$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa File: d839064a-caaf-3526-8919-06009f7be8de.roa (raw, json) Hash identifier: VtI8P5X0+7G1Fxcc306jB/+V+AbCTuuA1PRr+0cMuVQ= Subject key identifier: D3:01:3D:AF:34:D4:5F:D2:BD:BC:F8:A2:0A:55:C9:75:89:AA:1E:4C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F498B6A7C33DC3105DA176A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 209.101.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:6a:7c:33:dc:31:05:da:17:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=56a779f4-a265-4c29-be31-fa0ab24d0511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1d:af:7b:f4:4b:77:af:6f:13:44:bd:6d:d4: 3f:d0:ab:15:94:ab:fb:11:0f:5c:49:89:25:dc:73: ab:62:38:b1:d7:e8:52:54:48:95:0d:aa:fb:86:dd: ea:e4:43:66:26:f0:8a:16:d5:e9:fe:fa:e3:e7:7e: 23:7b:1f:19:86:b0:21:90:68:4d:8b:bc:b1:94:72: b5:3a:4f:29:9b:41:58:e8:ee:d2:88:12:9b:16:ad: 8c:61:56:f4:74:f0:43:8c:0e:18:f7:7e:4d:00:df: 14:f4:fc:2c:48:03:34:05:bf:4e:27:2f:f8:9d:80: cf:1c:33:4d:74:1e:1f:54:60:29:36:88:f2:42:f1: f8:89:42:49:c4:10:3c:92:50:36:77:3d:8e:bb:11: 1e:8d:fc:55:4d:36:19:f0:90:6f:eb:07:39:2f:c2: 37:70:e7:f2:66:1e:a1:ab:24:c3:0c:4c:c6:e2:1c: 5a:b7:e3:e0:5a:7f:8d:0b:a2:8a:eb:e6:10:7f:c0: e6:f2:dc:ba:e5:f9:e0:bd:3c:40:3c:6d:c1:a3:6d: f2:b7:69:cd:95:74:a9:7b:ea:9c:d3:33:36:52:5a: 0a:34:59:8b:85:b2:56:78:11:f0:c2:5c:b3:2b:0b: 3a:e3:3d:20:fb:bb:5d:2a:c9:c1:55:a8:f0:77:ba: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:01:3D:AF:34:D4:5F:D2:BD:BC:F8:A2:0A:55:C9:75:89:AA:1E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:50:72:a4:46:d3:57:ca:7a:a3:1c:26:3d:f7:3f:50:76:08: bb:8a:42:d1:8c:0a:67:7e:b4:9d:56:fa:fc:1c:87:88:e5:c1: 64:85:b1:6c:8c:f3:55:6f:de:b2:02:6d:42:5a:63:75:cb:6a: 62:b0:a4:1a:0b:9d:93:fe:a8:07:52:ba:96:a9:61:8a:09:3d: 00:a2:cc:7a:a4:89:4e:95:55:33:2e:67:45:b9:37:ec:aa:67: e1:d3:7d:c5:32:42:5a:97:83:04:73:50:50:c3:81:ce:93:ad: c0:bf:c8:02:83:aa:25:cc:07:b3:dc:24:0d:01:62:88:9c:8e: d7:e1:4b:84:a0:9c:a2:6b:6f:73:67:99:08:70:2b:9c:f0:1b: 98:95:b1:d3:8d:78:f0:ec:10:78:62:9d:72:49:af:69:5d:da: be:fb:fd:72:03:f3:ff:15:98:55:36:79:78:58:5f:33:0b:f7: 76:ed:09:67:45:a6:76:ce:1d:08:a4:56:c5:fc:1b:1e:83:fa: c0:7b:5e:30:b6:07:bd:ef:b8:dd:28:a5:2a:9a:5c:33:d8:d4: 52:06:5e:6a:96:47:e8:f7:49:b4:db:40:8c:27:76:dc:3e:d6: 5b:f5:ac:c7:fd:25:5e:63:d8:e8:25:36:ea:28:f0:a9:28:f0: 29:24:d1:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji2p8M9wxBdoXagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTZhNzc5ZjQtYTI2NS00YzI5LWJlMzEtZmEwYWIyNGQwNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB2ve/RLd69vE0S9bdQ/0KsVlKv7EQ9cSYkl 3HOrYjix1+hSVEiVDar7ht3q5ENmJvCKFtXp/vrj534jex8ZhrAhkGhNi7yxlHK1 Ok8pm0FY6O7SiBKbFq2MYVb0dPBDjA4Y935NAN8U9PwsSAM0Bb9OJy/4nYDPHDNN dB4fVGApNojyQvH4iUJJxBA8klA2dz2OuxEejfxVTTYZ8JBv6wc5L8I3cOfyZh6h qyTDDEzG4hxat+PgWn+NC6KK6+YQf8Dm8ty65fngvTxAPG3Bo23yt2nNlXSpe+qc 0zM2UloKNFmLhbJWeBHwwlyzKws64z0g+7tdKsnBVajwd7q8MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMBPa801F/Svbz4ogpVyXWJqh5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDgzOTA2NGEtY2FhZi0z NTI2LTg5MTktMDYwMDlmN2JlOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpQcqRG01fKeqMcJj33P1B2CLuKQtGMCmd+tJ1W+vwch4jlwWSFsWyM 81Vv3rICbUJaY3XLamKwpBoLnZP+qAdSupapYYoJPQCizHqkiU6VVTMuZ0W5N+yq Z+HTfcUyQlqXgwRzUFDDgc6TrcC/yAKDqiXMB7PcJA0BYoicjtfhS4SgnKJrb3Nn mQhwK5zwG5iVsdONePDsEHhinXJJr2ld2r77/XID8/8VmFU2eXhYXzML93btCWdF pnbOHQikVsX8Gx6D+sB7XjC2B73vuN0opSqaXDPY1FIGXmqWR+j3SbTbQIwndtw+ 1lv1rMf9JV5j2OglNuoo8Kko8Ckk0V4= -----END CERTIFICATE-----Generated at Tue Oct 6 15:57:03 2026 by rpki-client