$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/96fdd57c-14e2-3330-be11-9f55b311ff1e.roa File: 96fdd57c-14e2-3330-be11-9f55b311ff1e.roa (raw, json) Hash identifier: itF7Itx4RtX8NimcRAlXRaHoIVM0uTKyS8aTJ13Vb9s= Subject key identifier: 05:D7:DD:91:D7:08:9D:12:B4:88:A4:69:65:51:03:09:C6:F9:B2:44 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F1E2CEC55114777058979FB80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/96fdd57c-14e2-3330-be11-9f55b311ff1e.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 7029 IP address blocks: 209.101.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:ec:55:11:47:77:05:89:79:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=9ba4b2bd-62d9-4bda-b7f7-043cabbd5af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:da:ba:ae:ca:a2:1e:0a:64:cd:ba:f0:7a: e5:02:50:24:09:9a:9b:9f:72:c8:48:32:1b:42:86: f4:79:62:f1:0e:64:9c:f0:8b:c1:75:12:3d:4e:4b: 8a:e6:83:5c:84:81:38:74:b9:dc:8b:c7:1f:07:25: c8:65:f2:db:4d:53:eb:52:ca:58:f8:e8:6a:b3:86: 6b:c2:4b:af:e2:d4:5f:da:0d:e5:d9:16:a9:c1:8d: ef:ff:94:60:c8:0a:09:cb:99:70:27:29:15:09:14: f2:9e:87:08:a8:92:c3:c9:11:08:5c:2a:24:53:46: f8:04:d4:86:40:5e:e2:3b:80:4c:70:d6:53:b5:ea: b8:4c:23:d9:86:74:7e:45:f0:68:9d:56:ab:b5:f9: 7b:65:1c:08:15:0a:ca:fc:1c:93:94:5b:0d:01:51: 19:9d:ae:0b:b5:02:62:ad:4b:5d:93:13:c8:30:08: 03:cc:e8:d6:4d:e6:19:ff:2b:ba:83:ec:b0:33:f3: ad:78:a9:50:d5:bd:54:44:3f:b1:6f:21:d3:62:04: 3b:9c:59:32:68:0d:30:04:b2:98:c7:5e:13:c1:67: 28:f6:c6:4d:52:fd:c3:37:fa:77:ef:2a:15:da:16: 65:47:a1:92:af:2a:30:19:66:96:06:c0:64:38:00: e3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D7:DD:91:D7:08:9D:12:B4:88:A4:69:65:51:03:09:C6:F9:B2:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/96fdd57c-14e2-3330-be11-9f55b311ff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:75:3d:37:5b:2e:6c:33:eb:b5:87:ca:91:2a:dd:07:8f:ce: 3e:91:42:d7:db:4f:9e:60:5c:15:48:9e:bf:e8:74:37:e6:80: f1:50:ae:f1:38:27:20:3e:3b:94:ca:a9:13:35:fe:c3:8e:a8: e5:66:7f:41:37:23:cd:6c:57:fd:77:5b:0c:8c:64:85:14:bf: b0:76:bd:62:31:77:f1:9f:f7:80:c4:d7:5d:36:62:2c:b4:7a: c8:4d:d8:b2:92:bb:63:15:78:11:10:03:e3:d3:23:99:fd:bb: 92:94:a3:db:18:4a:f3:8f:11:5e:d6:01:fe:4e:43:b7:51:d9: 5d:89:40:64:1f:1e:aa:af:bc:df:c1:07:81:6b:77:da:b7:eb: 16:5d:b9:06:a0:91:a9:b2:f7:f7:84:cb:fe:df:88:ee:f2:98: 06:2f:db:81:e8:35:db:8e:9e:47:f3:2e:b1:99:7e:0c:3b:ca: c6:ac:72:19:50:77:bf:db:8d:bb:c3:e1:94:35:8b:89:91:02: ce:eb:6f:3c:fa:7d:30:2d:54:ab:76:4c:25:ed:75:05:6d:7e: a9:81:4c:ba:4a:95:3e:8e:d6:1c:78:0d:ea:3e:7f:cc:c9:6b: a7:11:b0:62:57:2d:f6:a6:f5:86:6e:f3:b7:da:45:92:c3:8d: b5:1c:b2:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLOxVEUd3BYl5+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk OWJhNGIyYmQtNjJkOS00YmRhLWI3ZjctMDQzY2FiYmQ1YWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruLauq7Koh4KZM268HrlAlAkCZqbn3LISDIb Qob0eWLxDmSc8IvBdRI9TkuK5oNchIE4dLnci8cfByXIZfLbTVPrUspY+Ohqs4Zr wkuv4tRf2g3l2RapwY3v/5RgyAoJy5lwJykVCRTynocIqJLDyREIXCokU0b4BNSG QF7iO4BMcNZTteq4TCPZhnR+RfBonVartfl7ZRwIFQrK/ByTlFsNAVEZna4LtQJi rUtdkxPIMAgDzOjWTeYZ/yu6g+ywM/OteKlQ1b1URD+xbyHTYgQ7nFkyaA0wBLKY x14TwWco9sZNUv3DN/p37yoV2hZlR6GSryowGWaWBsBkOADj9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXX3ZHXCJ0StIikaWVRAwnG+bJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTZmZGQ1N2MtMTRlMi0z MzMwLWJlMTEtOWY1NWIzMTFmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx1PTdbLmwz67WHypEq3QePzj6RQtfbT55gXBVInr/odDfmgPFQrvE4 JyA+O5TKqRM1/sOOqOVmf0E3I81sV/13WwyMZIUUv7B2vWIxd/Gf94DE1102Yiy0 eshN2LKSu2MVeBEQA+PTI5n9u5KUo9sYSvOPEV7WAf5OQ7dR2V2JQGQfHqqvvN/B B4Frd9q36xZduQagkamy9/eEy/7fiO7ymAYv24HoNduOnkfzLrGZfgw7ysaschlQ d7/bjbvD4ZQ1i4mRAs7rbzz6fTAtVKt2TCXtdQVtfqmBTLpKlT6O1hx4Deo+f8zJ a6cRsGJXLfam9YZu87faRZLDjbUcsmc= -----END CERTIFICATE-----Generated at Sun Oct 4 22:39:29 2026 by rpki-client