$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa File: 22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa (raw, json) Hash identifier: jawvxtWpjiq1wz4/pCPyaoi3hvzKL3GJyFnzZsl8E/I= Subject key identifier: 71:4B:0E:84:2F:F8:A3:54:2E:16:CE:D2:E3:24:E5:EA:98:8D:7F:FB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F427838E6DFBF58B1D28A00C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:38:e6:df:bf:58:b1:d2:8a:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=859bb953-c635-4a67-9213-ec549e975753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:f5:d6:ed:da:39:92:54:2d:d6:39:a4:20: 50:fd:94:09:2e:ca:92:82:93:4d:42:84:f9:90:74: ba:2e:da:d0:40:78:e2:e5:90:fc:3e:48:44:b8:3e: 64:11:ce:05:d1:6a:cd:8c:a3:50:71:22:78:c1:f7: 85:61:67:58:c4:74:e2:f9:70:d0:8a:44:08:ff:06: 9f:a5:f3:b5:72:94:67:91:ce:12:20:81:41:99:c0: c0:dc:82:d7:cf:79:39:72:3a:8e:44:4c:b4:d4:32: 7c:ff:75:92:25:cf:b6:0d:59:91:c0:70:6d:dd:bd: 11:cc:95:07:4b:87:af:04:0a:6d:82:64:3d:8a:fa: 83:94:ce:aa:56:a9:3c:f2:2b:10:ae:99:64:ba:2e: 02:c2:63:88:95:09:eb:39:c1:33:87:1c:2b:dc:5d: 5b:04:6b:04:96:71:2d:54:64:06:74:d5:4e:96:3b: fe:b7:a5:32:98:7a:e7:ed:17:26:0e:25:55:c5:54: 90:bd:b8:8f:41:97:14:fd:78:de:d6:f0:b1:e7:d0: 5d:9a:0e:08:a8:ad:e9:87:a7:4c:95:3c:88:33:55: 2b:ce:7d:88:c8:02:98:e6:c5:40:f2:27:98:bc:17: e6:ab:c6:cd:99:11:e7:48:12:f9:25:e9:4c:2a:38: d1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4B:0E:84:2F:F8:A3:54:2E:16:CE:D2:E3:24:E5:EA:98:8D:7F:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4e:4d:98:44:94:25:9b:83:ff:4e:20:0b:31:1c:e5:57:9c: d0:3b:c8:3a:fc:0f:8d:fb:d1:37:4a:45:b9:82:dc:af:ed:7b: c6:20:68:cb:52:51:6e:47:28:b5:e3:c3:b5:46:c8:e2:83:10: 0e:7a:50:79:c9:28:10:01:9f:e3:e6:47:c4:bf:0b:77:d5:fc: 78:ad:26:8e:e3:97:62:a2:5f:f7:55:35:b6:45:06:a4:d7:81: 8c:69:10:72:4a:39:87:66:72:f6:cb:62:1f:64:b3:d5:84:d2: 5b:53:52:a2:25:aa:4f:d4:ac:0e:ac:0a:ab:58:45:93:67:e7: a1:6b:68:07:e9:2a:3c:6e:1a:81:1d:c0:0a:40:ca:cc:cc:fb: 17:ab:c2:50:ca:08:20:2b:bd:21:a1:23:9a:68:d0:de:16:2d: 24:81:d1:db:de:d8:3a:8a:27:b9:80:1a:96:ea:17:45:06:d3: f6:b6:ad:4a:f2:48:d7:02:9c:cb:ac:2f:d4:16:79:4a:a5:dd: 2c:c8:22:78:98:9c:35:5c:af:13:df:ae:31:ed:64:d4:bb:4e: c2:d2:fb:80:ab:05:32:5f:1e:93:05:bc:dd:95:e1:05:ef:85: 2f:dd:e4:30:62:ee:2e:03:17:7b:bc:d6:3e:08:0f:4e:d8:b0: d7:af:38:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeDjm379YsdKKAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ODU5YmI5NTMtYzYzNS00YTY3LTkyMTMtZWM1NDllOTc1NzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPb11u3aOZJULdY5pCBQ/ZQJLsqSgpNNQoT5 kHS6LtrQQHji5ZD8PkhEuD5kEc4F0WrNjKNQcSJ4wfeFYWdYxHTi+XDQikQI/waf pfO1cpRnkc4SIIFBmcDA3ILXz3k5cjqOREy01DJ8/3WSJc+2DVmRwHBt3b0RzJUH S4evBAptgmQ9ivqDlM6qVqk88isQrplkui4CwmOIlQnrOcEzhxwr3F1bBGsElnEt VGQGdNVOljv+t6UymHrn7RcmDiVVxVSQvbiPQZcU/Xje1vCx59Bdmg4IqK3ph6dM lTyIM1Urzn2IyAKY5sVA8ieYvBfmq8bNmRHnSBL5JelMKjjRSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFLDoQv+KNULhbO0uMk5eqYjX/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjJiMGJmYTAtYmNhZS0z MWM0LWFjM2MtOWExNDJhNjgzOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxOTZhElCWbg/9OIAsxHOVXnNA7yDr8D4370TdKRbmC3K/te8YgaMtS UW5HKLXjw7VGyOKDEA56UHnJKBABn+PmR8S/C3fV/HitJo7jl2KiX/dVNbZFBqTX gYxpEHJKOYdmcvbLYh9ks9WE0ltTUqIlqk/UrA6sCqtYRZNn56FraAfpKjxuGoEd wApAyszM+xerwlDKCCArvSGhI5po0N4WLSSB0dve2DqKJ7mAGpbqF0UG0/a2rUry SNcCnMusL9QWeUql3SzIIniYnDVcrxPfrjHtZNS7TsLS+4CrBTJfHpMFvN2V4QXv hS/d5DBi7i4DF3u81j4ID07YsNevOHg= -----END CERTIFICATE-----Generated at Mon Sep 28 20:46:53 2026 by rpki-client