$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa File: dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa (raw, json) Hash identifier: 1ZcBiPdQyz1WVfJ/eI8JXZbEINl1QjdCd077v2z96QE= Subject key identifier: 2F:D3:E3:0D:D0:86:57:AC:C7:81:94:5A:D4:44:BD:73:64:16:6F:A0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4974D2B47A6B0E23A8BFD6C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 209.101.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d2:b4:7a:6b:0e:23:a8:bf:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a56a20e6-a3de-40cd-ba9d-7b91b5189388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:00:23:e8:20:a4:b5:a5:4c:cd:16:ba:50: cb:93:13:2e:3e:4b:ee:20:ea:1c:a2:63:05:12:d6: 5e:0b:1b:a0:04:ed:b7:db:79:e6:5d:de:a8:97:7f: 44:7e:22:fd:71:c8:49:f3:9e:6b:ea:c8:18:6e:fa: e9:f0:b7:96:82:44:15:eb:3c:f6:4a:15:1b:d3:62: 5b:25:b9:9b:52:98:0e:20:ba:0e:68:f0:3c:e2:a9: 80:40:69:81:b0:0c:93:44:96:99:bc:e1:5d:f9:6a: 92:72:de:b2:c0:25:3d:9f:7f:cd:7c:0c:27:d0:4e: 6d:fa:48:e2:44:3c:63:d4:04:fa:c7:c0:5a:80:b4: ac:80:8b:80:0a:39:00:8c:0e:d4:28:a4:21:d1:f0: 56:ba:16:00:ba:37:70:00:36:3b:5e:3a:6b:5a:7f: fb:ad:77:99:a5:53:34:4e:41:d8:e2:19:5f:51:e2: a7:20:7f:32:f1:96:ef:59:4b:20:5e:25:63:4e:34: 9c:ee:5e:6f:01:7f:2a:26:22:82:7e:5b:a6:74:cd: d5:a6:2e:8a:83:f5:57:55:e0:d4:3d:4b:17:eb:d0: 06:30:1a:d4:e9:ba:e3:28:5d:57:a1:10:12:5c:db: 80:0f:ff:05:48:86:3d:55:17:63:63:a2:cd:fc:03: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D3:E3:0D:D0:86:57:AC:C7:81:94:5A:D4:44:BD:73:64:16:6F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ed:a6:6f:a0:1c:3d:69:bb:cd:b1:33:79:a8:ec:fe:31:62: c8:e2:96:5b:9c:a2:67:33:e3:f2:21:f1:6d:c5:2b:22:4b:60: f1:a1:53:cd:14:74:76:de:64:76:c7:1a:9b:92:27:b3:43:e9: ab:cc:3d:ca:06:1f:49:48:18:4e:d1:94:47:f6:59:5f:cf:dc: d0:4b:b0:81:70:ec:ba:12:5f:4b:bb:2d:6e:c6:aa:34:0b:c4: a0:dc:e7:80:63:59:7a:d2:66:4d:e2:46:ca:c8:fb:7e:f2:f0: 8a:80:d1:6e:75:7a:e0:5c:e6:39:fb:5c:db:49:3b:f0:d2:db: 3b:e3:f3:7a:18:b9:33:8b:dd:ab:31:6f:1e:42:65:a5:f7:ca: 43:ac:c3:ae:04:fb:4c:99:4a:14:99:fd:2d:a6:70:05:0b:23: 5e:d0:13:ce:2c:57:2b:aa:90:35:e1:63:c1:5d:eb:63:c9:db: 90:6a:73:92:5f:1a:13:77:9c:85:56:72:0a:6f:9f:3d:01:76: 95:38:21:88:63:5d:e5:b3:48:d9:5f:ad:15:fa:be:51:5a:40: 74:8d:d8:9e:1e:c6:8f:4c:41:1e:83:38:c2:1c:ed:63:4b:95: 4e:ea:57:ec:eb:0f:ce:93:3f:2e:fc:b9:d5:bf:23:f0:d2:a6: 96:c5:47:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNK0emsOI6i/1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTU2YTIwZTYtYTNkZS00MGNkLWJhOWQtN2I5MWI1MTg5Mzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mQAI+ggpLWlTM0WulDLkxMuPkvuIOocomMF EtZeCxugBO2323nmXd6ol39EfiL9cchJ855r6sgYbvrp8LeWgkQV6zz2ShUb02Jb JbmbUpgOILoOaPA84qmAQGmBsAyTRJaZvOFd+WqSct6ywCU9n3/NfAwn0E5t+kji RDxj1AT6x8BagLSsgIuACjkAjA7UKKQh0fBWuhYAujdwADY7XjprWn/7rXeZpVM0 TkHY4hlfUeKnIH8y8ZbvWUsgXiVjTjSc7l5vAX8qJiKCflumdM3Vpi6Kg/VXVeDU PUsX69AGMBrU6brjKF1XoRASXNuAD/8FSIY9VRdjY6LN/AMYSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/T4w3Qhlesx4GUWtREvXNkFm+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGVkZDQ2MDgtNzU5Zi0z NGIxLTlhOGItOGQ3YzJjNzExYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjtpm+gHD1pu82xM3mo7P4xYsjillucomcz4/Ih8W3FKyJLYPGhU80U dHbeZHbHGpuSJ7ND6avMPcoGH0lIGE7RlEf2WV/P3NBLsIFw7LoSX0u7LW7GqjQL xKDc54BjWXrSZk3iRsrI+37y8IqA0W51euBc5jn7XNtJO/DS2zvj83oYuTOL3asx bx5CZaX3ykOsw64E+0yZShSZ/S2mcAULI17QE84sVyuqkDXhY8Fd62PJ25Bqc5Jf GhN3nIVWcgpvnz0BdpU4IYhjXeWzSNlfrRX6vlFaQHSN2J4exo9MQR6DOMIc7WNL lU7qV+zrD86TPy78udW/I/DSppbFR1g= -----END CERTIFICATE-----Generated at Sat Oct 10 17:00:10 2026 by rpki-client