$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e15f874f-cb18-3da7-9497-89e3534c8d1e.roa File: e15f874f-cb18-3da7-9497-89e3534c8d1e.roa (raw, json) Hash identifier: +qCByom7BasQEvI9mRPLrEXHJ3lQconse3RLhFNx6u4= Subject key identifier: 53:B4:D9:B4:BB:EE:15:39:27:0E:11:2F:9C:8B:21:34:5E:88:8F:CA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA0154497AF3559F66832B200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e15f874f-cb18-3da7-9497-89e3534c8d1e.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 401783 IP address blocks: 209.101.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:44:97:af:35:59:f6:68:32:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=a66ab4c7-3720-49cf-bf6e-cb3b697e4bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:10:84:ea:cc:46:e5:8b:b1:e2:fb:00:54: a6:2a:b7:03:e8:cd:61:72:b0:93:f4:d6:a8:c7:76: d1:43:c1:36:0f:cf:9f:d7:2e:a7:ff:f1:67:ea:84: 5e:69:02:9d:79:b7:d6:0f:4a:f5:ee:46:91:2e:22: cc:c4:6f:6d:8e:db:40:ad:03:da:b7:62:e4:0f:ce: f3:67:8a:54:07:11:71:5e:ba:f0:2f:0f:b1:23:24: d8:d7:17:49:88:34:c2:c9:45:d2:a4:65:41:16:28: 04:e2:01:74:54:a6:f8:c9:d6:6d:e3:36:1d:24:6f: e3:2f:ee:a5:c7:56:42:ab:33:28:6f:8b:e1:d4:18: e5:4a:0f:39:2a:ba:41:fb:cb:e2:98:75:b5:c5:2d: 7e:7a:24:c2:f7:9d:97:66:ba:ef:87:76:ac:c0:3b: 8b:5d:83:1b:f0:7d:e9:d0:11:f4:e3:21:f8:37:f7: e6:81:bb:ff:59:ec:c8:73:29:1d:39:a4:1e:8a:b9: a8:2c:ca:70:71:fe:97:ca:7a:0c:51:58:15:72:26: a2:2c:4e:4a:26:6a:00:30:c7:04:d4:5f:ae:db:80: 78:6c:f5:70:47:71:ff:c5:6a:81:a3:4d:2c:5d:ff: 3e:d4:78:52:be:40:73:5d:04:76:80:24:73:0d:9e: 0a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B4:D9:B4:BB:EE:15:39:27:0E:11:2F:9C:8B:21:34:5E:88:8F:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e15f874f-cb18-3da7-9497-89e3534c8d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:49:53:f8:a2:25:55:d1:9b:aa:99:40:1c:7a:1a:25:b4:9f: 26:5e:f8:32:27:e8:fb:43:17:01:6f:38:8b:d6:91:11:b4:43: ae:6d:d3:b2:cf:1e:eb:70:23:92:03:ff:96:4c:d9:3f:c1:77: 61:b7:d2:fc:36:e2:c7:ce:27:e3:e1:2f:f1:f4:7c:90:d3:cc: df:c2:99:70:9e:79:11:60:8d:6d:e5:32:33:9f:31:20:6d:3c: 24:6b:a4:79:39:7c:57:df:7a:15:4e:24:8e:48:e0:28:09:c8: ee:ec:a6:f4:91:45:58:62:25:d4:7b:43:27:32:87:3f:e5:61: c0:ec:30:e3:47:a7:b2:9c:1e:e5:86:95:4a:c6:b2:97:4b:09: d8:6d:ce:60:0a:6f:70:cd:d8:b6:20:89:58:4c:1a:e0:06:38: 51:ca:df:62:f9:60:09:ad:0a:43:20:81:85:ed:ba:22:34:d5: cd:a0:14:80:73:f4:0e:3c:c6:6d:c9:de:f6:f1:e0:52:6f:f1: 45:f3:20:67:19:b6:5d:a1:9d:b8:19:5b:37:48:e6:28:5e:11: 95:1d:86:1c:78:0c:5e:05:49:e7:c4:fe:da:29:b0:79:27:45: 41:eb:62:cd:fa:b7:00:d9:bf:6d:c2:91:5e:b3:ed:e2:e9:99: be:83:32:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFUSXrzVZ9mgysgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk YTY2YWI0YzctMzcyMC00OWNmLWJmNmUtY2IzYjY5N2U0YmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlQQhOrMRuWLseL7AFSmKrcD6M1hcrCT9Nao x3bRQ8E2D8+f1y6n//Fn6oReaQKdebfWD0r17kaRLiLMxG9tjttArQPat2LkD87z Z4pUBxFxXrrwLw+xIyTY1xdJiDTCyUXSpGVBFigE4gF0VKb4ydZt4zYdJG/jL+6l x1ZCqzMob4vh1BjlSg85KrpB+8vimHW1xS1+eiTC952XZrrvh3aswDuLXYMb8H3p 0BH04yH4N/fmgbv/WezIcykdOaQeirmoLMpwcf6XynoMUVgVciaiLE5KJmoAMMcE 1F+u24B4bPVwR3H/xWqBo00sXf8+1HhSvkBzXQR2gCRzDZ4KZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO02bS77hU5Jw4RL5yLITReiI/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTE1Zjg3NGYtY2IxOC0z ZGE3LTk0OTctODllMzUzNGM4ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFJU/iiJVXRm6qZQBx6GiW0nyZe+DIn6PtDFwFvOIvWkRG0Q65t07LP HutwI5ID/5ZM2T/Bd2G30vw24sfOJ+PhL/H0fJDTzN/CmXCeeRFgjW3lMjOfMSBt PCRrpHk5fFffehVOJI5I4CgJyO7spvSRRVhiJdR7Qycyhz/lYcDsMONHp7KcHuWG lUrGspdLCdhtzmAKb3DN2LYgiVhMGuAGOFHK32L5YAmtCkMggYXtuiI01c2gFIBz 9A48xm3J3vbx4FJv8UXzIGcZtl2hnbgZWzdI5iheEZUdhhx4DF4FSefE/topsHkn RUHrYs36twDZv23CkV6z7eLpmb6DMmM= -----END CERTIFICATE-----Generated at Wed Jul 29 19:38:43 2026 by rpki-client