$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa File: 8703fce2-71f2-3ab4-962f-b12e334f9207.roa (raw, json) Hash identifier: kQhEUA5+qreQK3mUOmuzgCgzFk1UpeLQ/GoGZnK4+0A= Subject key identifier: 86:59:75:60:C3:0E:A4:19:E8:44:0D:3B:A7:C5:B1:96:81:56:63:02 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA0156FE519CEE1DAED7144C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 401783 IP address blocks: 209.101.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:6f:e5:19:ce:e1:da:ed:71:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=5939018a-2d71-47c0-9d2c-6717d5868959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f3:31:b1:ec:fd:43:51:9c:de:77:a3:a0:af: 9d:0d:4f:16:89:fe:58:d8:d0:c0:95:2c:1a:14:2b: 32:c7:6b:03:ff:2b:00:14:17:c0:5c:40:36:fc:fc: 62:d3:b4:98:16:2f:23:a0:87:87:04:c8:49:f0:90: 0f:66:3a:80:f6:02:a7:d9:13:90:c8:a8:a6:e5:fb: 19:99:42:d6:cb:d7:79:ef:c3:95:90:31:01:3a:ab: fc:de:29:a5:29:00:89:58:4e:a2:30:f0:60:b5:65: 75:3a:8e:bd:c7:9e:af:7b:3b:7f:a1:69:83:45:ed: c0:47:fa:ab:f6:bd:72:e7:84:0d:b1:51:68:47:09: f1:7b:54:ff:ba:75:1e:c9:c1:2a:60:45:cf:3d:9e: cd:6b:1a:c9:4b:4c:b9:bb:8c:56:46:7a:e8:a6:77: 5b:0b:ac:9c:66:a6:ea:c3:0e:48:ac:4c:72:db:95: 63:d8:eb:bf:f7:51:e5:cc:34:bc:a2:d4:e7:ac:63: 8c:22:9f:56:49:25:de:2a:da:d0:81:2a:16:4f:e9: 06:9b:9a:e6:40:94:f3:20:e1:47:ad:a3:b9:a0:b2: 2b:c8:3a:f4:7b:b2:45:c8:26:96:d7:3a:29:4d:00: 30:72:0b:01:47:6a:76:8f:17:d4:7d:98:35:1c:92: d6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:59:75:60:C3:0E:A4:19:E8:44:0D:3B:A7:C5:B1:96:81:56:63:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:87:36:72:a8:52:97:47:cd:bb:c2:7b:e0:d9:c9:9e:6f:8e: 0a:65:5b:08:e4:4c:a4:26:83:2a:24:c3:87:7b:69:00:74:51: 52:b9:79:2f:05:b9:4d:64:90:7e:31:0a:b5:6e:ca:e5:af:6c: 4b:0f:67:e5:9e:bb:bf:1b:f5:e8:0f:2d:d8:55:d1:f6:77:d3: a6:3b:2e:64:01:52:2c:5a:f5:8b:c8:54:25:85:f4:3e:d5:51: 9a:30:c9:9c:a2:2d:3e:9b:ea:3a:46:04:af:d2:3a:4e:1b:44: 4d:d4:cc:58:6d:0c:8e:d4:01:fe:e0:b9:a8:44:16:d3:e0:29: ab:fe:3c:f7:b1:07:de:0b:c8:c5:d8:5b:ef:63:33:b9:0a:24: a2:38:27:cb:a2:31:f0:fd:2a:64:c6:7e:64:8c:5e:8f:07:33: d1:fa:90:6e:13:e1:fb:a7:dd:e8:e3:89:fb:83:5a:63:b0:e7: a6:7a:55:b1:2d:c1:be:90:45:ae:aa:4e:ec:1d:2f:b4:b1:94: 3b:81:88:bc:a6:22:0e:6a:8e:df:00:dc:f2:14:8a:02:a0:f6: 06:f4:73:56:a8:91:4a:08:b9:11:45:36:8a:49:22:3e:28:0c: f8:4d:74:14:79:3e:70:00:2f:bd:1b:bc:d5:8b:75:7b:c0:3a: 29:8b:9c:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFW/lGc7h2u1xRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk NTkzOTAxOGEtMmQ3MS00N2MwLTlkMmMtNjcxN2Q1ODY4OTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvMxsez9Q1Gc3nejoK+dDU8Wif5Y2NDAlSwa FCsyx2sD/ysAFBfAXEA2/Pxi07SYFi8joIeHBMhJ8JAPZjqA9gKn2ROQyKim5fsZ mULWy9d578OVkDEBOqv83imlKQCJWE6iMPBgtWV1Oo69x56vezt/oWmDRe3AR/qr 9r1y54QNsVFoRwnxe1T/unUeycEqYEXPPZ7NaxrJS0y5u4xWRnropndbC6ycZqbq ww5IrExy25Vj2Ou/91HlzDS8otTnrGOMIp9WSSXeKtrQgSoWT+kGm5rmQJTzIOFH raO5oLIryDr0e7JFyCaW1zopTQAwcgsBR2p2jxfUfZg1HJLWAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZZdWDDDqQZ6EQNO6fFsZaBVmMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODcwM2ZjZTItNzFmMi0z YWI0LTk2MmYtYjEyZTMzNGY5MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKHNnKoUpdHzbvCe+DZyZ5vjgplWwjkTKQmgyokw4d7aQB0UVK5eS8F uU1kkH4xCrVuyuWvbEsPZ+Weu78b9egPLdhV0fZ306Y7LmQBUixa9YvIVCWF9D7V UZowyZyiLT6b6jpGBK/SOk4bRE3UzFhtDI7UAf7guahEFtPgKav+PPexB94LyMXY W+9jM7kKJKI4J8uiMfD9KmTGfmSMXo8HM9H6kG4T4fun3ejjifuDWmOw56Z6VbEt wb6QRa6qTuwdL7SxlDuBiLymIg5qjt8A3PIUigKg9gb0c1aokUoIuRFFNopJIj4o DPhNdBR5PnAAL70bvNWLdXvAOimLnDk= -----END CERTIFICATE-----Generated at Wed Jul 29 19:39:43 2026 by rpki-client