$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fbdb4b0e-7dac-3fac-a90a-17007942f7f2.roa File: fbdb4b0e-7dac-3fac-a90a-17007942f7f2.roa (raw, json) Hash identifier: lqWdLO8uYDUGdXgaaRdHACOX8hQvcaNssotTtkZQwPU= Subject key identifier: 54:94:D8:2E:C4:C4:77:94:B1:8A:C9:27:DE:7D:95:74:22:B6:07:45 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4112A6EC7B244A583A69B540 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fbdb4b0e-7dac-3fac-a90a-17007942f7f2.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 199707 IP address blocks: 209.101.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a6:ec:7b:24:4a:58:3a:69:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=576debed-ee32-469f-ba08-4a2fadded0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0a:40:36:29:eb:7a:85:d0:29:bf:52:d1:e5: 05:f5:1d:5d:69:b4:82:2b:68:37:02:9a:e3:ba:a0: 8f:a4:6f:3f:91:f4:6d:e4:c1:38:16:7e:06:ab:42: 6b:0b:d9:b7:bf:3c:29:89:2a:49:55:a5:60:5a:79: 19:a6:6f:03:80:ab:fd:a8:29:25:e6:e4:a1:fe:04: cf:10:78:90:5e:ff:6f:c6:fe:93:70:26:d7:e8:c5: e9:8d:8b:9d:63:b9:d1:d4:cc:33:70:51:04:5d:3e: 41:6b:df:27:ce:1a:a0:bc:fa:4d:cd:18:13:32:91: 2c:cb:44:7f:0d:71:c1:b8:aa:9a:48:10:b8:05:3e: e9:e0:14:44:3e:a6:4a:ac:f1:46:db:35:7f:5f:98: 6f:79:97:25:12:cc:4b:8a:b3:cc:aa:37:d6:ad:b0: 9f:fe:ce:02:09:78:97:9a:a3:c1:d2:22:23:98:0e: 53:3a:0b:e6:a8:ab:5b:cb:b9:9e:eb:50:ef:f9:de: 5c:0b:dd:98:f4:3e:a3:59:77:97:54:31:a5:c6:b8: f9:a4:b5:b6:9d:0b:b7:3d:f7:d3:39:be:8e:6d:c4: 9b:3a:e6:e3:a7:d7:d0:c1:e8:b9:21:bf:3d:c5:da: 34:e9:1b:33:fe:5c:69:cb:4d:d0:6f:d4:55:64:5c: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:94:D8:2E:C4:C4:77:94:B1:8A:C9:27:DE:7D:95:74:22:B6:07:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fbdb4b0e-7dac-3fac-a90a-17007942f7f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:69:6d:1c:9f:28:f2:12:16:5b:b3:03:1a:6f:6a:f2:8f:75: 81:75:56:13:2c:9a:9a:e2:ee:f8:c2:3c:f5:c1:32:36:48:c0: 1f:21:95:ef:65:21:9c:e5:78:8d:12:81:e4:ca:be:57:b5:d5: c0:40:37:e1:a5:ba:ea:3e:8a:e9:97:e8:b7:52:ac:b1:a6:dc: f1:dd:61:86:ce:3b:2b:12:76:ff:d5:75:b2:8d:3a:c0:7a:e0: 53:72:5a:57:89:b5:05:07:ee:a0:d5:4f:b6:fe:64:6a:7c:3b: c2:e3:3e:de:06:d9:c0:e0:ae:a0:96:04:5a:c0:93:8a:c2:18: ea:22:b9:15:31:ea:c9:c2:6a:bb:e1:f1:bb:e5:1d:e2:21:b5: 91:3a:a9:ec:5e:da:3a:40:cd:2d:e5:d5:f8:f9:ef:c8:44:63: 00:82:ed:35:ec:9e:38:4e:73:06:c9:07:6d:e2:6b:0e:b7:ac: dc:30:7e:78:c1:63:8e:5a:71:f1:3a:47:9a:a2:9a:2e:37:cc: 40:77:8f:f0:a5:a3:40:88:5a:c7:75:4f:1d:51:45:dc:99:02: 99:af:98:3c:a2:28:12:47:7f:ad:4e:71:d9:9d:36:1f:5c:e9: f4:ca:b5:cc:82:83:6e:d2:00:b4:05:46:80:3f:c2:26:2b:64: 6d:11:6f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqbseyRKWDpptUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NTc2ZGViZWQtZWUzMi00NjlmLWJhMDgtNGEyZmFkZGVkMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhApANinreoXQKb9S0eUF9R1dabSCK2g3Aprj uqCPpG8/kfRt5ME4Fn4Gq0JrC9m3vzwpiSpJVaVgWnkZpm8DgKv9qCkl5uSh/gTP EHiQXv9vxv6TcCbX6MXpjYudY7nR1MwzcFEEXT5Ba98nzhqgvPpNzRgTMpEsy0R/ DXHBuKqaSBC4BT7p4BREPqZKrPFG2zV/X5hveZclEsxLirPMqjfWrbCf/s4CCXiX mqPB0iIjmA5TOgvmqKtby7me61Dv+d5cC92Y9D6jWXeXVDGlxrj5pLW2nQu3PffT Ob6ObcSbOubjp9fQwei5Ib89xdo06Rsz/lxpy03Qb9RVZFweJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSU2C7ExHeUsYrJJ959lXQitgdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmJkYjRiMGUtN2RhYy0z ZmFjLWE5MGEtMTcwMDc5NDJmN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVpbRyfKPISFluzAxpvavKPdYF1VhMsmpri7vjCPPXBMjZIwB8hle9l IZzleI0SgeTKvle11cBAN+Gluuo+iumX6LdSrLGm3PHdYYbOOysSdv/VdbKNOsB6 4FNyWleJtQUH7qDVT7b+ZGp8O8LjPt4G2cDgrqCWBFrAk4rCGOoiuRUx6snCarvh 8bvlHeIhtZE6qexe2jpAzS3l1fj578hEYwCC7TXsnjhOcwbJB23iaw63rNwwfnjB Y45acfE6R5qimi43zEB3j/Clo0CIWsd1Tx1RRdyZApmvmDyiKBJHf61OcdmdNh9c 6fTKtcyCg27SALQFRoA/wiYrZG0Rb0E= -----END CERTIFICATE-----Generated at Sat Oct 3 11:43:30 2026 by rpki-client