$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/470b3755-1966-3362-8d90-9d40f2ef2029.roa File: 470b3755-1966-3362-8d90-9d40f2ef2029.roa (raw, json) Hash identifier: 2bjd3ENYAvY/GEcZnxHYtjs9J6D2L52C6IxAKL/X/Vk= Subject key identifier: E2:9D:0C:ED:D4:22:0D:2A:05:12:2B:9D:7E:91:DD:F3:EA:35:8C:1C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA7884BAAF247AD4789FFC8C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/470b3755-1966-3362-8d90-9d40f2ef2029.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 2914 IP address blocks: 209.101.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4b:aa:f2:47:ad:47:89:ff:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0db56198-4c8f-4dd1-8fd0-005411038388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:cf:06:f3:81:61:eb:78:36:3a:2a:4c:55: 08:a0:9d:f1:5b:cb:9b:95:07:2b:e6:bb:ec:8d:6e: 02:e3:97:4d:a8:42:e6:fe:b5:e6:73:23:5b:b3:da: 20:7a:26:c3:8b:d0:98:17:61:b9:c6:52:e1:50:8d: d2:72:53:df:b8:2e:05:ab:7e:e7:c3:18:e5:4d:d2: 7e:40:cc:1a:ed:9e:20:56:c5:08:a2:fc:82:24:3e: c5:01:f5:32:af:33:ae:04:71:de:7f:18:5f:cb:2a: c0:f2:d1:c0:3d:dd:a0:fe:1f:99:6b:4b:67:6d:78: 1c:96:f5:b0:50:27:43:11:d8:02:4e:4f:68:9f:77: bf:28:2c:0c:5a:9d:78:f4:d2:40:ca:8f:5a:d5:a9: e2:fb:9b:6d:e3:00:88:4e:2e:46:ae:2c:b2:e5:fe: e0:20:96:4a:e2:6e:d9:af:8f:c0:0b:48:24:82:ba: 42:41:51:28:57:64:63:10:67:ff:dd:dc:e0:1f:e2: 46:b8:36:e8:53:ff:0d:8e:03:96:39:9f:20:e4:f0: 78:7b:ef:fb:b0:5f:04:ac:46:6e:9a:69:ee:d9:e0: 14:1f:10:9b:e9:f5:a5:f9:89:f2:f3:89:03:d0:67: 1d:29:e1:6b:00:29:51:a0:cf:79:46:37:83:86:5e: 72:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9D:0C:ED:D4:22:0D:2A:05:12:2B:9D:7E:91:DD:F3:EA:35:8C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/470b3755-1966-3362-8d90-9d40f2ef2029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f2:8a:15:99:d4:20:ec:7d:57:da:e6:5a:1d:30:f6:01:f8: b7:95:98:87:1b:39:ce:99:5a:87:4a:ef:dd:8f:67:f9:b6:82: 9c:2f:8f:f6:54:70:26:19:dd:44:cc:60:7c:97:85:33:b4:65: 71:f2:27:87:34:a4:2c:69:5c:54:46:2d:e7:31:cb:10:d7:db: cd:37:08:10:f7:ba:6b:a2:a0:27:d9:27:37:6c:24:3f:73:af: d0:2a:15:db:ec:e3:9a:72:51:69:85:11:ae:6a:eb:af:cb:41: 34:bc:c8:3a:7c:5f:37:50:fb:2b:74:44:de:02:ac:de:67:45: 0e:c3:45:ce:3c:32:11:51:ea:dc:14:84:28:c4:e1:95:1d:53: 18:01:ee:15:1e:4f:d6:57:83:11:94:40:e9:97:7b:b3:51:07: b4:0e:22:27:40:2d:0d:a6:76:ff:c6:c0:14:ca:86:f1:08:4a: 17:c0:0a:df:01:8a:cb:0f:bb:24:71:87:3d:64:04:b1:24:62: f7:42:8c:f7:41:a2:3d:64:93:5f:38:86:29:94:15:97:47:1c: 46:b6:ce:06:e7:23:a7:d4:e6:a0:f6:35:1e:3b:6f:3a:18:ae: 1e:35:8c:bc:6b:ff:0c:73:0b:57:3a:d7:5f:03:aa:1e:e0:d6: 60:c3:3c:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niEuq8ketR4n/yMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGRiNTYxOTgtNGM4Zi00ZGQxLThmZDAtMDA1NDExMDM4Mzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXXPBvOBYet4NjoqTFUIoJ3xW8ublQcr5rvs jW4C45dNqELm/rXmcyNbs9ogeibDi9CYF2G5xlLhUI3SclPfuC4Fq37nwxjlTdJ+ QMwa7Z4gVsUIovyCJD7FAfUyrzOuBHHefxhfyyrA8tHAPd2g/h+Za0tnbXgclvWw UCdDEdgCTk9on3e/KCwMWp149NJAyo9a1ani+5tt4wCITi5Griyy5f7gIJZK4m7Z r4/AC0gkgrpCQVEoV2RjEGf/3dzgH+JGuDboU/8NjgOWOZ8g5PB4e+/7sF8ErEZu mmnu2eAUHxCb6fWl+Yny84kD0GcdKeFrAClRoM95RjeDhl5yHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKdDO3UIg0qBRIrnX6R3fPqNYwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDcwYjM3NTUtMTk2Ni0z MzYyLThkOTAtOWQ0MGYyZWYyMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzyihWZ1CDsfVfa5lodMPYB+LeVmIcbOc6ZWodK792PZ/m2gpwvj/ZU cCYZ3UTMYHyXhTO0ZXHyJ4c0pCxpXFRGLecxyxDX2803CBD3umuioCfZJzdsJD9z r9AqFdvs45pyUWmFEa5q66/LQTS8yDp8XzdQ+yt0RN4CrN5nRQ7DRc48MhFR6twU hCjE4ZUdUxgB7hUeT9ZXgxGUQOmXe7NRB7QOIidALQ2mdv/GwBTKhvEIShfACt8B issPuyRxhz1kBLEkYvdCjPdBoj1kk184himUFZdHHEa2zgbnI6fU5qD2NR47bzoY rh41jLxr/wxzC1c6118Dqh7g1mDDPAM= -----END CERTIFICATE-----Generated at Wed Jul 29 19:41:09 2026 by rpki-client