$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a03e98ec-259c-3030-aabb-240a6bb534a8.roa File: a03e98ec-259c-3030-aabb-240a6bb534a8.roa (raw, json) Hash identifier: 6x/vK/CuhIrZZJGFehC3nQ2MQl1yFX47P2E/ekjdm1s= Subject key identifier: EF:4C:B5:6B:C7:69:3E:96:B5:AD:05:88:79:6B:BD:0C:4C:7D:D4:BA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F43DD4E3B99913E5328AB2300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a03e98ec-259c-3030-aabb-240a6bb534a8.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 209.101.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:4e:3b:99:91:3e:53:28:ab:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=ce84753b-259a-480e-be89-f87fe0436c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:e7:f0:b6:ce:47:e1:12:09:97:76:92:99: 1a:9d:eb:a0:fc:6f:63:9f:13:df:c7:18:9c:66:88: 39:a4:68:ef:0b:66:b3:8f:75:6c:01:c3:7e:f3:9f: 20:6a:94:2c:cf:c1:8e:a2:9c:6d:ba:44:53:10:cf: b7:0e:5a:05:eb:b4:f4:c0:14:6b:0a:31:ce:20:50: 06:b2:09:33:28:0b:7a:01:c1:0e:60:3b:88:6e:7e: 7f:f4:5d:96:43:62:b9:79:52:d9:ad:75:f9:75:0e: e5:1d:d2:b2:c6:f4:48:0c:8b:c2:8e:5f:60:34:5d: 9f:ac:d1:84:45:55:0d:bb:d3:9e:7b:b7:d7:23:21: d3:fe:87:52:8d:2d:1c:17:fb:59:04:d8:7e:0f:de: e8:ae:8b:39:40:a4:72:11:15:22:18:81:30:f0:53: 5a:00:4b:90:38:97:ba:eb:ba:65:57:5c:ba:f7:ae: f2:1a:dd:96:67:df:cb:a8:b9:58:23:55:6c:63:bf: b6:09:d4:55:a2:16:b2:d0:85:5a:8d:17:db:bd:d3: 10:85:f0:e9:81:79:ac:f9:e7:58:57:d1:d6:fb:b6: 00:60:b2:3e:f4:ee:ad:99:da:2e:c4:5c:ae:55:3e: ee:9a:8b:4f:b0:e1:d8:0b:46:0d:ee:5d:3d:05:40: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4C:B5:6B:C7:69:3E:96:B5:AD:05:88:79:6B:BD:0C:4C:7D:D4:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a03e98ec-259c-3030-aabb-240a6bb534a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f9:3e:9e:a2:e5:4e:85:f2:d7:1c:d5:a5:58:2a:2f:8b:85: d3:98:7f:fb:a1:56:fa:71:cf:1c:9f:d8:9a:37:bc:44:f2:97: 94:22:73:e3:90:73:0e:6d:9e:8f:42:34:82:f8:9c:36:f8:f5: 2a:b7:1a:ea:67:e6:48:53:4e:03:9c:cf:5f:c8:6d:04:3b:4e: f8:91:92:0e:63:d8:bd:d5:db:8e:03:dd:d7:ab:b8:d9:54:b6: 57:5e:cc:1e:ee:14:95:e3:4d:93:ab:2f:1c:52:3b:33:68:6e: c2:1d:63:4a:7e:01:0c:cf:2f:5a:62:18:bc:0c:2a:18:b7:83: 0e:9c:23:df:48:54:76:c5:a3:79:e2:bb:bc:b2:c7:1a:58:72: cb:4e:48:13:97:03:d7:72:8b:fa:29:8c:f7:ba:e9:64:6d:f7: d7:ac:65:61:ee:72:35:20:c1:7d:c5:c8:81:f7:9b:46:50:74: 0d:3a:31:27:8b:63:63:8e:60:27:26:95:1a:a0:68:92:3b:68: 32:34:c5:46:92:94:fe:48:32:c2:8b:52:db:be:60:6e:f9:9e: ad:96:71:88:74:4d:e7:4a:f3:45:39:b9:60:b3:5a:3c:e4:b6: 49:5d:84:14:5a:aa:1f:f0:e6:aa:fe:c6:10:6a:9e:c6:4f:54: 40:2e:ab:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3U47mZE+UyirIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk Y2U4NDc1M2ItMjU5YS00ODBlLWJlODktZjg3ZmUwNDM2YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3fn8LbOR+ESCZd2kpkaneug/G9jnxPfxxic Zog5pGjvC2azj3VsAcN+858gapQsz8GOopxtukRTEM+3DloF67T0wBRrCjHOIFAG sgkzKAt6AcEOYDuIbn5/9F2WQ2K5eVLZrXX5dQ7lHdKyxvRIDIvCjl9gNF2frNGE RVUNu9Oee7fXIyHT/odSjS0cF/tZBNh+D97oros5QKRyERUiGIEw8FNaAEuQOJe6 67plV1y6967yGt2WZ9/LqLlYI1VsY7+2CdRVohay0IVajRfbvdMQhfDpgXms+edY V9HW+7YAYLI+9O6tmdouxFyuVT7umotPsOHYC0YN7l09BUCefwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9MtWvHaT6Wta0FiHlrvQxMfdS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTAzZTk4ZWMtMjU5Yy0z MDMwLWFhYmItMjQwYTZiYjUzNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT5Pp6i5U6F8tcc1aVYKi+LhdOYf/uhVvpxzxyf2Jo3vETyl5Qic+OQ cw5tno9CNIL4nDb49Sq3Gupn5khTTgOcz1/IbQQ7TviRkg5j2L3V244D3deruNlU tldezB7uFJXjTZOrLxxSOzNobsIdY0p+AQzPL1piGLwMKhi3gw6cI99IVHbFo3ni u7yyxxpYcstOSBOXA9dyi/opjPe66WRt99esZWHucjUgwX3FyIH3m0ZQdA06MSeL Y2OOYCcmlRqgaJI7aDI0xUaSlP5IMsKLUtu+YG75nq2WcYh0TedK80U5uWCzWjzk tkldhBRaqh/w5qr+xhBqnsZPVEAuq8o= -----END CERTIFICATE-----Generated at Fri Oct 9 21:28:35 2026 by rpki-client