$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/470b3755-1966-3362-8d90-9d40f2ef2029.roa File: 470b3755-1966-3362-8d90-9d40f2ef2029.roa (raw, json) Hash identifier: q+1ek6khz70nSyxcD2ZMp3LAuW1/4dVuOz4hrZSKU0A= Subject key identifier: 35:68:1A:DE:0D:92:29:EB:0E:58:8A:4C:34:BC:CD:51:10:CD:75:A4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4974DC6D3E94172262E8CB00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/470b3755-1966-3362-8d90-9d40f2ef2029.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2914 IP address blocks: 209.101.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:dc:6d:3e:94:17:22:62:e8:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=81acbd35-59f9-4dbf-ac6a-49eb60c56f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9c:89:97:67:f6:32:46:de:e0:ab:23:d9:1c: 2b:a9:45:31:72:ca:61:0f:4a:ff:95:b8:e9:91:0b: 1c:52:cd:7b:19:83:89:6a:90:be:27:80:d5:c2:97: 8b:18:64:22:c6:e6:19:ae:06:36:e0:af:6b:51:14: 9e:42:61:51:8a:4b:70:c2:81:10:a7:de:92:e4:95: f3:eb:dd:d8:8f:ab:46:d8:6b:2d:ea:e0:04:76:db: a6:72:12:91:e8:08:7f:90:ab:75:3d:ae:43:99:d8: ba:96:7a:4e:c0:fe:dd:4c:6a:12:70:69:fc:b6:19: b5:e8:8f:79:d3:ed:fa:f5:6d:e4:5a:a3:21:8d:ea: be:28:01:4b:6a:5d:77:40:12:c1:48:7b:d9:e5:d6: ee:ce:53:f0:24:65:94:84:5a:19:df:9e:0d:a7:70: ec:61:dd:57:d6:bb:42:d4:2b:22:1b:94:c8:fc:8d: 19:90:bf:21:13:ce:a0:53:67:c7:6c:58:44:6c:9d: 77:ce:8a:81:9d:c9:b2:68:eb:06:ef:47:53:96:4f: 20:89:fa:ab:f2:5e:6b:96:ec:e0:f5:8e:51:b1:e7: 52:b2:03:71:e9:4b:d1:46:d5:53:26:5b:83:d2:e0: ef:b5:0c:19:7d:32:e1:6e:9e:6d:56:21:4c:66:3b: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:68:1A:DE:0D:92:29:EB:0E:58:8A:4C:34:BC:CD:51:10:CD:75:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/470b3755-1966-3362-8d90-9d40f2ef2029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e0:dc:ed:03:05:3e:70:3b:ae:fa:74:ff:d7:c1:95:e5:63: 9e:82:aa:05:e0:94:47:ee:56:bf:81:bb:38:eb:f7:56:b8:31: 2e:ca:62:48:5d:b7:10:6f:03:c9:87:60:ad:c8:c5:68:04:86: 42:b2:98:ff:11:1b:85:c2:cf:78:92:28:3b:a8:c3:21:4d:d2: 23:66:8e:b2:51:8f:74:3a:18:ab:7d:9c:84:3e:a3:68:e6:bd: 84:6e:11:1d:4a:25:73:9b:b1:d8:25:4e:27:2b:b3:9e:51:6a: f7:ca:d4:b3:a1:4e:b8:78:17:b6:1a:7f:c2:c3:7a:d6:1d:a3: 73:41:76:0d:d4:ae:4e:a0:96:24:1d:85:ab:bc:96:a0:db:86: e3:14:de:3f:20:6b:b2:a0:fc:f1:ae:76:46:04:31:fe:b8:ea: 8b:44:a1:41:f7:1a:1b:4e:23:a8:6d:0f:9f:09:63:29:71:eb: af:b3:24:60:fc:fe:48:da:76:43:1f:14:b6:3b:96:83:ef:6e: 2c:42:8a:f5:a9:bd:19:e6:f8:b3:a7:a0:a3:93:54:fe:0e:da: 48:cf:ca:23:5c:ce:35:e3:57:e4:3c:d2:6f:52:f3:11:09:08: df:42:dd:fa:90:98:b3:41:8e:be:ea:28:99:40:50:ab:d6:b8: 15:1e:2b:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNxtPpQXImLoywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODFhY2JkMzUtNTlmOS00ZGJmLWFjNmEtNDllYjYwYzU2ZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZyJl2f2Mkbe4Ksj2RwrqUUxcsphD0r/lbjp kQscUs17GYOJapC+J4DVwpeLGGQixuYZrgY24K9rURSeQmFRiktwwoEQp96S5JXz 693Yj6tG2Gst6uAEdtumchKR6Ah/kKt1Pa5Dmdi6lnpOwP7dTGoScGn8thm16I95 0+369W3kWqMhjeq+KAFLal13QBLBSHvZ5dbuzlPwJGWUhFoZ354Np3DsYd1X1rtC 1CsiG5TI/I0ZkL8hE86gU2fHbFhEbJ13zoqBncmyaOsG70dTlk8gifqr8l5rluzg 9Y5RsedSsgNx6UvRRtVTJluD0uDvtQwZfTLhbp5tViFMZju5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVoGt4NkinrDliKTDS8zVEQzXWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDcwYjM3NTUtMTk2Ni0z MzYyLThkOTAtOWQ0MGYyZWYyMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDg3O0DBT5wO676dP/XwZXlY56CqgXglEfuVr+Buzjr91a4MS7KYkhd txBvA8mHYK3IxWgEhkKymP8RG4XCz3iSKDuowyFN0iNmjrJRj3Q6GKt9nIQ+o2jm vYRuER1KJXObsdglTicrs55RavfK1LOhTrh4F7Yaf8LDetYdo3NBdg3Urk6gliQd hau8lqDbhuMU3j8ga7Kg/PGudkYEMf646otEoUH3GhtOI6htD58JYylx66+zJGD8 /kjadkMfFLY7loPvbixCivWpvRnm+LOnoKOTVP4O2kjPyiNczjXjV+Q80m9S8xEJ CN9C3fqQmLNBjr7qKJlAUKvWuBUeK1s= -----END CERTIFICATE-----Generated at Mon Sep 28 21:59:44 2026 by rpki-client