$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebad1ee-3c79-335d-ab11-03af8ce15c49.roa File: 9ebad1ee-3c79-335d-ab11-03af8ce15c49.roa (raw, json) Hash identifier: 3zmlY+Rj7icggbwlbjS1dpXCf7MAv5iwF/UhZiOhOUk= Subject key identifier: 27:6D:AE:A8:4E:1C:A9:35:E6:E4:B5:48:6C:E2:53:82:CB:62:89:EC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F1732387848C7E60293E98600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebad1ee-3c79-335d-ab11-03af8ce15c49.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 13347 IP address blocks: 209.101.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:38:78:48:c7:e6:02:93:e9:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=b45b5a68-1543-4a6b-af76-dd96444a3d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:81:c0:db:22:4a:89:21:dc:10:8d:5c:2f: 27:11:e7:a5:c5:55:fc:ef:0c:24:79:c9:31:4e:1d: c3:af:d9:98:4e:79:f2:8a:6c:09:c4:f4:67:42:f2: bd:52:67:f8:09:53:47:ba:f8:ed:fb:93:89:6e:79: 66:41:b2:c7:64:8c:5c:fc:c1:7a:ed:19:13:77:c9: 9f:78:d7:b7:3e:93:dc:50:60:72:b5:40:21:0e:e7: 0d:20:a2:12:72:f2:a3:e2:30:05:8e:8f:59:a4:0a: 6d:52:ac:33:c0:4e:43:38:b7:b3:96:b7:94:58:dc: 7e:22:4e:b1:1d:51:15:f7:0c:6f:a9:00:ad:ab:2a: ef:9e:13:c2:7c:28:ff:25:03:0a:4c:fb:3e:23:15: 12:b0:6a:c0:12:11:88:6c:9a:8a:fd:8c:19:9f:03: 72:87:0a:e7:c6:0d:c7:00:4b:21:12:a1:11:34:28: 7b:f4:8e:22:0d:2d:0c:90:87:8b:eb:65:f6:d6:5b: b4:51:a3:04:08:0e:be:ee:ec:27:b3:d3:f0:4e:c6: 23:ce:fa:4f:f0:2b:8e:90:33:09:ed:e8:bf:ba:0f: 5a:c8:51:7c:17:cf:34:6b:8f:77:3d:ab:f7:a6:35: 9e:6e:6b:f2:1c:2d:8c:5a:3b:4e:03:c3:fc:91:c3: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6D:AE:A8:4E:1C:A9:35:E6:E4:B5:48:6C:E2:53:82:CB:62:89:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebad1ee-3c79-335d-ab11-03af8ce15c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:62:b8:c2:60:b5:8e:f3:4b:7e:e0:33:38:73:60:70:fe:79: 80:0b:2b:c5:d0:69:52:a7:52:f2:0c:5b:00:f8:a1:38:92:02: 76:4d:d9:ba:d5:a3:b1:41:9f:5c:6a:e7:50:43:5e:66:a1:ba: 03:5a:8d:44:5c:70:26:76:d8:74:33:c9:61:69:b3:68:25:d7: d4:31:f5:e5:dd:87:9d:6d:2a:4b:ad:74:7e:0f:fd:93:fa:fc: 60:b9:db:0e:73:aa:9d:16:3f:21:40:6b:af:64:85:98:87:13: 83:e5:7c:ad:08:95:eb:59:bc:a9:3e:04:84:af:b3:31:aa:4f: 1d:62:90:cc:7e:92:6d:dc:5f:27:a3:18:1d:71:45:ee:85:64: cb:b1:2d:8d:8a:3c:90:8c:1f:60:6b:8c:43:cf:f3:e8:b1:2a: 1e:96:c4:75:4b:23:17:ad:27:8f:67:50:ef:c0:96:4a:6b:a8: 0b:ab:e8:aa:18:87:e2:d4:a7:b2:aa:ae:ee:9e:14:e4:d9:41: 24:e3:95:a7:8e:3e:b9:b0:48:20:d0:7f:04:7d:2c:dd:59:b5: 08:dc:d7:c5:d1:3a:d2:ec:f4:69:93:1b:8a:90:9d:5c:0f:5c: 96:08:23:8c:85:71:94:e2:14:8b:fd:22:35:bd:0d:8a:53:65: b5:ef:46:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjh4SMfmApPphgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk YjQ1YjVhNjgtMTU0My00YTZiLWFmNzYtZGQ5NjQ0NGEzZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOSBwNsiSokh3BCNXC8nEeelxVX87wwkeckx Th3Dr9mYTnnyimwJxPRnQvK9Umf4CVNHuvjt+5OJbnlmQbLHZIxc/MF67RkTd8mf eNe3PpPcUGBytUAhDucNIKIScvKj4jAFjo9ZpAptUqwzwE5DOLezlreUWNx+Ik6x HVEV9wxvqQCtqyrvnhPCfCj/JQMKTPs+IxUSsGrAEhGIbJqK/YwZnwNyhwrnxg3H AEshEqERNCh79I4iDS0MkIeL62X21lu0UaMECA6+7uwns9PwTsYjzvpP8CuOkDMJ 7ei/ug9ayFF8F880a493Pav3pjWebmvyHC2MWjtOA8P8kcNirwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdtrqhOHKk15uS1SGziU4LLYonsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWViYWQxZWUtM2M3OS0z MzVkLWFiMTEtMDNhZjhjZTE1YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRiuMJgtY7zS37gMzhzYHD+eYALK8XQaVKnUvIMWwD4oTiSAnZN2brV o7FBn1xq51BDXmahugNajURccCZ22HQzyWFps2gl19Qx9eXdh51tKkutdH4P/ZP6 /GC52w5zqp0WPyFAa69khZiHE4PlfK0IletZvKk+BISvszGqTx1ikMx+km3cXyej GB1xRe6FZMuxLY2KPJCMH2BrjEPP8+ixKh6WxHVLIxetJ49nUO/AlkprqAur6KoY h+LUp7Kqru6eFOTZQSTjlaeOPrmwSCDQfwR9LN1ZtQjc18XROtLs9GmTG4qQnVwP XJYII4yFcZTiFIv9IjW9DYpTZbXvRps= -----END CERTIFICATE-----Generated at Sun Sep 20 17:59:32 2026 by rpki-client