ee:ec:7f:9a:60:a1:1b:8f: 0c:08:d8:10:c0:ae:9d:88:26:2f:41:f5:bb:03:ff:01:75:b2: 3a:7b:da:75:0a:d7:de:fc:ef:06:74:c5:db:b1:e4:fc:7a:89: 93:32:b1:76:80:84:84:1f:3d:66:7f:15:c0:c6:c1:f9:a6:12: d5:09:a1:4b:2e:d9:89:a5:84:aa:52:08:93:fa:37:43:43:cd: 74:b8:a4:d7:3f:19:3d:56:4b:aa:40:b1:71:5d:f6:cd:52:0b: 0b:38:23:f3:f0:f4:a4:18:d7:62:b0:bf:02:1d:fe:47:bd:d1: 83:e5:ae:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N75ZYdqQBf6hPmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk ODQ1YzQ3MmItY2FiYi00ODQ3LTg1MWYtNDhhZDA3Yjc2OTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IDxSmIXs4ZQ2gWQ5JNpVRUxKE//UP3D92E4 b3JonSQ/CcXjVhY7sd7fE9FJ+2C2TZzvjBqhSUZP7LIjbgqrX2bGFndZxTMPXha1 R7Hh6xjnA7eQjHXZhTGb1oSJUjRYw0v57O7CEk1uD5weoiP/31tsfB8L/+fsYsFD ZEBt2dUhOAXMZwsU4tHhCn/G/74KOogClb25mNb6UgbKesxmoeTmfWJ6nLPudQHn zWIa3f/1FcD3BZdF5TR/shfFfab1WTXHiA9MXB1wY837BAwjSAM3eRbIZNFNhEhE OzZRnxocOiuZ6I/Lv4HqtB9X0TcbLcxrbKU+FzxAz8+fuy2JLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEI3HAa+/MS3lj55Bj0tbblWdmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2IyMDM0Y2YtMWM4OC0z YzBmLWExMGItMzgxMDJhODI4MjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwBNFiwxv830P2q0xv2ZCW24a20IxWVEbHicdlcvCC3LoxULfnz0Q/1 WwkQJ69cMCBDvwI6PE+YxYMzJLYRP19zqwl1PgemcwHZID8xIljx6F/J0CSn5BOD ULGKH7PBhvSGAhBM67AtCGesCmOvmrGxd6FxrVxxBk8CSogJKrCjVmVHa8Ub65bu 7H+aYKEbjwwI2BDArp2IJi9B9bsD/wF1sjp72nUK19787wZ0xdux5Px6iZMysXaA hIQfPWZ/FcDGwfmmEtUJoUsu2YmlhKpSCJP6N0NDzXS4pNc/GT1WS6pAsXFd9s1S Cws4I/Pw9KQY12KwvwId/ke90YPlrm8= -----END CERTIFICATE-----Generated at Fri Jul 24 21:11:54 2026 by rpki-client