$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d1028037-13ce-37e9-8894-b4edee762a2a.roa File: d1028037-13ce-37e9-8894-b4edee762a2a.roa (raw, json) Hash identifier: tyZCzhO4bWaX6+HoAeEM+eBHjP3Cpt7ex++ydSFNv5I= Subject key identifier: DA:71:01:EE:D9:42:34:40:29:7E:A9:2B:74:C2:73:6C:15:6D:48:2E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F427831AB9F0881F1026E6C00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d1028037-13ce-37e9-8894-b4edee762a2a.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:31:ab:9f:08:81:f1:02:6e:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=3ec682e6-c84f-4f1f-875b-2821d91bef89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9e:a3:ed:e2:70:b0:4a:15:17:27:b6:4f:ab: d1:22:fc:e6:5c:19:9b:85:98:a8:9c:e3:18:91:00: c2:3c:1a:ee:b1:17:7f:8c:a0:d6:31:c1:9c:e1:4e: a6:f4:b6:34:13:00:40:fb:7b:39:74:2f:88:56:35: 29:14:42:0d:6e:7c:ab:6a:b5:24:a1:44:be:96:8f: 71:7d:b9:88:9a:67:67:07:4c:08:31:c6:88:3a:46: 95:b2:3e:82:f0:62:64:f7:84:4c:29:51:fe:fa:b2: 55:76:41:38:3d:f9:69:11:8f:9a:c0:76:c1:ae:b7: 33:7b:ee:14:8d:d2:87:6b:e5:3b:c4:3b:30:c6:ad: 6b:99:10:62:4a:68:3b:75:9f:5f:b5:99:5e:94:da: a2:aa:de:21:bd:30:42:0a:9d:6e:fa:80:23:7a:15: 50:94:ec:a7:2f:06:3c:d3:81:a7:c7:c0:8b:97:78: 7e:6b:c2:15:6e:1d:75:68:bc:38:49:5d:8c:da:66: 5a:3e:2a:6a:c2:ed:a2:29:3f:3a:62:cd:b2:b3:17: 50:b1:77:c9:c8:fc:f9:0d:23:f5:2b:ab:98:84:9e: 98:21:75:1e:01:5c:26:ae:79:12:56:3c:e0:1b:7c: 04:9c:ae:d4:3c:ea:52:b5:8b:33:7c:48:27:97:21: 29:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:71:01:EE:D9:42:34:40:29:7E:A9:2B:74:C2:73:6C:15:6D:48:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d1028037-13ce-37e9-8894-b4edee762a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:24:60:ff:ad:a8:c8:90:90:f8:25:60:d3:c5:a5:59:11:11: 86:7d:be:26:86:85:2b:ed:ce:c6:69:52:e7:32:9d:72:99:71: 45:07:8f:22:a1:96:d6:a4:b4:b2:f1:9a:ea:15:12:c3:df:88: 52:7d:d1:ff:84:e2:d2:13:9e:3f:fb:34:47:93:90:f8:46:31: 97:81:74:d8:ad:83:d4:5d:38:42:ec:eb:42:34:a3:88:c3:aa: 80:31:74:3c:b5:42:b4:94:45:da:5d:02:ec:d1:43:c5:64:d5: 31:a4:a2:99:fe:1e:2c:34:3d:54:53:bf:a0:25:b1:f0:d3:3f: b1:be:69:da:60:d2:cb:f2:e7:45:f1:80:9c:ee:51:f0:17:6a: 9b:bc:8e:32:10:90:4a:41:7d:e4:1c:43:83:88:40:5a:77:cc: 5c:f9:82:0c:9f:66:1c:5a:af:64:89:0f:31:be:04:4e:bb:2d: 30:7d:e2:4b:09:6c:23:97:99:87:f6:d8:e4:cb:fe:c7:24:9d: 1f:8b:d5:a1:e4:63:8c:f3:23:c3:20:aa:6a:63:1a:09:23:90: 39:0b:6f:1b:51:35:73:9e:a0:8a:0b:67:93:c6:c5:5a:92:fd: 5b:37:af:c5:18:75:c5:c5:ab:a7:ee:e4:57:e2:e7:f6:e6:af: 6e:34:eb:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeDGrnwiB8QJubAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk M2VjNjgyZTYtYzg0Zi00ZjFmLTg3NWItMjgyMWQ5MWJlZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp6j7eJwsEoVFye2T6vRIvzmXBmbhZionOMY kQDCPBrusRd/jKDWMcGc4U6m9LY0EwBA+3s5dC+IVjUpFEINbnyrarUkoUS+lo9x fbmImmdnB0wIMcaIOkaVsj6C8GJk94RMKVH++rJVdkE4PflpEY+awHbBrrcze+4U jdKHa+U7xDswxq1rmRBiSmg7dZ9ftZlelNqiqt4hvTBCCp1u+oAjehVQlOynLwY8 04Gnx8CLl3h+a8IVbh11aLw4SV2M2mZaPipqwu2iKT86Ys2ysxdQsXfJyPz5DSP1 K6uYhJ6YIXUeAVwmrnkSVjzgG3wEnK7UPOpStYszfEgnlyEpKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpxAe7ZQjRAKX6pK3TCc2wVbUguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDEwMjgwMzctMTNjZS0z N2U5LTg4OTQtYjRlZGVlNzYyYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFskYP+tqMiQkPglYNPFpVkREYZ9viaGhSvtzsZpUucynXKZcUUHjyKh ltaktLLxmuoVEsPfiFJ90f+E4tITnj/7NEeTkPhGMZeBdNitg9RdOELs60I0o4jD qoAxdDy1QrSURdpdAuzRQ8Vk1TGkopn+Hiw0PVRTv6AlsfDTP7G+adpg0svy50Xx gJzuUfAXapu8jjIQkEpBfeQcQ4OIQFp3zFz5ggyfZhxar2SJDzG+BE67LTB94ksJ bCOXmYf22OTL/scknR+L1aHkY4zzI8MgqmpjGgkjkDkLbxtRNXOeoIoLZ5PGxVqS /Vs3r8UYdcXFq6fu5Ffi5/bmr24064w= -----END CERTIFICATE-----Generated at Tue Sep 29 05:17:19 2026 by rpki-client