$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa File: 1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa (raw, json) Hash identifier: CKfbTHPHnsGbk4MBw2isrqyOaCmeRUMebsEr6ZMgbPc= Subject key identifier: 74:A1:BE:85:CA:92:F0:C9:3A:87:92:A5:D6:A8:EF:22:9B:AD:CD:71 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA0156DE443769DA68E6758C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 401783 IP address blocks: 209.101.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:6d:e4:43:76:9d:a6:8e:67:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=d10a0d63-fb70-4bb9-bf41-7600dae59450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:35:bb:50:4a:cb:80:5f:5f:7f:d9:47:07: 2e:13:95:f9:97:99:d1:60:bf:9d:9f:d9:70:5b:c7: b0:b0:76:d9:f4:6b:6f:c3:72:04:dd:a7:d4:40:56: ed:de:6c:1e:ef:6f:71:54:47:a1:26:96:5d:e3:8f: 19:fc:0b:24:7c:15:95:c3:7e:e5:1c:15:5b:95:04: 99:47:ba:74:2a:50:d0:6e:90:09:b7:78:8c:2e:20: e9:d3:80:60:ec:65:f3:33:c0:f4:19:37:ff:f7:ed: 40:5d:d6:a9:4d:d1:a2:7e:f4:84:bc:e7:2a:0c:ca: d4:79:91:e3:bc:e1:ae:3a:27:70:ea:e9:93:ee:ae: 78:15:73:1c:11:35:03:78:7b:98:c8:a2:71:b7:e6: 9c:c9:92:96:13:c4:5a:f1:a7:44:11:b4:28:b5:a6: 87:76:24:04:93:3a:63:4b:3a:f2:2f:6e:2c:05:ae: ee:a2:59:9c:ea:84:ee:db:d2:f1:c9:62:17:4d:de: 2a:0c:22:ac:be:ee:75:c0:8d:43:67:1c:5b:8c:25: 57:1b:bc:b0:d9:93:65:2a:58:c9:9e:37:97:b4:1c: 6d:5b:b3:39:da:1b:a3:5c:93:31:91:22:77:d5:bb: 04:96:57:4e:38:03:5b:45:10:39:8f:d4:84:0a:53: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A1:BE:85:CA:92:F0:C9:3A:87:92:A5:D6:A8:EF:22:9B:AD:CD:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:78:00:84:0e:1c:71:7a:36:85:15:f1:2d:b0:54:3f:c9:c3: 55:3a:2b:65:9f:dd:f8:cf:00:7f:9a:33:00:40:4d:14:c0:2e: 13:91:32:94:32:97:17:38:58:b4:3a:9c:c4:a5:5e:10:cb:35: c3:a7:57:d7:da:91:01:5c:88:09:a6:d0:57:cf:2b:a5:79:eb: 44:ef:30:4a:95:a6:6d:e5:b0:c9:2d:d5:5a:00:1d:d4:09:10: c4:b4:b1:59:2f:5e:d3:51:52:10:98:08:5b:86:74:e6:04:f6: fc:7f:1d:cd:1e:f1:d7:5a:e9:86:e6:10:df:b1:1f:31:a3:84: 89:51:9a:6b:1e:d7:a5:3c:a8:35:30:60:56:16:ef:e9:a0:6d: 96:8c:07:79:5e:86:b0:cd:e2:d1:8e:db:73:48:b3:4e:6d:d7: 01:2b:2a:c6:7b:e5:8b:2c:15:ed:1c:f4:72:a2:7d:09:e0:bd: c2:fc:1e:10:fc:eb:ec:db:ae:ad:57:31:09:29:29:7f:3c:80: 36:e9:86:00:37:a0:92:0f:d1:59:92:d1:c0:2f:0e:dc:5f:c3: 89:83:fc:ce:10:be:6a:bc:39:9e:fb:f2:12:45:50:d0:37:b3: 97:b4:7c:9c:e1:d5:a6:17:3d:e6:a3:03:92:a7:5f:0e:9f:0e: b0:a7:b7:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFW3kQ3adpo5nWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZDEwYTBkNjMtZmI3MC00YmI5LWJmNDEtNzYwMGRhZTU5NDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Y1u1BKy4BfX3/ZRwcuE5X5l5nRYL+dn9lw W8ewsHbZ9Gtvw3IE3afUQFbt3mwe729xVEehJpZd448Z/AskfBWVw37lHBVblQSZ R7p0KlDQbpAJt3iMLiDp04Bg7GXzM8D0GTf/9+1AXdapTdGifvSEvOcqDMrUeZHj vOGuOidw6umT7q54FXMcETUDeHuYyKJxt+acyZKWE8Ra8adEEbQotaaHdiQEkzpj SzryL24sBa7uolmc6oTu29LxyWIXTd4qDCKsvu51wI1DZxxbjCVXG7yw2ZNlKljJ njeXtBxtW7M52hujXJMxkSJ31bsElldOOANbRRA5j9SEClOtawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHShvoXKkvDJOoeSpdao7yKbrc1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWRlN2NmYjItMjJmZC0z YjY0LThlMDMtYWFkY2UwMzk5NWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt4AIQOHHF6NoUV8S2wVD/Jw1U6K2Wf3fjPAH+aMwBATRTALhORMpQy lxc4WLQ6nMSlXhDLNcOnV9fakQFciAmm0FfPK6V560TvMEqVpm3lsMkt1VoAHdQJ EMS0sVkvXtNRUhCYCFuGdOYE9vx/Hc0e8dda6YbmEN+xHzGjhIlRmmse16U8qDUw YFYW7+mgbZaMB3lehrDN4tGO23NIs05t1wErKsZ75YssFe0c9HKifQngvcL8HhD8 6+zbrq1XMQkpKX88gDbphgA3oJIP0VmS0cAvDtxfw4mD/M4Qvmq8OZ778hJFUNA3 s5e0fJzh1aYXPeajA5KnXw6fDrCnt9c= -----END CERTIFICATE-----Generated at Wed Jul 29 19:38:37 2026 by rpki-client