$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f1760afc-5232-31cb-88d2-70e59dd5a5fa.roa File: f1760afc-5232-31cb-88d2-70e59dd5a5fa.roa (raw, json) Hash identifier: 8TxukfLJwcE9n/z/AI8D/Q45k7+0bHkHElBfbvIcKT0= Subject key identifier: DF:52:9D:6F:50:14:2A:94:69:66:2B:E3:1B:BF:1A:43:82:AA:5C:A9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E4C548D5777DA4913FA5BB580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f1760afc-5232-31cb-88d2-70e59dd5a5fa.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 59711 IP address blocks: 209.101.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:8d:57:77:da:49:13:fa:5b:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=0ae0480f-0d39-4b19-bea2-5679286e8357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:8f:e4:11:58:f6:bf:dc:aa:d7:a2:0a:8e: 7f:1d:04:c4:ee:64:29:b4:ba:a7:8a:70:3a:24:f1: ed:5d:1d:14:07:3a:fd:c4:1c:98:21:76:0c:c1:e0: 4c:78:ae:fc:26:f8:ae:2f:b6:1b:0b:12:0d:dc:49: e9:4a:87:a9:0b:a8:09:fa:ca:2c:19:fb:91:d2:78: ba:47:5d:d9:c3:a2:78:bb:9d:34:61:c0:c8:d5:98: 34:5c:97:df:f0:21:42:24:e4:ca:4b:15:93:8e:27: e8:ad:68:b6:fb:02:58:44:29:5f:1f:0e:bd:cd:2a: 9f:ec:ed:8a:0f:a8:93:8f:d8:41:a1:7a:b0:c5:dd: 13:34:e8:b8:3e:4c:0d:cb:03:74:47:11:10:ef:82: 8a:63:c3:c7:32:0f:21:bd:e8:c6:1d:80:d5:14:5e: b9:6c:de:21:3a:6b:6b:87:2b:38:4d:30:f1:de:01: 22:f7:6a:d2:9d:07:05:a6:9b:ff:ec:5d:f6:8a:f3: f7:65:c8:70:18:85:bb:6a:b9:aa:65:13:04:e9:70: b1:b6:26:01:3a:9f:64:68:af:13:1a:de:1e:e7:3b: 8d:66:55:4c:33:7a:71:f8:1f:dd:41:d1:bf:f6:52: 95:bc:02:0b:68:67:57:31:c7:12:35:ca:49:83:df: 00:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:52:9D:6F:50:14:2A:94:69:66:2B:E3:1B:BF:1A:43:82:AA:5C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f1760afc-5232-31cb-88d2-70e59dd5a5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a4:32:81:9b:dc:e1:f7:1b:7f:35:9f:e9:81:1d:b7:24:4d: 94:9e:34:3f:8a:ed:b8:0e:07:c0:ed:88:95:11:80:5d:7d:34: a9:09:7e:99:e2:07:e6:aa:c0:38:10:2f:c1:f5:2a:8b:36:1a: 1d:23:67:dd:f7:86:c5:3a:79:16:c8:f2:0f:2f:82:d8:e4:5b: 5a:0b:39:b2:29:66:c2:5d:c5:a8:8a:7b:c8:ce:14:12:13:25: cb:d7:32:55:ce:81:64:1e:5c:00:a5:23:1c:ad:95:33:15:4a: a8:cb:48:53:76:ba:d0:2f:e3:44:56:19:c9:0b:d8:f3:bf:00: db:f9:1e:1e:08:64:fe:fb:ef:0c:7a:57:74:10:02:86:ea:66: 7a:f9:9a:a4:46:2b:08:80:62:e0:64:e0:29:47:7f:83:14:9a: b8:d6:6d:56:81:3a:27:e9:14:06:73:76:0e:af:7f:65:e9:2a: 11:c4:3a:17:e3:65:a1:86:5d:b3:58:d2:51:ff:30:9e:58:60: f9:c9:ab:cb:6c:4d:bc:c3:68:ee:7a:31:9e:34:4d:ab:8d:6d: 39:dd:bb:83:e6:07:c0:bb:cb:4d:53:39:df:af:57:24:4b:7a: 60:fd:87:b5:a6:78:70:da:72:b6:e8:1e:78:54:6c:3c:66:f6: 64:38:55:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVI1Xd9pJE/pbtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk MGFlMDQ4MGYtMGQzOS00YjE5LWJlYTItNTY3OTI4NmU4MzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1uP5BFY9r/cqteiCo5/HQTE7mQptLqninA6 JPHtXR0UBzr9xByYIXYMweBMeK78JviuL7YbCxIN3EnpSoepC6gJ+sosGfuR0ni6 R13Zw6J4u500YcDI1Zg0XJff8CFCJOTKSxWTjiforWi2+wJYRClfHw69zSqf7O2K D6iTj9hBoXqwxd0TNOi4PkwNywN0RxEQ74KKY8PHMg8hvejGHYDVFF65bN4hOmtr hys4TTDx3gEi92rSnQcFppv/7F32ivP3ZchwGIW7armqZRME6XCxtiYBOp9kaK8T Gt4e5zuNZlVMM3px+B/dQdG/9lKVvAILaGdXMccSNcpJg98AoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9SnW9QFCqUaWYr4xu/GkOCqlypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjE3NjBhZmMtNTIzMi0z MWNiLTg4ZDItNzBlNTlkZDVhNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WUKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6kMoGb3OH3G381n+mBHbckTZSeND+K7bgOB8DtiJURgF19NKkJfpni B+aqwDgQL8H1Kos2Gh0jZ933hsU6eRbI8g8vgtjkW1oLObIpZsJdxaiKe8jOFBIT JcvXMlXOgWQeXAClIxytlTMVSqjLSFN2utAv40RWGckL2PO/ANv5Hh4IZP777wx6 V3QQAobqZnr5mqRGKwiAYuBk4ClHf4MUmrjWbVaBOifpFAZzdg6vf2XpKhHEOhfj ZaGGXbNY0lH/MJ5YYPnJq8tsTbzDaO56MZ40TauNbTndu4PmB8C7y01TOd+vVyRL emD9h7WmeHDacrboHnhUbDxm9mQ4VTA= -----END CERTIFICATE-----Generated at Fri Jul 24 15:48:59 2026 by rpki-client