$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb2034cf-1c88-3c0f-a10b-38102a828254.roa File: cb2034cf-1c88-3c0f-a10b-38102a828254.roa (raw, json) Hash identifier: 91Uij8g+QBceSg3qmYesBmzf0KkYSU6/PB6ARQ05DW8= Subject key identifier: C8:5D:B6:93:72:BF:86:18:AD:54:70:07:39:53:2C:DA:EB:73:3F:85 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F30527385C42CA6C8909E9680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb2034cf-1c88-3c0f-a10b-38102a828254.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 399955 IP address blocks: 209.101.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:73:85:c4:2c:a6:c8:90:9e:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=9e547c11-f987-4e95-afed-d0e2bee30049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:a3:fa:0b:39:de:c2:4e:87:a7:72:fb:d6: ce:4f:e9:4f:26:e2:70:10:1f:e8:0f:ad:0e:a9:3e: 54:5c:60:1a:e4:8b:7c:44:ac:bf:b5:76:99:c6:e4: ca:fb:66:8b:8a:c5:90:42:1d:1b:b0:6b:0a:a6:54: a1:1f:45:73:29:a9:0f:62:a2:9a:e6:c2:b0:bb:20: fc:c3:f9:1d:00:6b:f4:44:dc:58:26:41:c3:82:98: b7:ba:48:cc:9a:ff:cd:f7:fc:b3:71:b6:bc:4c:d0: c1:a8:db:34:8a:b4:ef:97:37:0c:d5:a2:c9:58:4d: 15:86:40:ee:b3:0c:24:c9:80:34:00:4f:28:fe:64: e9:68:5a:95:52:00:38:cd:43:b8:cc:84:b3:88:db: 0f:65:a4:a5:82:27:98:30:3c:70:82:e0:2f:58:9f: 3e:e3:36:a9:fa:f6:18:a5:47:b2:e7:a0:18:cd:14: db:b2:5d:01:dc:4e:dd:0f:24:fa:ce:90:d6:30:00: 5f:ac:0b:24:76:72:96:6f:ba:af:9d:38:c1:a0:12: b4:ae:c8:44:9a:6b:02:4b:21:4d:75:07:c2:7d:1f: e7:42:b5:e0:ec:02:5b:e6:27:2d:f1:a2:21:21:41: 9e:14:00:60:f6:a2:70:69:6f:56:6b:b7:26:35:b4: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5D:B6:93:72:BF:86:18:AD:54:70:07:39:53:2C:DA:EB:73:3F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb2034cf-1c88-3c0f-a10b-38102a828254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:80:35:cb:72:04:06:ee:ac:d9:ee:9f:d6:c3:c0:ac:cf:88: 01:70:e5:2a:e9:ca:43:f1:6f:07:81:32:df:3b:33:d4:f0:aa: 6b:f0:8d:fd:6f:02:cd:d8:a4:ea:e1:e8:fc:96:f7:11:8c:73: c1:bc:10:fc:51:f1:12:21:68:36:1f:35:d0:e8:07:e3:c8:96: a2:64:d5:04:ab:22:eb:50:07:f6:9a:b4:56:6b:3a:4c:7c:1a: e7:b7:6c:23:df:01:e4:6c:42:9a:ea:ef:f4:78:f7:70:20:a4: 51:59:67:d7:b2:31:ed:c7:bf:5e:37:13:89:68:35:03:c9:eb: 4e:02:80:f0:ca:6b:b7:2c:69:1f:4c:77:cb:0e:b0:5e:1a:1f: 17:f2:7f:0c:38:82:aa:ab:db:ea:71:26:74:c8:a9:c2:e4:bf: 89:be:d5:33:5c:47:37:9f:da:28:b3:58:77:8c:28:d9:c5:a9: 47:fe:c9:ba:c1:e6:a2:7c:f4:81:6e:5a:17:dc:b0:49:af:68: bb:52:6a:4a:ec:85:f2:1f:af:40:17:90:a2:0e:f6:50:9c:8b: bb:eb:fe:aa:2e:bf:e3:3c:86:b5:6a:77:6c:3c:cc:07:a0:23: 2a:2a:88:c9:20:c7:f8:af:f9:af:20:32:11:d2:ed:b4:07:8a: 07:e4:41:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnOFxCymyJCeloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk OWU1NDdjMTEtZjk4Ny00ZTk1LWFmZWQtZDBlMmJlZTMwMDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmOj+gs53sJOh6dy+9bOT+lPJuJwEB/oD60O qT5UXGAa5It8RKy/tXaZxuTK+2aLisWQQh0bsGsKplShH0VzKakPYqKa5sKwuyD8 w/kdAGv0RNxYJkHDgpi3ukjMmv/N9/yzcba8TNDBqNs0irTvlzcM1aLJWE0VhkDu swwkyYA0AE8o/mTpaFqVUgA4zUO4zISziNsPZaSlgieYMDxwguAvWJ8+4zap+vYY pUey56AYzRTbsl0B3E7dDyT6zpDWMABfrAskdnKWb7qvnTjBoBK0rshEmmsCSyFN dQfCfR/nQrXg7AJb5ict8aIhIUGeFABg9qJwaW9Wa7cmNbRlaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhdtpNyv4YYrVRwBzlTLNrrcz+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2IyMDM0Y2YtMWM4OC0z YzBmLWExMGItMzgxMDJhODI4MjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSANctyBAburNnun9bDwKzPiAFw5SrpykPxbweBMt87M9Twqmvwjf1v As3YpOrh6PyW9xGMc8G8EPxR8RIhaDYfNdDoB+PIlqJk1QSrIutQB/aatFZrOkx8 Gue3bCPfAeRsQprq7/R493AgpFFZZ9eyMe3Hv143E4loNQPJ604CgPDKa7csaR9M d8sOsF4aHxfyfww4gqqr2+pxJnTIqcLkv4m+1TNcRzef2iizWHeMKNnFqUf+ybrB 5qJ89IFuWhfcsEmvaLtSakrshfIfr0AXkKIO9lCci7vr/qouv+M8hrVqd2w8zAeg IyoqiMkgx/iv+a8gMhHS7bQHigfkQVc= -----END CERTIFICATE-----Generated at Mon Sep 28 22:18:33 2026 by rpki-client