$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2724a296-9349-343f-b548-9a82464c7209.roa File: 2724a296-9349-343f-b548-9a82464c7209.roa (raw, json) Hash identifier: jENz5IbduPv6JknihbUVGlkz+aa5rTZ6ZLsKTO71TNY= Subject key identifier: 74:40:C4:6B:25:1D:06:43:84:94:EE:88:89:1E:B9:51:0C:3C:B3:5B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4277EED4B89839A3070DEB80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2724a296-9349-343f-b548-9a82464c7209.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401783 IP address blocks: 209.101.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:ee:d4:b8:98:39:a3:07:0d:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=e11a5e10-427c-4d6d-9a01-817d0668d0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:0e:dc:f3:94:48:95:94:c7:33:c1:e7:d6: d3:5c:f1:e1:15:22:85:ed:41:cd:25:7d:68:ca:8e: 96:c3:fb:06:2a:76:23:b6:12:16:94:2c:6e:70:51: 7e:83:dc:fc:08:0d:72:1d:dc:5f:a4:c5:3b:af:75: d5:b3:80:62:c8:7e:d6:81:10:ee:41:e9:98:c4:c5: df:bb:54:3f:39:c9:c4:b7:0f:21:0e:a2:78:1a:e2: da:87:22:a4:7d:f5:ce:d9:80:cf:f5:b2:ab:17:f7: f3:96:ee:16:07:25:f2:6e:af:98:9d:50:4b:ad:a3: 98:1d:82:25:0c:aa:fb:25:9f:2f:e2:e0:aa:b0:81: 8e:ff:0d:21:f2:d0:b7:ad:54:d3:2f:70:95:38:a2: 09:ef:61:a5:28:af:ea:86:aa:f9:f6:09:c5:a7:13: af:1a:4c:c1:ce:6f:54:aa:27:07:52:3d:62:13:39: ad:16:e5:f2:91:04:0f:7a:60:b7:cf:71:88:42:4b: b7:42:84:11:a6:d6:e8:9f:45:eb:6f:4f:2b:af:c3: 00:7f:87:c8:ec:87:69:04:7d:22:1d:d1:0b:51:67: 26:3c:bf:89:8a:89:d1:71:fc:29:c5:e6:3a:30:26: cb:60:38:5e:d9:36:bc:0d:b8:f6:30:85:97:16:a1: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:40:C4:6B:25:1D:06:43:84:94:EE:88:89:1E:B9:51:0C:3C:B3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2724a296-9349-343f-b548-9a82464c7209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3e:e3:6b:75:72:e9:4b:4f:a9:cc:75:58:ac:b4:df:ff:f9: 4c:5d:ae:df:85:2a:0f:f7:cb:6f:12:74:d1:66:08:2c:1e:61: e9:40:65:e8:78:36:fb:1f:5d:d7:d4:a2:f3:61:74:8d:cb:b2: d3:c9:97:93:a7:eb:c4:4f:a4:d1:fc:33:50:40:d7:e3:ff:93: 46:6a:c7:b1:fa:e7:e4:10:99:a0:ec:37:ba:a4:f9:c7:8e:47: 05:ba:93:10:20:f2:fe:00:88:e9:40:e7:75:17:29:65:0f:a8: be:b2:d0:74:a9:58:59:3d:d4:d9:1b:71:5f:53:98:e6:19:a9: df:ad:78:a8:12:ff:6b:43:2c:8b:fd:e8:e2:5c:4b:8c:59:19: f3:db:a9:66:55:67:3e:66:01:bd:47:8f:18:c3:56:b5:e8:25: be:59:1f:8f:b3:b9:58:7f:7f:2a:54:8c:f1:89:89:20:0b:f1: b5:7d:65:e3:ea:ba:8f:7b:14:82:90:02:11:1c:bd:b2:f2:01: e4:8b:dd:ce:d6:a3:fb:95:05:0a:4c:62:e3:4d:e4:62:46:1d: cf:fd:91:33:a2:fc:78:5b:11:98:cb:b3:82:07:3b:bc:de:94: c8:bd:7e:31:79:c1:75:60:5b:8e:de:92:5f:d1:b5:bc:c4:8d: 73:b9:d9:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd+7UuJg5owcN64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZTExYTVlMTAtNDI3Yy00ZDZkLTlhMDEtODE3ZDA2NjhkMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHsO3POUSJWUxzPB59bTXPHhFSKF7UHNJX1o yo6Ww/sGKnYjthIWlCxucFF+g9z8CA1yHdxfpMU7r3XVs4BiyH7WgRDuQemYxMXf u1Q/OcnEtw8hDqJ4GuLahyKkffXO2YDP9bKrF/fzlu4WByXybq+YnVBLraOYHYIl DKr7JZ8v4uCqsIGO/w0h8tC3rVTTL3CVOKIJ72GlKK/qhqr59gnFpxOvGkzBzm9U qicHUj1iEzmtFuXykQQPemC3z3GIQku3QoQRptbon0Xrb08rr8MAf4fI7IdpBH0i HdELUWcmPL+JionRcfwpxeY6MCbLYDhe2Ta8Dbj2MIWXFqEtvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRAxGslHQZDhJTuiIkeuVEMPLNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjcyNGEyOTYtOTM0OS0z NDNmLWI1NDgtOWE4MjQ2NGM3MjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU+42t1culLT6nMdVistN//+Uxdrt+FKg/3y28SdNFmCCweYelAZeh4 NvsfXdfUovNhdI3LstPJl5On68RPpNH8M1BA1+P/k0Zqx7H65+QQmaDsN7qk+ceO RwW6kxAg8v4AiOlA53UXKWUPqL6y0HSpWFk91NkbcV9TmOYZqd+teKgS/2tDLIv9 6OJcS4xZGfPbqWZVZz5mAb1HjxjDVrXoJb5ZH4+zuVh/fypUjPGJiSAL8bV9ZePq uo97FIKQAhEcvbLyAeSL3c7Wo/uVBQpMYuNN5GJGHc/9kTOi/HhbEZjLs4IHO7ze lMi9fjF5wXVgW47ekl/RtbzEjXO52XQ= -----END CERTIFICATE-----Generated at Sat Oct 10 14:46:05 2026 by rpki-client