$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd0a1cea-1a66-390e-bcba-865a05b7d62f.roa File: cd0a1cea-1a66-390e-bcba-865a05b7d62f.roa (raw, json) Hash identifier: 24pdawfHrMuzzXT2VIm3/agGwzSMwgK5lR6P9lnAFEQ= Subject key identifier: C2:42:7D:C5:1C:50:80:53:92:FA:57:94:4D:A5:17:96:33:68:60:E6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4277DA95BA8ECA43F29F3C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd0a1cea-1a66-390e-bcba-865a05b7d62f.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:da:95:ba:8e:ca:43:f2:9f:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=150fc6cc-9062-478c-818f-07c83c60b638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:7c:0a:4d:40:d1:bd:fa:32:68:10:12:07: 33:e6:b2:a9:a9:1b:ca:12:03:53:04:6b:a0:d8:d2: 2e:73:68:29:8d:c3:48:22:b3:74:81:3b:4d:19:e6: f3:51:e0:40:7d:a6:f5:2c:f9:bd:ff:37:54:d0:ff: 86:44:03:67:42:95:b9:11:69:9c:8f:3e:a4:2f:1b: 5e:33:d3:20:06:10:44:5d:b2:52:c7:d6:f4:45:d9: 49:e4:13:e3:e3:32:18:91:fb:dc:93:b7:3b:84:13: 4e:a0:60:4d:5e:40:ff:ea:dd:1a:76:b2:02:9e:00: 41:82:f4:d5:1a:9a:6b:c2:02:5c:c9:ce:8a:0e:6b: 58:22:79:5a:d9:6c:32:bf:9c:51:4f:53:c9:78:b4: 5a:12:2f:47:7f:9d:8d:8f:43:94:cc:e7:3b:ba:83: 40:74:6a:28:e6:34:b2:6d:83:29:3f:2c:87:3e:75: d7:c3:9c:41:70:bd:1c:59:ab:9f:de:a4:98:cf:d6: f1:43:6d:1e:7e:b2:de:18:90:c1:68:f4:a3:64:a9: bd:c2:45:11:e8:83:a0:46:67:43:61:ca:99:8b:15: 23:f8:62:04:b8:99:99:ae:65:ed:54:5a:e7:36:dc: f2:20:bb:0c:a0:bd:35:91:0a:d5:84:29:a9:f4:15: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:42:7D:C5:1C:50:80:53:92:FA:57:94:4D:A5:17:96:33:68:60:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd0a1cea-1a66-390e-bcba-865a05b7d62f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ea:17:33:1c:b8:6b:8e:9f:5d:95:f0:92:99:16:a9:a9:83: b3:ab:c4:cb:8b:7b:d7:ea:17:3f:e3:b7:32:d5:b9:e2:b5:31: 6f:ed:da:8f:4f:1e:0f:49:25:ef:53:ac:be:df:a3:28:4a:9e: 9b:21:9e:3d:3e:4d:08:83:b6:85:99:2c:dd:38:76:c0:9c:d8: bb:e6:70:13:ac:1b:30:de:34:98:77:16:a7:94:49:16:05:d7: 86:4e:9b:46:62:76:e3:1e:53:37:80:01:09:c9:22:0d:d6:1b: 23:8e:6d:6b:8b:b4:f7:14:60:a3:35:c7:3a:68:70:d8:2d:cd: 16:18:e9:b6:d8:dd:43:3d:92:1a:46:c9:d2:80:0e:1e:f1:6c: 91:64:13:5f:96:26:fe:6e:ee:70:d0:38:d4:cd:c5:14:f1:3f: 5d:3d:6d:a1:16:12:65:48:b1:72:a8:72:00:b7:53:e1:57:f6: cb:e1:77:16:7f:30:29:88:95:00:f0:17:b9:85:98:63:5d:cd: 9a:06:fa:b2:fc:6b:69:b5:4c:a9:8c:1c:39:74:b8:57:b5:1f: 3c:52:26:8c:72:55:e7:f4:c6:2c:01:8f:32:50:7b:0a:45:6d: 42:ae:eb:3c:a8:52:8d:d0:12:f7:17:95:e7:8a:a0:c5:9b:cf: 01:45:4e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd9qVuo7KQ/KfPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MTUwZmM2Y2MtOTA2Mi00NzhjLTgxOGYtMDdjODNjNjBiNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMt8Ck1A0b36MmgQEgcz5rKpqRvKEgNTBGug 2NIuc2gpjcNIIrN0gTtNGebzUeBAfab1LPm9/zdU0P+GRANnQpW5EWmcjz6kLxte M9MgBhBEXbJSx9b0RdlJ5BPj4zIYkfvck7c7hBNOoGBNXkD/6t0adrICngBBgvTV GpprwgJcyc6KDmtYInla2Wwyv5xRT1PJeLRaEi9Hf52Nj0OUzOc7uoNAdGoo5jSy bYMpPyyHPnXXw5xBcL0cWauf3qSYz9bxQ20efrLeGJDBaPSjZKm9wkUR6IOgRmdD YcqZixUj+GIEuJmZrmXtVFrnNtzyILsMoL01kQrVhCmp9BVWTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJCfcUcUIBTkvpXlE2lF5YzaGDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2QwYTFjZWEtMWE2Ni0z OTBlLWJjYmEtODY1YTA1YjdkNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvqFzMcuGuOn12V8JKZFqmpg7OrxMuLe9fqFz/jtzLVueK1MW/t2o9P Hg9JJe9TrL7foyhKnpshnj0+TQiDtoWZLN04dsCc2LvmcBOsGzDeNJh3FqeUSRYF 14ZOm0ZiduMeUzeAAQnJIg3WGyOObWuLtPcUYKM1xzpocNgtzRYY6bbY3UM9khpG ydKADh7xbJFkE1+WJv5u7nDQONTNxRTxP109baEWEmVIsXKocgC3U+FX9svhdxZ/ MCmIlQDwF7mFmGNdzZoG+rL8a2m1TKmMHDl0uFe1HzxSJoxyVef0xiwBjzJQewpF bUKu6zyoUo3QEvcXleeKoMWbzwFFTnk= -----END CERTIFICATE-----Generated at Sun Oct 4 07:14:11 2026 by rpki-client