$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a03bd7e-19d9-3f70-958a-4c313a3e86cc.roa File: 6a03bd7e-19d9-3f70-958a-4c313a3e86cc.roa (raw, json) Hash identifier: Nkoysh+2SUu71IW6VYx/tq2Cjvvnfc7PZBIzA2pSW4k= Subject key identifier: 8E:9C:D7:8A:0D:2E:C4:62:B9:F4:B9:DB:51:CF:58:D7:02:99:30:37 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA01526B7BB3B959171772E00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a03bd7e-19d9-3f70-958a-4c313a3e86cc.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 9304 IP address blocks: 209.101.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:26:b7:bb:3b:95:91:71:77:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=889c991c-7db5-4f0a-995b-d314c5def3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:de:6f:f0:f8:f7:56:d8:ac:cc:04:ac:db: c1:c2:59:c4:5e:bd:54:04:d2:eb:30:86:f0:4a:ed: 4f:2a:5b:76:0b:2e:b2:66:a0:87:28:fd:ef:1d:1c: c5:7b:22:02:4c:fc:eb:ee:6a:2c:b7:a0:1d:e2:96: 4a:d5:60:ea:b8:70:fd:a6:0c:21:7e:ca:8d:0e:45: 05:22:20:c4:f4:e2:2d:2b:3c:cd:06:28:2e:ad:3c: d5:48:de:1b:f9:bc:e4:71:6a:e9:07:3f:86:13:ae: 37:a3:40:d4:98:e2:39:ee:00:c1:86:a5:df:5e:e5: 93:44:76:d3:01:d3:60:83:e6:b9:64:21:b1:6b:8b: b8:a0:e0:38:ce:7c:e7:0a:20:be:1c:64:fc:00:a0: 59:6a:df:99:ca:e2:e9:22:a0:45:6f:30:a3:b6:8e: 30:2f:e8:ba:0c:9e:68:32:08:b3:88:d5:65:59:0b: 69:0d:d0:b5:58:ff:58:6e:7f:81:5d:88:dc:ed:6d: ae:d3:6f:76:59:7e:f1:ef:03:f6:5c:59:5e:36:44: f7:ca:f6:39:d9:b1:a0:74:37:d5:8a:b5:14:12:c3: 90:46:dc:48:5d:f8:03:4a:e2:af:90:fa:48:bc:24: b0:2c:c4:4e:8d:17:6d:42:3c:07:18:22:f2:69:4a: 61:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9C:D7:8A:0D:2E:C4:62:B9:F4:B9:DB:51:CF:58:D7:02:99:30:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a03bd7e-19d9-3f70-958a-4c313a3e86cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a1:2d:c0:dd:58:21:48:b6:64:b4:9b:9c:ab:51:6c:87:61: 50:3f:bd:7b:bc:61:bb:01:e5:9d:bb:d0:1e:60:5b:8d:83:f0: f4:2a:09:74:d5:d4:1a:e4:c3:e7:00:bd:8a:0b:aa:c2:34:f1: 3b:40:92:16:dd:25:ee:c5:ef:1a:1f:8a:0c:3a:78:3b:d2:ca: 10:60:20:d6:55:41:bf:53:53:e5:ca:78:ec:88:e4:7b:97:49: 68:cb:ec:6e:d4:86:6e:80:ae:94:6f:9e:e3:86:49:53:27:a9: 9a:09:f3:05:47:3a:a1:ab:b4:40:c9:80:75:41:f9:1d:da:ed: 94:a1:22:0c:ca:38:29:cc:5d:83:c4:f9:80:7a:73:d4:07:46: 14:5a:a0:2d:03:5a:97:91:be:d6:81:df:6f:2b:06:d2:fc:21: 6c:5e:be:e9:83:f2:a4:11:77:1d:55:68:57:bd:fc:c8:d8:67: 64:0a:cd:66:a7:9f:26:a2:f5:8d:1c:70:e9:b3:73:68:ba:e4: 5d:6b:a9:d9:c3:31:b0:d8:42:e8:9d:5f:35:0e:84:64:f0:31: d2:35:2e:f9:57:e3:8e:11:7a:09:a8:78:02:81:81:eb:bc:90: b5:16:2e:af:0c:c1:cd:c1:76:25:f8:7f:f1:17:b5:e2:20:3d: 71:cf:07:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFSa3uzuVkXF3LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ODg5Yzk5MWMtN2RiNS00ZjBhLTk5NWItZDMxNGM1ZGVmM2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI3eb/D491bYrMwErNvBwlnEXr1UBNLrMIbw Su1PKlt2Cy6yZqCHKP3vHRzFeyICTPzr7most6Ad4pZK1WDquHD9pgwhfsqNDkUF IiDE9OItKzzNBigurTzVSN4b+bzkcWrpBz+GE643o0DUmOI57gDBhqXfXuWTRHbT AdNgg+a5ZCGxa4u4oOA4znznCiC+HGT8AKBZat+ZyuLpIqBFbzCjto4wL+i6DJ5o MgiziNVlWQtpDdC1WP9Ybn+BXYjc7W2u0292WX7x7wP2XFleNkT3yvY52bGgdDfV irUUEsOQRtxIXfgDSuKvkPpIvCSwLMROjRdtQjwHGCLyaUphFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6c14oNLsRiufS521HPWNcCmTA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNmEwM2JkN2UtMTlkOS0z ZjcwLTk1OGEtNGMzMTNhM2U4NmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyhLcDdWCFItmS0m5yrUWyHYVA/vXu8YbsB5Z270B5gW42D8PQqCXTV 1Brkw+cAvYoLqsI08TtAkhbdJe7F7xofigw6eDvSyhBgINZVQb9TU+XKeOyI5HuX SWjL7G7Uhm6ArpRvnuOGSVMnqZoJ8wVHOqGrtEDJgHVB+R3a7ZShIgzKOCnMXYPE +YB6c9QHRhRaoC0DWpeRvtaB328rBtL8IWxevumD8qQRdx1VaFe9/MjYZ2QKzWan nyai9Y0ccOmzc2i65F1rqdnDMbDYQuidXzUOhGTwMdI1LvlX444RegmoeAKBgeu8 kLUWLq8Mwc3BdiX4f/EXteIgPXHPBwQ= -----END CERTIFICATE-----Generated at Wed Jul 29 08:37:43 2026 by rpki-client