$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b355827e-6754-328b-82c3-a9c33e7ee766.roa File: b355827e-6754-328b-82c3-a9c33e7ee766.roa (raw, json) Hash identifier: A/Z4IrbnYlXoeLCwfJvTo3DeR48He0XOPYioyIuqhf8= Subject key identifier: 78:17:3A:B3:C9:69:77:2F:5E:BA:C5:C3:4B:BA:A5:38:A5:92:3E:38 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA0158395071606F41E8C9180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b355827e-6754-328b-82c3-a9c33e7ee766.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 401783 IP address blocks: 209.101.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:83:95:07:16:06:f4:1e:8c:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=5915c827-7e6a-4c4f-afc0-89a5eb6e1858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:c3:a9:02:0a:4d:2f:ec:14:4f:74:57:c5: 07:41:90:ae:97:16:10:3e:02:c0:72:3f:bc:d8:72: 4d:1a:a6:13:35:c6:cb:46:01:bc:cc:5e:52:8f:8e: 13:f1:a8:92:c1:52:56:2d:8f:7b:a8:e2:eb:bc:43: c9:92:9f:bf:b8:49:ab:56:50:5e:fc:cc:40:41:10: 1b:98:ab:eb:54:dd:0f:8d:26:25:0f:5a:ee:19:21: 0f:d6:13:52:c2:b1:59:93:99:dc:d5:07:e6:e5:4a: 47:ba:d7:5d:95:bb:b6:d0:cb:16:ed:65:7f:96:88: c8:db:84:d5:a3:0b:26:8e:78:b9:b4:4c:23:ea:a7: 2d:86:f6:f7:9b:d8:6f:4c:a9:b8:21:88:24:1b:13: 64:4a:ae:10:7b:8d:67:8a:fa:4f:44:bd:d6:fd:5f: 66:61:77:1c:e8:16:e6:9f:b7:b5:bc:1f:f5:6d:14: 49:4f:d8:5e:85:3f:c2:e2:c6:aa:36:3e:52:bd:ba: c7:34:a9:7f:b5:d8:81:32:58:50:53:6b:ae:2f:8e: 1d:2a:07:c1:e2:14:63:5a:fc:dc:bb:68:15:8e:ae: e4:c9:81:0e:fe:bf:a5:e9:7d:4a:5a:ac:4b:23:94: 80:8a:bb:79:5e:65:25:d3:8e:8d:ea:14:40:61:f6: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:17:3A:B3:C9:69:77:2F:5E:BA:C5:C3:4B:BA:A5:38:A5:92:3E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b355827e-6754-328b-82c3-a9c33e7ee766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c7:de:98:91:4a:7c:d9:da:ed:8b:90:d2:4e:87:27:e7:fd: b5:75:56:26:c0:c8:6d:61:a0:bb:11:a6:b6:f2:43:43:03:be: 76:bd:ba:bc:df:ea:83:23:6a:f9:93:87:ff:8b:cd:72:06:c9: ce:53:f1:d7:89:07:57:d3:e3:c7:07:57:3e:9b:bf:82:23:da: 5a:45:11:9c:d7:ac:62:84:24:f1:1a:f9:8b:5d:ee:24:68:b7: f6:2a:49:4b:c3:98:0e:54:19:b4:a2:b2:3c:5a:26:28:3d:63: 5d:3c:40:68:7c:f5:d4:a9:4f:f5:e6:bd:93:6a:76:34:96:74: e1:0d:79:ce:e3:77:74:1f:ff:50:29:a9:e2:6a:3a:6b:4e:6a: 08:64:25:56:98:40:08:8b:61:53:62:36:d6:de:d4:6b:75:67: 53:24:4f:fa:c0:50:9d:f9:07:e8:ba:e1:2f:e8:e9:57:25:4a: d9:2d:21:72:05:21:fd:df:1f:32:b3:11:0b:66:65:10:f1:7a: 4c:59:08:cb:56:d9:f0:5d:16:9e:1a:b4:8f:85:df:39:ba:5b: a4:8b:76:f8:3d:fd:58:88:5a:f0:9c:6b:8f:63:9c:db:44:87: 1c:a8:99:b8:39:c7:ef:ca:7a:87:d8:c4:1c:4d:6a:3c:01:d5: ee:5d:44:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFYOVBxYG9B6MkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk NTkxNWM4MjctN2U2YS00YzRmLWFmYzAtODlhNWViNmUxODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApczDqQIKTS/sFE90V8UHQZCulxYQPgLAcj+8 2HJNGqYTNcbLRgG8zF5Sj44T8aiSwVJWLY97qOLrvEPJkp+/uEmrVlBe/MxAQRAb mKvrVN0PjSYlD1ruGSEP1hNSwrFZk5nc1Qfm5UpHutddlbu20MsW7WV/lojI24TV owsmjni5tEwj6qcthvb3m9hvTKm4IYgkGxNkSq4Qe41nivpPRL3W/V9mYXcc6Bbm n7e1vB/1bRRJT9hehT/C4saqNj5SvbrHNKl/tdiBMlhQU2uuL44dKgfB4hRjWvzc u2gVjq7kyYEO/r+l6X1KWqxLI5SAirt5XmUl046N6hRAYfZOQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgXOrPJaXcvXrrFw0u6pTilkj44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjM1NTgyN2UtNjc1NC0z MjhiLTgyYzMtYTljMzNlN2VlNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrH3piRSnzZ2u2LkNJOhyfn/bV1VibAyG1hoLsRprbyQ0MDvna9urzf 6oMjavmTh/+LzXIGyc5T8deJB1fT48cHVz6bv4Ij2lpFEZzXrGKEJPEa+Ytd7iRo t/YqSUvDmA5UGbSisjxaJig9Y108QGh89dSpT/XmvZNqdjSWdOENec7jd3Qf/1Ap qeJqOmtOaghkJVaYQAiLYVNiNtbe1Gt1Z1MkT/rAUJ35B+i64S/o6VclStktIXIF If3fHzKzEQtmZRDxekxZCMtW2fBdFp4atI+F3zm6W6SLdvg9/ViIWvCca49jnNtE hxyombg5x+/KeofYxBxNajwB1e5dRNI= -----END CERTIFICATE-----Generated at Wed Jul 29 19:43:38 2026 by rpki-client