$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa File: 4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa (raw, json) Hash identifier: KgC2WgtW/Dt4ytL7B4+lrjPtILU6ucWMHeSHRITCjNo= Subject key identifier: 90:2A:08:FD:C6:5F:78:86:3F:7C:A4:69:F9:43:BB:A5:AB:0B:1D:C6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA0150803390566B4A33F1898 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 401783 IP address blocks: 209.101.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:08:03:39:05:66:b4:a3:3f:18:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=e1837343-64e2-49f9-b31e-d76811d24251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:1d:18:d8:84:cb:9e:90:6f:55:60:1a:73: a2:7e:a2:8b:f6:f3:c0:1b:cb:b8:e1:a8:82:c3:92: ab:93:71:78:cc:73:61:c6:f0:1d:f4:9f:c6:fb:e3: fb:25:33:eb:f5:52:b2:08:a3:30:11:b1:52:87:75: 8d:b6:cc:4d:e1:fa:6e:5a:51:03:c7:d8:19:de:53: 2c:d2:3e:9e:53:98:c8:5b:92:ac:ae:ac:6f:1d:07: d7:58:02:2e:15:67:ed:36:5d:1e:0a:28:5a:2d:39: 81:7e:27:23:e4:fa:66:0d:7f:04:f3:6e:aa:4c:a7: 17:41:d8:f2:1b:a1:05:c8:e4:9f:8e:8d:46:c9:39: c5:11:95:5a:2f:df:54:2b:57:9e:12:22:a3:6e:a8: 91:6c:d3:e0:dd:0e:8c:3a:ad:0c:0a:c0:63:1b:de: c3:60:58:35:8b:7a:75:f9:06:0b:cf:24:30:9c:18: b0:cc:2e:9d:05:f7:33:68:e2:4b:8f:e6:ad:4c:e2: 9b:e9:7b:42:90:a6:c3:7e:72:2d:8c:75:dc:61:e2: c1:6d:b7:4b:bc:19:e8:1d:33:b0:02:8a:a9:df:dc: 15:c8:6e:03:4f:a6:99:46:60:1e:d2:7a:76:7f:de: 1f:fc:d8:91:d1:96:a7:a6:bb:c9:56:8c:9a:f6:ae: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2A:08:FD:C6:5F:78:86:3F:7C:A4:69:F9:43:BB:A5:AB:0B:1D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9b:48:7c:76:a4:86:54:69:c2:4f:c7:c7:c6:d8:8d:52:12: 88:a3:1e:96:d4:57:d8:46:c7:15:a2:f0:a6:0f:eb:f5:27:52: 82:16:35:c5:1f:8e:7c:f5:92:2c:35:9b:ba:b3:f2:c6:06:38: ba:ff:d4:6f:c5:0a:da:45:df:14:82:d0:18:7e:d5:7d:e5:a0: 67:1b:b6:fb:c5:f2:d0:10:eb:5e:62:9b:a0:31:05:f7:9f:6b: 0e:63:b7:3d:dc:02:85:ce:3f:b5:01:0d:e6:ba:fb:87:63:4c: 38:16:86:77:f0:92:68:1a:34:11:aa:35:5d:0a:c3:de:48:d1: 87:09:04:d5:15:22:74:e4:4e:c2:16:bb:5b:1b:10:3f:58:99: b6:33:d1:df:98:0c:50:a5:a4:06:0c:e6:63:c7:20:16:73:0a: 25:ee:42:31:92:96:13:bf:a0:66:8b:c7:ea:7d:2a:37:09:2f: 2b:62:7a:54:c6:f9:b8:52:28:b9:2f:9b:71:5a:fa:11:7a:59: 27:67:33:5c:bc:d4:bc:ed:c9:b5:9e:f6:8e:ca:ff:84:dd:45: 64:eb:d8:49:98:db:31:a5:7c:78:8f:d6:cc:0f:3a:91:20:68: 6a:64:02:7d:5d:fd:e0:80:2a:b3:c7:a2:18:f4:55:59:75:cc: 8d:17:2a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFQgDOQVmtKM/GJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZTE4MzczNDMtNjRlMi00OWY5LWIzMWUtZDc2ODExZDI0MjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sUdGNiEy56Qb1VgGnOifqKL9vPAG8u44aiC w5Krk3F4zHNhxvAd9J/G++P7JTPr9VKyCKMwEbFSh3WNtsxN4fpuWlEDx9gZ3lMs 0j6eU5jIW5KsrqxvHQfXWAIuFWftNl0eCihaLTmBficj5PpmDX8E826qTKcXQdjy G6EFyOSfjo1GyTnFEZVaL99UK1eeEiKjbqiRbNPg3Q6MOq0MCsBjG97DYFg1i3p1 +QYLzyQwnBiwzC6dBfczaOJLj+atTOKb6XtCkKbDfnItjHXcYeLBbbdLvBnoHTOw Aoqp39wVyG4DT6aZRmAe0np2f94f/NiR0ZanprvJVoya9q7eQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAqCP3GX3iGP3ykaflDu6WrCx3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGRiZmJhOTYtZWQ3Yi0z ZGVlLWE2MTQtNTMwZmFhZjZmY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACybSHx2pIZUacJPx8fG2I1SEoijHpbUV9hGxxWi8KYP6/UnUoIWNcUf jnz1kiw1m7qz8sYGOLr/1G/FCtpF3xSC0Bh+1X3loGcbtvvF8tAQ615im6AxBfef aw5jtz3cAoXOP7UBDea6+4djTDgWhnfwkmgaNBGqNV0Kw95I0YcJBNUVInTkTsIW u1sbED9YmbYz0d+YDFClpAYM5mPHIBZzCiXuQjGSlhO/oGaLx+p9KjcJLytielTG +bhSKLkvm3Fa+hF6WSdnM1y81LztybWe9o7K/4TdRWTr2EmY2zGlfHiP1swPOpEg aGpkAn1d/eCAKrPHohj0VVl1zI0XKro= -----END CERTIFICATE-----Generated at Wed Jul 29 19:38:43 2026 by rpki-client