$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa File: 1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa (raw, json) Hash identifier: N97ROLt7y5CKKcX3oY+518h0GHru0jpwQ1GXfSnriwo= Subject key identifier: 47:78:E1:8A:6A:03:AA:8A:5F:ED:0C:5C:5F:3B:6E:63:55:78:BC:85 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F42783A9DFF21FED9F2CE2B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:3a:9d:ff:21:fe:d9:f2:ce:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=a79fe117-b9a8-455f-858a-d2a7d6bed6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4c:42:95:fb:5d:22:08:fe:33:a9:a6:96:74: 85:65:33:f9:57:3d:7e:56:0f:2c:de:10:a8:c5:4b: a7:d1:cc:11:4d:7d:b2:34:fa:36:0e:8f:93:fd:08: 5f:9e:d5:07:d3:1d:bb:5e:77:ab:93:99:b3:a3:30: 6a:60:ff:1e:b1:39:87:bc:04:56:f3:4a:99:70:0c: 3e:a8:6e:39:fc:96:37:b1:c9:11:34:94:3c:d3:eb: 13:10:6a:f1:f4:9d:c6:4a:89:d3:f6:03:82:60:b5: 25:91:45:48:8f:88:1b:b7:b3:2e:7c:dc:33:2d:75: e2:f9:bd:52:92:94:a1:07:76:d5:30:d1:3c:60:35: dd:ba:23:b1:a4:c6:0b:8c:f6:90:a4:3e:67:b6:03: 97:74:3a:7c:82:6b:36:73:d8:18:38:4c:67:fc:3d: e3:d7:2f:71:47:8c:e2:9d:18:af:26:51:85:e5:8a: 00:dd:d2:a5:9f:1e:47:ce:7f:95:32:6b:d5:b8:b5: 45:be:5b:17:7d:89:2b:ee:75:6d:6e:89:85:c2:61: f1:a4:c7:62:42:79:00:ef:0c:01:e9:a3:06:f2:cf: ea:ea:75:69:d3:f6:27:39:6e:42:ed:45:53:4a:ab: 27:57:e8:1b:e1:29:05:aa:e9:0a:02:4b:b7:af:c4: ce:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:78:E1:8A:6A:03:AA:8A:5F:ED:0C:5C:5F:3B:6E:63:55:78:BC:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a1:b0:6b:88:b2:a2:11:3d:d7:b1:25:ab:0f:70:83:b4:66: 6d:4e:23:8a:e4:93:dc:ea:05:92:3c:41:ff:2b:2a:dc:2e:e6: de:7f:63:83:8a:e6:0e:f5:6a:7d:0d:b1:a7:d0:4c:da:71:14: ab:0a:62:8a:3d:eb:0d:e7:7a:f6:75:bc:84:66:c9:17:24:6c: 9c:65:14:d6:49:71:f9:84:7c:26:b7:e9:32:ac:41:97:5b:b7: 22:d5:a7:98:81:ef:3d:fa:8d:8e:a4:c2:94:84:db:93:cf:1c: 9b:3a:f3:76:50:42:4d:71:fe:2b:69:23:69:1e:13:49:f2:f6: e5:e9:3d:08:f1:88:90:31:b5:73:6d:41:1e:fc:08:e7:05:f1: 4c:d3:cd:58:c7:2a:02:96:6c:5f:5e:b0:a1:22:35:d0:3b:f6: fd:23:30:53:74:3e:89:21:9e:aa:ea:5c:3a:a7:8a:50:97:44: 0b:8d:18:1b:57:32:c7:ce:c3:83:1e:04:ec:5c:11:ba:ed:1e: 57:fe:d9:06:a1:79:75:ff:7a:cb:30:60:63:15:a3:f6:96:40: 58:81:b1:3f:94:3f:8a:cd:39:d6:12:6a:60:55:34:6a:e3:ef: 95:95:f3:51:27:12:c6:50:83:ac:5d:1b:11:9c:a5:73:f5:cb: 41:a9:6a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeDqd/yH+2fLOK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YTc5ZmUxMTctYjlhOC00NTVmLTg1OGEtZDJhN2Q2YmVkNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiExClftdIgj+M6mmlnSFZTP5Vz1+Vg8s3hCo xUun0cwRTX2yNPo2Do+T/QhfntUH0x27Xnerk5mzozBqYP8esTmHvARW80qZcAw+ qG45/JY3sckRNJQ80+sTEGrx9J3GSonT9gOCYLUlkUVIj4gbt7MufNwzLXXi+b1S kpShB3bVMNE8YDXduiOxpMYLjPaQpD5ntgOXdDp8gms2c9gYOExn/D3j1y9xR4zi nRivJlGF5YoA3dKlnx5Hzn+VMmvVuLVFvlsXfYkr7nVtbomFwmHxpMdiQnkA7wwB 6aMG8s/q6nVp0/YnOW5C7UVTSqsnV+gb4SkFqukKAku3r8TO3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEd44YpqA6qKX+0MXF87bmNVeLyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWRlN2NmYjItMjJmZC0z YjY0LThlMDMtYWFkY2UwMzk5NWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuhsGuIsqIRPdexJasPcIO0Zm1OI4rkk9zqBZI8Qf8rKtwu5t5/Y4OK 5g71an0NsafQTNpxFKsKYoo96w3nevZ1vIRmyRckbJxlFNZJcfmEfCa36TKsQZdb tyLVp5iB7z36jY6kwpSE25PPHJs683ZQQk1x/itpI2keE0ny9uXpPQjxiJAxtXNt QR78COcF8UzTzVjHKgKWbF9esKEiNdA79v0jMFN0PokhnqrqXDqnilCXRAuNGBtX MsfOw4MeBOxcEbrtHlf+2QaheXX/esswYGMVo/aWQFiBsT+UP4rNOdYSamBVNGrj 75WV81EnEsZQg6xdGxGcpXP1y0Gpaig= -----END CERTIFICATE-----Generated at Mon Sep 28 21:03:58 2026 by rpki-client