$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa File: db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa (raw, json) Hash identifier: 9RO95zjEXC6An3ZfJky7D/588s+o+y7D6q5B9NjM0Do= Subject key identifier: 0F:1D:DE:E8:99:B6:51:0D:F3:99:A3:08:FC:EE:28:34:F7:2A:8F:D7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA015329CB6593E43C256C980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 401783 IP address blocks: 209.101.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:32:9c:b6:59:3e:43:c2:56:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=e4f2a787-d74d-4c92-9d51-b18bc636c0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4b:c3:99:b0:07:18:39:1f:72:d5:d5:d9:bd: de:3b:4f:95:1a:d6:b1:ea:05:14:42:c4:44:15:e3: 85:94:66:a2:da:89:ba:f8:5b:15:8e:52:2f:ec:19: f0:2a:7d:bf:0f:90:62:4e:b1:40:5d:76:a8:d7:31: 3a:fb:ae:2c:27:62:86:3a:a9:08:a0:9f:3f:f9:5c: 1f:ed:13:fe:8a:a7:62:c3:8e:66:b1:09:73:2d:55: 62:74:58:24:5b:d4:1c:84:da:85:e2:2c:f9:ec:ef: fa:af:82:50:ed:dc:a9:43:e6:0c:0b:77:11:7f:b3: 30:fd:2b:cb:03:8c:c1:6a:58:14:b8:86:6f:ca:b8: 5f:93:be:ef:e3:df:4e:10:bf:67:b4:53:1e:bc:13: c1:d6:77:ea:96:5a:88:ba:89:3b:72:ea:7d:b5:98: 55:48:ed:c8:41:97:eb:ff:26:f9:2d:e1:5f:e6:b3: 92:7d:fb:8a:33:90:9f:e6:01:67:9c:de:6e:11:be: 80:97:4b:9f:c2:48:45:51:45:7d:b4:11:fb:39:80: ad:70:9d:88:47:01:a7:f9:8c:80:09:58:bb:ca:1b: 8d:33:bf:28:13:c9:87:de:72:12:61:04:a7:bb:f6: 93:a6:81:b5:ae:3e:84:3a:d0:5e:ca:b1:a3:72:a6: a7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1D:DE:E8:99:B6:51:0D:F3:99:A3:08:FC:EE:28:34:F7:2A:8F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5c:2b:5c:b4:12:53:29:c3:aa:8d:33:a0:04:25:99:c8:c1: 48:c9:11:22:53:da:c9:06:21:73:e3:f8:63:16:fc:89:d4:c7: 4c:60:e5:c5:e2:4f:ed:03:46:79:04:34:88:c8:d3:9a:e8:82: 8f:c8:c1:4e:f7:44:8f:e6:2f:e9:66:25:0e:87:45:49:bb:56: 0f:9e:71:78:01:77:4a:79:f3:53:2b:fd:54:49:51:93:e3:9a: 25:6b:64:56:62:30:82:59:c3:36:2c:30:ea:38:d6:42:dc:6e: 3f:ca:21:5f:30:3c:a1:87:ca:2d:a8:01:d6:fb:ad:be:8a:51: 28:f0:25:e1:53:f5:e4:e8:e0:d9:7a:19:2d:e5:64:6f:76:d0: 1f:fb:fd:f8:45:71:ae:2e:0a:f4:32:73:c0:ec:af:f9:ab:5e: 2c:be:ed:36:da:ad:ce:9c:b2:57:a3:8a:3b:98:e3:ef:f2:68: 7a:0e:52:94:86:06:25:8c:45:e9:84:c9:f0:a2:b9:04:0e:c2: 89:7c:98:23:79:54:74:7b:5a:8c:bd:8a:50:04:9c:f1:6d:01: 53:a9:0c:9f:a1:9c:4f:6b:4b:d2:86:fd:e4:9b:f4:67:49:98: 89:ab:f5:83:6d:ee:86:c3:2f:aa:31:61:74:2a:e8:e9:fa:f7: 54:2b:f2:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFTKctlk+Q8JWyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZTRmMmE3ODctZDc0ZC00YzkyLTlkNTEtYjE4YmM2MzZjMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80vDmbAHGDkfctXV2b3eO0+VGtax6gUUQsRE FeOFlGai2om6+FsVjlIv7BnwKn2/D5BiTrFAXXao1zE6+64sJ2KGOqkIoJ8/+Vwf 7RP+iqdiw45msQlzLVVidFgkW9QchNqF4iz57O/6r4JQ7dypQ+YMC3cRf7Mw/SvL A4zBalgUuIZvyrhfk77v499OEL9ntFMevBPB1nfqllqIuok7cup9tZhVSO3IQZfr /yb5LeFf5rOSffuKM5Cf5gFnnN5uEb6Al0ufwkhFUUV9tBH7OYCtcJ2IRwGn+YyA CVi7yhuNM78oE8mH3nISYQSnu/aTpoG1rj6EOtBeyrGjcqanmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8d3uiZtlEN85mjCPzuKDT3Ko/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGI3YTUwZDYtYzcxMC0z ZjZhLWJmNmEtYmM2MTI3MGMyOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhcK1y0ElMpw6qNM6AEJZnIwUjJESJT2skGIXPj+GMW/InUx0xg5cXi T+0DRnkENIjI05rogo/IwU73RI/mL+lmJQ6HRUm7Vg+ecXgBd0p581Mr/VRJUZPj miVrZFZiMIJZwzYsMOo41kLcbj/KIV8wPKGHyi2oAdb7rb6KUSjwJeFT9eTo4Nl6 GS3lZG920B/7/fhFca4uCvQyc8Dsr/mrXiy+7Tbarc6cslejijuY4+/yaHoOUpSG BiWMRemEyfCiuQQOwol8mCN5VHR7Woy9ilAEnPFtAVOpDJ+hnE9rS9KG/eSb9GdJ mImr9YNt7obDL6oxYXQq6On691Qr8uU= -----END CERTIFICATE-----Generated at Wed Jul 29 19:41:49 2026 by rpki-client