$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa File: 22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa (raw, json) Hash identifier: xXyL4z+Q1+CJAqbqWRi7lJZP4dY42IH1B8ywjzuzIqU= Subject key identifier: 06:28:62:94:FE:69:9B:6D:7A:64:69:3F:16:6B:63:16:B8:91:33:AC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA0156C2D28ABE01EC2FDD7A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 401783 IP address blocks: 209.101.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:6c:2d:28:ab:e0:1e:c2:fd:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=8ca013f5-afaa-473b-ab62-87984b3d2386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:db:33:9e:e6:6d:37:bd:3d:c5:0d:c5:99: 5f:c8:20:31:41:9d:30:93:9a:85:2b:d3:79:02:47: 79:4a:93:27:d8:b8:0e:9f:aa:cc:9a:a7:6e:f0:c6: 6b:82:5f:54:72:fc:13:e7:d1:2b:ce:5c:93:c8:7a: a0:6d:0f:02:60:57:60:c7:59:10:40:df:92:59:49: dd:00:1d:f1:55:8a:94:90:88:d3:b0:ea:0e:d8:ce: 87:fb:77:6b:35:b4:6e:9a:0c:33:38:bf:e2:8f:7f: b6:f1:58:de:e9:92:28:d9:14:2b:c6:f2:b4:c8:19: 79:6e:9e:46:8e:82:7b:88:74:64:c6:8b:e2:d2:4c: 69:39:a3:2b:d5:b3:b0:16:0f:2d:e5:d6:99:6c:88: f5:93:c9:38:35:30:02:2c:c7:49:22:4c:18:c9:c6: 8a:4f:bf:42:d6:92:f0:08:c7:5b:0a:35:a1:45:ca: 8e:d3:be:ab:a6:f4:0d:f9:01:c3:7e:c3:db:c1:e9: 8b:db:3b:aa:0e:ad:81:cd:20:40:d1:18:1a:94:41: 73:76:65:c1:b6:9b:5d:b7:9b:cc:9e:eb:bc:ed:45: ab:74:9a:67:f6:0b:f2:d3:51:3b:15:6e:2b:55:f1: c0:41:fb:51:d3:e1:37:06:3f:7f:6c:b8:35:4f:80: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:28:62:94:FE:69:9B:6D:7A:64:69:3F:16:6B:63:16:B8:91:33:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ab:07:30:61:ef:b8:a4:b3:57:97:c3:9f:03:4d:ea:61:84: 87:24:db:05:63:be:69:f7:04:30:77:ee:fc:da:dc:1f:0a:d4: 44:12:ad:a4:4a:a9:b2:7d:76:39:87:bf:fc:f9:48:5a:52:ca: e3:a5:47:fc:eb:78:af:e2:51:38:2e:d4:8e:00:f7:a0:bd:e2: d6:55:b2:5f:8e:bb:5e:b0:ee:c9:a8:73:cc:65:58:a6:27:be: 60:e3:73:86:8d:22:d2:10:c0:99:fa:66:10:33:81:5b:5c:7c: 2b:86:77:9b:b1:94:5e:ad:88:8d:e3:db:38:b5:6b:03:d8:9e: e2:2f:20:db:6c:74:44:b1:dd:1a:b3:a4:a4:4b:a1:ab:95:72: 5e:4e:22:dd:6b:fc:e7:b4:f0:ca:61:45:11:67:4a:79:07:cf: 8c:04:9b:a9:df:50:93:59:50:35:8d:87:4a:07:4c:36:3e:72: 50:a6:e2:52:e8:1c:2f:51:55:71:75:0e:ff:71:df:e5:11:b8: 76:77:f9:c6:2a:de:af:93:8f:bc:f9:79:44:ee:00:ca:97:60: 29:35:e8:e2:7e:f4:02:a4:ef:bd:d6:0e:28:87:25:eb:75:da: 68:ed:43:c7:49:9e:6a:34:e9:a0:68:f5:a3:1b:4e:3c:b7:01: fa:2d:13:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFWwtKKvgHsL916AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk OGNhMDEzZjUtYWZhYS00NzNiLWFiNjItODc5ODRiM2QyMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihnbM57mbTe9PcUNxZlfyCAxQZ0wk5qFK9N5 Akd5SpMn2LgOn6rMmqdu8MZrgl9UcvwT59ErzlyTyHqgbQ8CYFdgx1kQQN+SWUnd AB3xVYqUkIjTsOoO2M6H+3drNbRumgwzOL/ij3+28Vje6ZIo2RQrxvK0yBl5bp5G joJ7iHRkxovi0kxpOaMr1bOwFg8t5daZbIj1k8k4NTACLMdJIkwYycaKT79C1pLw CMdbCjWhRcqO076rpvQN+QHDfsPbwemL2zuqDq2BzSBA0RgalEFzdmXBtptdt5vM nuu87UWrdJpn9gvy01E7FW4rVfHAQftR0+E3Bj9/bLg1T4B0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYoYpT+aZttemRpPxZrYxa4kTOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjJiMGJmYTAtYmNhZS0z MWM0LWFjM2MtOWExNDJhNjgzOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKrBzBh77iks1eXw58DTephhIck2wVjvmn3BDB37vza3B8K1EQSraRK qbJ9djmHv/z5SFpSyuOlR/zreK/iUTgu1I4A96C94tZVsl+Ou16w7smoc8xlWKYn vmDjc4aNItIQwJn6ZhAzgVtcfCuGd5uxlF6tiI3j2zi1awPYnuIvINtsdESx3Rqz pKRLoauVcl5OIt1r/Oe08MphRRFnSnkHz4wEm6nfUJNZUDWNh0oHTDY+clCm4lLo HC9RVXF1Dv9x3+URuHZ3+cYq3q+Tj7z5eUTuAMqXYCk16OJ+9AKk773WDiiHJet1 2mjtQ8dJnmo06aBo9aMbTjy3AfotEyQ= -----END CERTIFICATE-----Generated at Wed Jul 29 19:42:02 2026 by rpki-client