$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa File: 9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa (raw, json) Hash identifier: lshMhqJ1uggnlt8p3vRSOIqKtYvyOC1CNQsW4QZyS2I= Subject key identifier: 13:46:98:86:23:F9:45:23:CC:F2:6A:8B:A4:48:4F:6D:E3:FF:10:F6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA015613F686796C223C28980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 9304 IP address blocks: 209.101.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:61:3f:68:67:96:c2:23:c2:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=3daffe91-2630-4c71-8502-65a627b2f226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:39:9a:52:57:73:51:c8:23:69:f8:d4:6d: ef:26:9b:60:eb:99:93:4f:67:b3:e6:6d:b8:32:98: ce:bc:75:ed:89:39:8e:95:60:4f:41:c4:fd:c6:19: 71:76:4c:b6:d4:f9:59:a6:39:81:1e:e3:a9:94:66: 63:ad:79:d3:ce:bd:74:03:5e:ce:ea:6a:c6:0e:ab: e6:7d:4a:e1:6a:66:e0:0f:b4:63:2d:07:d6:63:f6: cd:76:a2:00:9d:ba:49:97:2a:01:33:4f:d3:c1:3c: d1:46:9e:e0:2d:e6:e8:8c:63:ff:b1:1e:df:02:55: 10:7d:03:b0:a4:50:74:a0:35:b5:5e:3d:e9:81:9c: fa:14:35:aa:5b:ed:38:e5:85:00:3b:e5:48:c8:6e: c9:c9:15:7a:1c:e0:b6:65:22:18:7d:05:08:36:72: 09:d7:dc:79:98:74:a8:5e:08:f8:c8:32:a8:18:4b: 43:df:ef:f1:5c:54:b5:1f:2c:d0:40:ad:25:e6:c1: ea:b0:ca:98:49:64:37:cf:07:47:3c:02:e2:ef:2b: 34:90:e6:3f:5a:0e:07:f2:8e:e7:a0:dc:09:58:d8: f4:92:12:c1:b0:a6:d6:5c:6b:53:76:03:c3:bc:a4: a3:51:0a:88:5f:55:a7:01:da:b5:d2:56:be:ce:f2: 4b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:46:98:86:23:F9:45:23:CC:F2:6A:8B:A4:48:4F:6D:E3:FF:10:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:67:dc:a2:48:b0:3f:1d:a5:0f:f5:21:db:cf:83:21:0c:5a: a3:c3:75:32:78:b8:5b:3a:0e:6f:32:b3:bd:e5:c0:a3:42:e8: d8:b2:31:d6:0b:c1:8d:00:7f:33:a8:ab:50:90:21:82:cc:c2: 61:22:b8:4a:f1:42:6e:13:ba:af:7f:9b:bb:cd:90:99:a5:8d: 0e:c6:c3:2b:eb:83:33:be:ce:88:12:c5:c4:b1:82:fd:08:73: 5a:93:fd:dd:ba:38:89:1e:74:9f:a7:7e:34:f4:28:20:73:5a: 63:38:fa:5b:bd:bf:9c:91:58:9d:dd:19:14:99:74:25:1d:eb: 51:75:eb:c8:a1:dc:01:2e:16:f3:db:25:b0:9d:22:e0:73:1d: 97:0c:af:6c:e8:1c:74:8c:b3:a1:92:09:28:aa:86:fd:11:b3: bb:dc:1b:d7:03:b9:23:ee:66:d0:db:64:5c:b3:01:d9:e2:b0: d7:60:76:27:0e:a7:3e:4c:e1:e4:a5:32:0f:57:d2:fd:ae:6b: 6b:c3:ef:67:dd:6e:38:a0:d1:9d:ba:a9:b5:b5:c0:d0:37:03: 6d:19:d8:e1:d1:c0:1e:97:8f:4c:82:06:aa:8e:0b:cf:ae:9c: 95:24:9a:43:82:2c:0e:d2:55:f8:bf:35:1e:42:13:bc:00:a5: 5c:fb:bf:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFWE/aGeWwiPCiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk M2RhZmZlOTEtMjYzMC00YzcxLTg1MDItNjVhNjI3YjJmMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4c5mlJXc1HII2n41G3vJptg65mTT2ez5m24 MpjOvHXtiTmOlWBPQcT9xhlxdky21PlZpjmBHuOplGZjrXnTzr10A17O6mrGDqvm fUrhambgD7RjLQfWY/bNdqIAnbpJlyoBM0/TwTzRRp7gLebojGP/sR7fAlUQfQOw pFB0oDW1Xj3pgZz6FDWqW+045YUAO+VIyG7JyRV6HOC2ZSIYfQUINnIJ19x5mHSo Xgj4yDKoGEtD3+/xXFS1HyzQQK0l5sHqsMqYSWQ3zwdHPALi7ys0kOY/Wg4H8o7n oNwJWNj0khLBsKbWXGtTdgPDvKSjUQqIX1WnAdq10la+zvJLBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNGmIYj+UUjzPJqi6RIT23j/xD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWNkYWFlNzEtN2Q5YS0z OGIyLTg2NjgtYmU5MmQ1NGM0N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxn3KJIsD8dpQ/1IdvPgyEMWqPDdTJ4uFs6Dm8ys73lwKNC6NiyMdYL wY0AfzOoq1CQIYLMwmEiuErxQm4Tuq9/m7vNkJmljQ7GwyvrgzO+zogSxcSxgv0I c1qT/d26OIkedJ+nfjT0KCBzWmM4+lu9v5yRWJ3dGRSZdCUd61F168ih3AEuFvPb JbCdIuBzHZcMr2zoHHSMs6GSCSiqhv0Rs7vcG9cDuSPuZtDbZFyzAdnisNdgdicO pz5M4eSlMg9X0v2ua2vD72fdbjig0Z26qbW1wNA3A20Z2OHRwB6Xj0yCBqqOC8+u nJUkmkOCLA7SVfi/NR5CE7wApVz7v90= -----END CERTIFICATE-----Generated at Wed Jul 29 09:52:22 2026 by rpki-client