$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1b586ac6-72ef-330e-8ea3-32eeea946282.roa File: 1b586ac6-72ef-330e-8ea3-32eeea946282.roa (raw, json) Hash identifier: uxBNVJ+lG5qjkPg/nRmqnwEk8w52gL4W6u5Q2lcgamw= Subject key identifier: 51:01:61:85:F5:E6:B6:AB:9F:58:F9:30:48:B5:7C:78:26:EE:B1:D9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA0157DE45FCBEF67B5F1E0C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1b586ac6-72ef-330e-8ea3-32eeea946282.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 401783 IP address blocks: 209.101.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:7d:e4:5f:cb:ef:67:b5:f1:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=dc75b37e-e9b0-4f43-ac8a-f9a0ec6cba57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:4e:3b:78:b1:3a:02:54:5e:9a:a3:bf:f9: f9:0f:d6:45:0a:f5:31:99:b9:02:e3:77:25:d3:00: 4d:ee:02:d7:ce:d4:34:32:3d:f5:fb:1d:e4:76:49: 6f:5f:bf:3c:ea:28:23:d9:2e:90:5c:76:8d:82:23: ca:17:14:f0:7e:39:f7:aa:28:52:f1:6e:8d:23:b9: a0:a6:3e:31:81:08:30:49:11:3b:cd:2c:6c:be:e1: 5c:0b:46:89:54:ea:18:7f:b6:0e:44:64:2e:d1:c6: e3:94:b2:f3:74:59:56:55:1f:b3:16:26:29:d8:7a: f8:46:8b:27:13:90:6d:b3:f7:9c:1b:59:6f:5d:93: fe:73:e7:cf:a6:8e:b7:2d:db:04:f0:c5:b4:fc:67: ea:b5:03:c0:0d:6b:5b:e1:9d:66:74:b4:5a:b5:ac: fe:41:02:b0:d3:4c:85:22:72:eb:a3:de:58:fa:52: 61:7c:33:d9:f2:65:45:fe:b7:b3:d1:d5:f6:82:e2: d7:29:f3:54:09:92:89:91:a3:6e:35:a4:4f:24:71: d4:a2:ee:06:35:58:b8:7a:aa:24:90:53:75:57:6e: 7a:c8:89:d6:0e:82:a6:aa:41:25:72:4c:a8:79:cc: df:9e:60:f7:50:c3:7f:c7:8d:93:aa:c2:03:85:74: a2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:01:61:85:F5:E6:B6:AB:9F:58:F9:30:48:B5:7C:78:26:EE:B1:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1b586ac6-72ef-330e-8ea3-32eeea946282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:83:2d:4d:17:45:3e:d6:14:f1:bf:12:01:bc:f8:e6:fd:38: da:98:65:d8:b7:eb:46:3e:b3:52:88:52:fd:99:49:69:b6:f6: e0:de:5d:9d:ec:c5:7c:55:c5:16:76:20:33:d3:d9:d0:4c:b1: f2:28:d2:4e:58:31:10:91:3c:d1:83:e4:07:7a:58:be:06:22: 60:c7:8e:63:1c:27:dd:45:64:3e:fe:47:92:d0:3d:a5:f2:2d: b2:a0:66:04:45:08:1a:43:a2:48:cd:37:08:4d:f6:d7:71:a9: 01:41:dc:f3:89:b6:08:c4:fb:00:06:83:17:6e:7e:91:02:ee: 1e:a6:f7:91:84:9e:df:75:66:26:ab:73:f1:dd:fa:4d:6f:78: 75:3b:ab:7c:c9:07:81:d6:dd:51:f5:ee:4a:2f:ff:9f:ab:0f: 45:5d:d8:58:ac:7a:88:dc:05:89:17:02:0b:4e:84:09:f3:0b: 3e:b5:e4:04:0a:91:42:cd:48:ed:05:f9:6a:45:33:ff:d1:1f: a8:c8:5c:1a:7c:68:4d:c2:71:ce:37:f2:0c:e7:b5:b7:9e:72: ee:f7:c5:c4:f0:76:da:cf:fd:0b:62:83:ba:04:33:4d:11:5b: 86:02:5c:c3:93:88:14:7d:48:8b:70:bc:d7:3a:39:d6:a9:d0: 88:38:99:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFX3kX8vvZ7Xx4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZGM3NWIzN2UtZTliMC00ZjQzLWFjOGEtZjlhMGVjNmNiYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUVOO3ixOgJUXpqjv/n5D9ZFCvUxmbkC43cl 0wBN7gLXztQ0Mj31+x3kdklvX7886igj2S6QXHaNgiPKFxTwfjn3qihS8W6NI7mg pj4xgQgwSRE7zSxsvuFcC0aJVOoYf7YORGQu0cbjlLLzdFlWVR+zFiYp2Hr4Rosn E5Bts/ecG1lvXZP+c+fPpo63LdsE8MW0/GfqtQPADWtb4Z1mdLRataz+QQKw00yF InLro95Y+lJhfDPZ8mVF/rez0dX2guLXKfNUCZKJkaNuNaRPJHHUou4GNVi4eqok kFN1V256yInWDoKmqkElckyoeczfnmD3UMN/x42TqsIDhXSiwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEBYYX15rarn1j5MEi1fHgm7rHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWI1ODZhYzYtNzJlZi0z MzBlLThlYTMtMzJlZWVhOTQ2MjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCDLU0XRT7WFPG/EgG8+Ob9ONqYZdi360Y+s1KIUv2ZSWm29uDeXZ3s xXxVxRZ2IDPT2dBMsfIo0k5YMRCRPNGD5Ad6WL4GImDHjmMcJ91FZD7+R5LQPaXy LbKgZgRFCBpDokjNNwhN9tdxqQFB3POJtgjE+wAGgxdufpEC7h6m95GEnt91Ziar c/Hd+k1veHU7q3zJB4HW3VH17kov/5+rD0Vd2FiseojcBYkXAgtOhAnzCz615AQK kULNSO0F+WpFM//RH6jIXBp8aE3Ccc438gzntbeecu73xcTwdtrP/Qtig7oEM00R W4YCXMOTiBR9SItwvNc6Odap0Ig4mZc= -----END CERTIFICATE-----Generated at Wed Jul 29 20:54:36 2026 by rpki-client