$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9fe280af-482a-310b-a4d2-61a1e5e83d5a.roa File: 9fe280af-482a-310b-a4d2-61a1e5e83d5a.roa (raw, json) Hash identifier: c9ZYdnhu/qZH7/zxJtR13h/4P/BDy5sClC/66LxK340= Subject key identifier: E7:73:7F:68:9C:3E:F3:7C:ED:C2:C1:B7:B7:ED:87:B3:0B:00:9A:D9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA0154A720A40A920911D6BC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9fe280af-482a-310b-a4d2-61a1e5e83d5a.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 9304 IP address blocks: 209.101.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:4a:72:0a:40:a9:20:91:1d:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=1187600a-6b4f-45ca-a53a-522f97c28ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:55:42:d0:24:67:b5:39:1e:9c:05:be:ec: 8e:4d:18:43:77:e5:a5:f1:66:ee:2c:4f:10:32:21: 1e:e9:17:fa:40:76:4c:12:cd:9b:1c:2c:43:e4:48: b8:f7:67:da:ce:ce:e6:e4:9c:f1:d3:f4:13:8a:ad: 75:eb:d8:ec:bf:e0:60:0b:bb:af:4e:40:82:59:a9: 0f:7d:c1:16:d7:76:8e:40:fc:4c:71:e6:99:ab:8e: c1:7c:aa:fe:64:d2:fe:6b:f7:ab:05:f4:d3:2f:b5: 02:6f:c9:6b:c7:47:79:81:63:17:68:b1:3e:f4:cf: d4:10:6e:6d:89:e9:25:73:83:42:f7:c7:8e:31:e6: 3f:cb:fd:d6:a1:38:f9:d7:a3:d1:1f:0d:39:d1:71: 23:35:65:71:4f:68:85:54:19:4f:ba:0d:e0:c9:93: c0:f0:e8:cb:55:c4:8e:1b:ba:b8:f2:75:bc:b1:ea: eb:46:5d:89:26:39:d9:3d:83:82:59:e4:66:bb:9d: a5:b5:20:1a:de:92:72:1f:7a:26:3b:2a:c3:41:7d: 57:a2:3c:99:3f:8c:f3:8d:8b:27:00:39:7a:b1:cd: c0:96:89:83:11:d5:c7:e0:81:54:2c:ce:de:fa:62: af:26:2c:f4:04:74:8b:59:6a:9b:e7:2a:0f:1f:e2: 0a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:73:7F:68:9C:3E:F3:7C:ED:C2:C1:B7:B7:ED:87:B3:0B:00:9A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9fe280af-482a-310b-a4d2-61a1e5e83d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:2e:44:a7:07:28:74:76:24:1d:b7:2b:92:6c:76:f3:8d:a7: e2:ad:a8:db:27:20:be:1d:cd:68:0c:c0:dd:ad:17:54:73:c2: ae:c3:2d:25:69:97:bc:67:c9:af:7d:f0:d1:08:5f:bb:09:e2: ca:61:e8:ed:d8:e3:f7:d3:91:4d:91:2b:01:4c:80:41:f6:1d: 6f:0e:fc:43:1e:5a:42:89:45:8a:40:ff:bd:92:b8:c7:b3:4e: 1c:77:e6:58:4f:26:37:1d:c6:8e:6a:a8:5b:ca:ac:a4:82:23: c6:a2:41:82:39:3d:66:ab:b8:ed:3d:58:46:2f:9f:2b:59:d4: 8c:9d:c5:ce:f4:68:d1:ab:3f:f9:0e:a7:4b:0d:08:6a:2b:74: a5:f9:26:6a:38:1c:40:80:41:51:fb:0c:e6:30:fc:38:c6:e7: 33:40:f4:a5:30:9e:30:41:4b:c1:4d:21:e9:76:64:31:6e:c2: 32:41:0a:80:16:68:6f:ac:11:04:d3:3c:e4:1e:b4:87:6b:a1: 1f:0a:6d:d9:e7:b0:93:00:f8:07:4a:96:e6:75:41:9d:91:86: 53:c9:a7:53:45:90:fe:22:54:5c:73:2b:d5:76:61:84:df:0a: 1e:63:a1:ab:a4:ed:8c:d3:26:3d:dc:d9:3c:05:83:8f:26:ab: f7:14:b2:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFUpyCkCpIJEda8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MTE4NzYwMGEtNmI0Zi00NWNhLWE1M2EtNTIyZjk3YzI4YWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL5VQtAkZ7U5HpwFvuyOTRhDd+Wl8WbuLE8Q MiEe6Rf6QHZMEs2bHCxD5Ei492fazs7m5Jzx0/QTiq1169jsv+BgC7uvTkCCWakP fcEW13aOQPxMceaZq47BfKr+ZNL+a/erBfTTL7UCb8lrx0d5gWMXaLE+9M/UEG5t ieklc4NC98eOMeY/y/3WoTj516PRHw050XEjNWVxT2iFVBlPug3gyZPA8OjLVcSO G7q48nW8serrRl2JJjnZPYOCWeRmu52ltSAa3pJyH3omOyrDQX1XojyZP4zzjYsn ADl6sc3AlomDEdXH4IFULM7e+mKvJiz0BHSLWWqb5yoPH+IK3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdzf2icPvN87cLBt7fth7MLAJrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWZlMjgwYWYtNDgyYS0z MTBiLWE0ZDItNjFhMWU1ZTgzZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAuRKcHKHR2JB23K5JsdvONp+KtqNsnIL4dzWgMwN2tF1Rzwq7DLSVp l7xnya998NEIX7sJ4sph6O3Y4/fTkU2RKwFMgEH2HW8O/EMeWkKJRYpA/72SuMez Thx35lhPJjcdxo5qqFvKrKSCI8aiQYI5PWaruO09WEYvnytZ1Iydxc70aNGrP/kO p0sNCGordKX5Jmo4HECAQVH7DOYw/DjG5zNA9KUwnjBBS8FNIel2ZDFuwjJBCoAW aG+sEQTTPOQetIdroR8KbdnnsJMA+AdKluZ1QZ2RhlPJp1NFkP4iVFxzK9V2YYTf Ch5joauk7YzTJj3c2TwFg48mq/cUskI= -----END CERTIFICATE-----Generated at Wed Jul 29 08:37:47 2026 by rpki-client