$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4a6daa-cc7d-373e-b0a5-6d07204e6e75.roa File: fb4a6daa-cc7d-373e-b0a5-6d07204e6e75.roa (raw, json) Hash identifier: nLmHLlaAI4zsBr3rg8eao9o8kD0pEoVKjow0Sn/6USM= Subject key identifier: 0F:41:AC:68:51:B0:43:0E:44:BB:F1:86:7D:EA:EB:39:D5:23:2E:00 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4277D92625FB5A96E0E0AAC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4a6daa-cc7d-373e-b0a5-6d07204e6e75.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:d9:26:25:fb:5a:96:e0:e0:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=d031c429-8922-4aac-a5ab-c3147e9856ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:28:db:bc:c3:b0:de:8f:91:cd:0a:e9:c6:7c: df:97:d4:00:b6:2e:79:f6:db:da:58:c6:17:c4:ae: f3:0a:cd:43:da:21:06:59:c6:26:4b:79:29:0c:0e: d9:31:fa:52:83:20:2b:08:59:50:87:9f:1c:51:0c: 61:de:76:ea:34:27:c7:5f:27:c1:d8:86:e5:23:ac: c1:3e:2d:29:f7:cf:12:9a:b0:f8:30:00:d2:ab:3e: 79:52:e7:31:2b:97:94:00:dd:a9:2b:82:50:85:eb: 7b:d7:6a:59:14:e8:08:ce:c2:ed:ca:45:78:5e:33: 1f:56:de:61:30:17:25:5d:e2:e0:f5:0b:ed:39:ff: 69:0e:9e:23:8a:a5:6a:1d:ce:45:69:c8:db:05:95: cd:fa:91:e3:b9:44:92:b0:4a:df:c6:40:db:4a:15: 9d:9e:ba:d1:cb:e5:4f:f4:f1:0d:ac:ad:44:14:0e: 0a:39:e8:fe:6c:4f:b4:02:57:ac:9c:d6:a3:19:b3: 43:3e:e8:a9:44:b7:7f:9b:88:ea:90:d8:bc:d9:ee: 4e:55:d7:90:37:07:69:2d:e4:22:d6:a5:2a:cd:6a: a8:61:05:1a:68:9d:51:bb:77:7a:a6:0b:ba:6a:9a: 1d:cc:98:c4:0d:1a:f4:07:7a:58:17:5d:67:db:9f: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:41:AC:68:51:B0:43:0E:44:BB:F1:86:7D:EA:EB:39:D5:23:2E:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4a6daa-cc7d-373e-b0a5-6d07204e6e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6b:d2:a9:d8:28:73:ed:c2:d1:a7:d4:4c:7c:d4:cd:75:8e: aa:99:7e:1c:3d:86:11:47:e9:ed:2d:6b:fc:29:d7:a4:25:1d: a4:fc:30:07:e9:ac:b9:2f:ea:fc:16:66:03:df:3d:e7:c8:51: a9:11:44:fa:fb:ec:3e:6d:33:f1:63:df:6c:61:fb:c5:b9:c9: a9:26:ce:23:f2:82:86:64:4b:15:27:55:db:a5:03:ea:c3:5b: 6b:68:1b:d8:f2:fb:0a:7c:4b:da:d5:05:2b:17:52:51:a7:b0: cc:c8:f0:76:b3:89:d8:70:bf:10:6a:05:25:2f:9f:20:aa:50: 5f:a5:8e:de:1a:2b:c8:95:ec:12:31:88:7a:f0:d3:0a:ce:3f: 31:ee:b9:7f:36:bf:9c:ef:ba:5f:69:2d:ba:7a:97:df:18:72: b5:a7:46:ef:f1:ce:a3:14:da:35:14:aa:64:03:ab:95:25:e7: 1b:44:1a:44:51:26:7c:88:46:db:dc:36:61:b6:00:88:22:e0: 98:64:57:37:48:71:8b:62:16:50:fb:8c:89:c8:83:21:f1:f4: d0:17:74:3f:25:b4:ce:d6:33:78:af:55:1f:f7:a3:a1:f1:0e: 92:3a:96:af:81:f8:7a:b4:f6:1c:e5:b2:98:59:e0:4f:4b:0a: 8d:e4:00:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd9kmJftaluDgqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZDAzMWM0MjktODkyMi00YWFjLWE1YWItYzMxNDdlOTg1NmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCjbvMOw3o+RzQrpxnzfl9QAti559tvaWMYX xK7zCs1D2iEGWcYmS3kpDA7ZMfpSgyArCFlQh58cUQxh3nbqNCfHXyfB2IblI6zB Pi0p988SmrD4MADSqz55UucxK5eUAN2pK4JQhet712pZFOgIzsLtykV4XjMfVt5h MBclXeLg9QvtOf9pDp4jiqVqHc5FacjbBZXN+pHjuUSSsErfxkDbShWdnrrRy+VP 9PENrK1EFA4KOej+bE+0AlesnNajGbNDPuipRLd/m4jqkNi82e5OVdeQNwdpLeQi 1qUqzWqoYQUaaJ1Ru3d6pgu6apodzJjEDRr0B3pYF11n25/nRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9BrGhRsEMORLvxhn3q6znVIy4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmI0YTZkYWEtY2M3ZC0z NzNlLWIwYTUtNmQwNzIwNGU2ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNr0qnYKHPtwtGn1Ex81M11jqqZfhw9hhFH6e0ta/wp16QlHaT8MAfp rLkv6vwWZgPfPefIUakRRPr77D5tM/Fj32xh+8W5yakmziPygoZkSxUnVdulA+rD W2toG9jy+wp8S9rVBSsXUlGnsMzI8HazidhwvxBqBSUvnyCqUF+ljt4aK8iV7BIx iHrw0wrOPzHuuX82v5zvul9pLbp6l98YcrWnRu/xzqMU2jUUqmQDq5Ul5xtEGkRR JnyIRtvcNmG2AIgi4JhkVzdIcYtiFlD7jInIgyHx9NAXdD8ltM7WM3ivVR/3o6Hx DpI6lq+B+Hq09hzlsphZ4E9LCo3kADM= -----END CERTIFICATE-----Generated at Sun Sep 27 07:55:05 2026 by rpki-client