$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83f7c7-e02f-3a43-95f8-701145221be8.roa File: dd83f7c7-e02f-3a43-95f8-701145221be8.roa (raw, json) Hash identifier: cqvjxyGN8/FGbuBmG8pNMTV/rXN2F4HFnieRw89qccs= Subject key identifier: F5:59:A3:38:EF:75:E5:61:45:2C:61:15:84:4E:12:7F:2A:09:C1:58 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F549D505FFCABA2D070184280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83f7c7-e02f-3a43-95f8-701145221be8.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 209.101.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:50:5f:fc:ab:a2:d0:70:18:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=6fe636e0-6b50-44ac-816d-55575753a955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3d:35:04:ca:d2:3a:9f:05:b1:f4:80:f5:0a: 6b:fb:62:01:f5:62:ee:d1:22:19:a7:87:6d:2c:2c: 29:d7:f6:48:8b:48:e4:29:9e:db:0d:eb:d6:9c:92: f0:2b:53:2d:df:e7:43:94:38:37:1b:7d:54:18:d9: 9a:26:e4:62:f3:f2:6d:e5:ad:95:0e:e0:cb:da:e2: 01:6c:13:a4:f1:9a:4d:f3:9b:b2:65:9c:5c:41:b9: 8e:fb:cd:ed:b2:4b:9c:9a:81:c9:0a:69:e1:51:c0: d0:83:99:2a:16:64:aa:b8:b2:53:9f:eb:45:a3:d5: c0:3b:85:b8:eb:4e:e9:e5:5c:b2:a3:7f:b7:a8:d5: 56:8c:39:6a:c1:37:76:dd:f9:26:ae:80:76:6b:77: 62:fa:dd:fd:bb:e5:5b:0b:0c:62:30:7d:0c:6c:ec: 52:43:dd:30:8d:a7:dc:14:20:a1:64:31:2b:9c:5c: 2b:61:b5:7c:0f:cd:2f:14:5c:53:19:d5:57:a3:1b: 45:b7:61:ea:3c:d8:cd:fe:07:09:4c:ab:a9:b9:0a: 0b:59:c1:10:c8:ad:09:a2:f1:70:7a:ea:d9:01:d1: d3:e5:18:d6:21:a8:2f:b9:71:a8:d7:da:97:28:38: 78:a0:4b:1f:97:37:71:0e:c9:ed:d7:41:ce:8f:f8: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:59:A3:38:EF:75:E5:61:45:2C:61:15:84:4E:12:7F:2A:09:C1:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83f7c7-e02f-3a43-95f8-701145221be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:0f:89:5f:2f:6a:3c:a7:45:21:52:b8:44:cf:00:57:0a:5c: cc:fd:42:c1:ee:cb:fa:b3:3a:27:3b:a1:12:4f:7a:a4:61:09: c9:66:8b:e7:3c:0c:71:b6:17:ec:63:3d:3d:a6:e0:7d:50:b1: 1e:fa:f5:35:81:24:a5:2e:ed:70:21:94:06:4e:bd:29:ec:15: e0:a5:83:2c:1d:a2:a1:3d:ac:61:a2:9b:82:fa:94:c0:d2:53: 43:d3:c3:a6:75:9f:28:e2:b2:3a:a4:30:d6:0d:f4:eb:58:54: 7b:b9:c6:e3:40:2d:9e:30:ab:3d:b8:ec:c0:f1:3a:b8:9f:32: 01:07:7c:89:31:ea:73:47:32:68:9c:ea:e5:52:e9:8d:a2:79: 20:47:0d:bb:04:e1:8f:9d:cf:d2:88:d3:1a:d7:b6:45:9c:eb: 7a:19:7a:fb:22:ea:c3:5a:59:06:1d:22:70:0d:c7:c7:bb:8e: f4:5d:2b:5f:5d:5d:63:57:46:f3:ee:99:cd:ef:74:00:bc:f0: 7e:fa:0d:7b:af:72:00:7d:d6:1c:65:b7:2a:f2:f7:21:16:23: c5:87:d6:8c:98:24:eb:1c:9e:5c:ed:1a:d6:cd:eb:04:24:4d: 72:c9:4e:d6:36:da:89:1f:5a:e0:04:9a:10:31:b5:4a:49:85: 7e:bb:98:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVBf/Kui0HAYQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NmZlNjM2ZTAtNmI1MC00NGFjLTgxNmQtNTU1NzU3NTNhOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z01BMrSOp8FsfSA9Qpr+2IB9WLu0SIZp4dt LCwp1/ZIi0jkKZ7bDevWnJLwK1Mt3+dDlDg3G31UGNmaJuRi8/Jt5a2VDuDL2uIB bBOk8ZpN85uyZZxcQbmO+83tskucmoHJCmnhUcDQg5kqFmSquLJTn+tFo9XAO4W4 607p5Vyyo3+3qNVWjDlqwTd23fkmroB2a3di+t39u+VbCwxiMH0MbOxSQ90wjafc FCChZDErnFwrYbV8D80vFFxTGdVXoxtFt2HqPNjN/gcJTKupuQoLWcEQyK0JovFw eurZAdHT5RjWIagvuXGo19qXKDh4oEsflzdxDsnt10HOj/jRgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVZozjvdeVhRSxhFYROEn8qCcFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGQ4M2Y3YzctZTAyZi0z YTQzLTk1ZjgtNzAxMTQ1MjIxYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQPiV8vajynRSFSuETPAFcKXMz9QsHuy/qzOic7oRJPeqRhCclmi+c8 DHG2F+xjPT2m4H1QsR769TWBJKUu7XAhlAZOvSnsFeClgywdoqE9rGGim4L6lMDS U0PTw6Z1nyjisjqkMNYN9OtYVHu5xuNALZ4wqz247MDxOrifMgEHfIkx6nNHMmic 6uVS6Y2ieSBHDbsE4Y+dz9KI0xrXtkWc63oZevsi6sNaWQYdInANx8e7jvRdK19d XWNXRvPumc3vdAC88H76DXuvcgB91hxltyry9yEWI8WH1oyYJOscnlztGtbN6wQk TXLJTtY22okfWuAEmhAxtUpJhX67mDg= -----END CERTIFICATE-----Generated at Thu Oct 1 08:12:18 2026 by rpki-client