$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e96e6116-8e8e-3111-9337-2d78b5b4eb9e.roa File: e96e6116-8e8e-3111-9337-2d78b5b4eb9e.roa (raw, json) Hash identifier: jiOOOty7JNhF7vWegr7sRinybDK5zJZUkAWACLqlS9M= Subject key identifier: 82:D4:45:36:1C:8F:FF:2E:6C:0E:C7:3B:64:D7:96:E5:94:C4:F2:4B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F42784E26E08B1DE8FFD83980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e96e6116-8e8e-3111-9337-2d78b5b4eb9e.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:4e:26:e0:8b:1d:e8:ff:d8:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=c8fcbd90-c7c7-40a2-a6f9-44781d7a7cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d0:c2:27:7d:d3:5f:77:d9:94:16:c5:6b:27: 9d:e6:99:ee:58:3a:d3:fb:e5:2d:96:df:37:8e:fd: 69:37:81:53:0c:11:d0:41:1a:73:21:fd:a0:a7:6d: 4b:f7:53:53:3b:c1:bd:55:33:c0:d8:c2:25:c1:44: ce:a5:16:55:1d:83:47:d5:87:f3:dd:33:43:89:db: c4:f4:e9:07:57:d8:96:3b:7a:00:56:13:f8:3a:43: 9d:1c:b3:2a:d7:7d:58:3c:a6:72:3a:8e:3d:72:cf: 6c:63:96:26:3f:b9:e0:49:90:7d:84:35:36:94:94: f5:cc:9d:5b:3f:aa:c9:94:c1:95:0e:65:da:16:13: 1e:92:b2:7b:28:b5:1f:2a:df:b2:f4:77:e1:be:c9: fb:b6:50:6e:3b:06:bf:88:01:12:e9:6b:b9:49:17: 39:07:5b:2e:21:2f:f0:b3:c1:e4:07:b1:e4:45:a6: 0e:c4:2d:30:78:e0:a6:24:65:d6:9f:35:bb:bb:a5: 39:88:59:d4:05:9a:67:53:05:71:37:a4:4b:29:7c: b5:b3:44:28:9c:0b:a7:ca:19:15:c8:9d:1b:2b:8d: be:19:21:8f:97:3a:86:63:54:22:a0:9e:e2:63:17: a5:82:cc:d9:5c:d7:fa:b7:ef:ac:6d:aa:ff:6c:a3: 53:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D4:45:36:1C:8F:FF:2E:6C:0E:C7:3B:64:D7:96:E5:94:C4:F2:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e96e6116-8e8e-3111-9337-2d78b5b4eb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:1e:59:5e:c9:9d:a5:ce:28:84:10:49:d2:79:61:a0:81:7e: 11:64:9b:71:bb:1d:50:03:06:94:18:7f:01:80:dd:24:7f:32: b8:a0:54:60:fe:40:78:a1:41:a4:38:e1:c8:91:dc:c8:fc:1c: 9b:77:3b:d2:d7:02:a1:3a:23:1c:39:be:72:c3:d2:60:de:b3: 8b:d9:ef:60:77:c4:78:45:ee:bf:5a:f2:90:b7:9e:c6:b5:52: e5:0a:b6:c7:f7:bb:85:55:fc:8e:6a:e6:bb:9a:d3:b7:c3:76: 92:b2:db:85:92:6f:30:41:e0:29:96:82:4f:5a:5d:1a:cb:4b: ee:e5:28:8e:98:9c:ca:4d:42:9d:f5:ec:bc:07:f3:3d:1f:34: db:8a:16:91:be:b6:9b:a0:dc:b2:30:53:1e:04:cf:6d:2b:1b: 59:54:21:15:45:6a:37:5f:5e:74:bd:ff:dc:e7:9d:be:3e:c7: 75:31:5c:2f:8b:ed:11:34:40:c6:43:4f:33:32:17:49:64:43: 01:fd:42:de:01:a9:ee:e0:d4:0f:52:02:e4:06:dd:9e:be:53: df:17:80:e8:21:c3:77:b7:fe:b6:bd:33:24:0d:34:db:fe:99: 73:dc:28:97:97:20:7e:0a:24:43:a2:e0:26:91:50:e1:b9:70: c6:31:4f:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeE4m4Isd6P/YOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YzhmY2JkOTAtYzdjNy00MGEyLWE2ZjktNDQ3ODFkN2E3Y2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNDCJ33TX3fZlBbFayed5pnuWDrT++Utlt83 jv1pN4FTDBHQQRpzIf2gp21L91NTO8G9VTPA2MIlwUTOpRZVHYNH1Yfz3TNDidvE 9OkHV9iWO3oAVhP4OkOdHLMq131YPKZyOo49cs9sY5YmP7ngSZB9hDU2lJT1zJ1b P6rJlMGVDmXaFhMekrJ7KLUfKt+y9Hfhvsn7tlBuOwa/iAES6Wu5SRc5B1suIS/w s8HkB7HkRaYOxC0weOCmJGXWnzW7u6U5iFnUBZpnUwVxN6RLKXy1s0QonAunyhkV yJ0bK42+GSGPlzqGY1QioJ7iYxelgszZXNf6t++sbar/bKNTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILURTYcj/8ubA7HO2TXluWUxPJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTk2ZTYxMTYtOGU4ZS0z MTExLTkzMzctMmQ3OGI1YjRlYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJweWV7JnaXOKIQQSdJ5YaCBfhFkm3G7HVADBpQYfwGA3SR/MrigVGD+ QHihQaQ44ciR3Mj8HJt3O9LXAqE6Ixw5vnLD0mDes4vZ72B3xHhF7r9a8pC3nsa1 UuUKtsf3u4VV/I5q5rua07fDdpKy24WSbzBB4CmWgk9aXRrLS+7lKI6YnMpNQp31 7LwH8z0fNNuKFpG+tpug3LIwUx4Ez20rG1lUIRVFajdfXnS9/9znnb4+x3UxXC+L 7RE0QMZDTzMyF0lkQwH9Qt4Bqe7g1A9SAuQG3Z6+U98XgOghw3e3/ra9MyQNNNv+ mXPcKJeXIH4KJEOi4CaRUOG5cMYxTz4= -----END CERTIFICATE-----Generated at Thu Oct 1 14:36:51 2026 by rpki-client