$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffda36ab-5f40-3508-a2a8-104135623f30.roa File: ffda36ab-5f40-3508-a2a8-104135623f30.roa (raw, json) Hash identifier: 1Z0DTj3MUYn+Vu/FbzZXlRySc1+iVLH22XgXlZKplHY= Subject key identifier: 79:07:70:8E:11:EF:C5:CB:04:30:08:A3:FC:A2:AD:59:8B:FF:B4:AD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA01569219F10E7CB82A4F580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffda36ab-5f40-3508-a2a8-104135623f30.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 401783 IP address blocks: 209.101.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:69:21:9f:10:e7:cb:82:a4:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=01efac36-2b9c-4e3c-8b29-80c99d87561e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:ba:41:da:be:ac:df:d0:fd:9c:65:50:1b: da:ba:5d:c0:cf:83:82:24:3e:93:ef:1b:ba:44:d6: 10:72:a4:f8:b1:2c:4e:15:a9:6d:8b:25:a7:f2:9d: 74:57:99:6e:b8:fa:de:8e:ec:f7:0a:6b:af:c6:47: b8:e4:75:5d:61:6e:c2:21:38:d8:3e:92:5f:69:75: 20:c6:7a:2e:66:be:2d:fa:06:78:fb:50:ce:64:77: d6:1a:dc:10:8c:1e:95:4c:79:78:05:3e:7c:3e:f9: 2c:04:52:b5:9a:16:d2:05:8d:f2:18:1c:c0:5d:4e: 55:8c:5a:57:da:6e:89:41:09:ab:a3:8c:bb:d3:6e: 6b:85:7d:de:f0:c1:23:52:2b:37:3c:6b:76:31:bb: a7:2a:07:b5:e7:0e:45:24:9b:5d:5a:d7:04:ae:36: fe:d4:e0:c5:72:0d:fc:cc:8d:5a:6f:e8:4b:12:6f: e6:50:d3:30:06:6c:3d:38:2c:04:63:b8:06:92:6f: 4a:3a:e6:07:65:40:0b:61:e8:2c:1c:d8:3a:9d:c5: 1d:cc:bf:9e:61:e7:3d:bb:8b:3a:03:2a:38:a6:da: 5f:a7:af:f2:9f:90:31:56:f2:5d:9d:d8:1d:b4:97: 5a:b6:ce:07:51:e5:71:ec:e2:57:0b:8d:93:e8:dd: d7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:07:70:8E:11:EF:C5:CB:04:30:08:A3:FC:A2:AD:59:8B:FF:B4:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffda36ab-5f40-3508-a2a8-104135623f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:bd:06:6a:6a:00:80:9f:ca:b9:d8:c3:34:c4:ff:69:4f:bb: 42:fd:1e:6b:d8:c1:6e:ba:7d:2a:80:0a:e6:8c:fd:ca:a4:53: 11:77:b8:93:78:fc:5f:80:72:1a:ad:e7:a5:22:ef:78:0b:40: e3:b7:ad:85:7e:51:45:0c:5c:53:da:6a:d9:54:d6:55:2f:f8: 31:41:3a:b4:75:1e:78:43:10:f7:e6:c2:34:50:99:a7:da:5c: a1:d2:d4:83:a4:78:d3:50:7c:d7:a6:3d:c7:99:42:7d:27:7f: f6:d0:da:f6:84:fc:5d:47:48:48:02:48:a7:a3:4b:73:ff:14: 86:f0:2c:8f:e6:61:84:aa:1f:98:a5:2e:82:d3:38:89:dc:ea: 3a:c5:f6:05:c9:19:c9:44:f7:22:ee:90:5f:ca:bb:de:40:49: b1:bd:24:fb:0d:7c:19:54:38:30:35:0a:4b:8f:08:40:78:11: fa:33:f5:70:ae:5c:2c:da:8e:76:1c:76:29:6b:ab:09:e4:85: 5e:43:a3:97:11:f0:46:6d:aa:1b:13:43:47:cf:86:3b:09:87: 3c:8a:1e:41:4c:a9:72:94:2a:59:00:48:78:7d:03:9b:92:79: c6:d3:20:ab:a5:a4:51:5b:48:ec:cb:a7:40:22:2b:db:70:ae: 97:7b:fe:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFWkhnxDny4Kk9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MDFlZmFjMzYtMmI5Yy00ZTNjLThiMjktODBjOTlkODc1NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp526Qdq+rN/Q/ZxlUBvaul3Az4OCJD6T7xu6 RNYQcqT4sSxOFaltiyWn8p10V5luuPrejuz3Cmuvxke45HVdYW7CITjYPpJfaXUg xnouZr4t+gZ4+1DOZHfWGtwQjB6VTHl4BT58PvksBFK1mhbSBY3yGBzAXU5VjFpX 2m6JQQmro4y7025rhX3e8MEjUis3PGt2MbunKge15w5FJJtdWtcErjb+1ODFcg38 zI1ab+hLEm/mUNMwBmw9OCwEY7gGkm9KOuYHZUALYegsHNg6ncUdzL+eYec9u4s6 Ayo4ptpfp6/yn5AxVvJdndgdtJdats4HUeVx7OJXC42T6N3XPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkHcI4R78XLBDAIo/yirVmL/7StMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmZkYTM2YWItNWY0MC0z NTA4LWEyYTgtMTA0MTM1NjIzZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK29BmpqAICfyrnYwzTE/2lPu0L9HmvYwW66fSqACuaM/cqkUxF3uJN4 /F+Achqt56Ui73gLQOO3rYV+UUUMXFPaatlU1lUv+DFBOrR1HnhDEPfmwjRQmafa XKHS1IOkeNNQfNemPceZQn0nf/bQ2vaE/F1HSEgCSKejS3P/FIbwLI/mYYSqH5il LoLTOInc6jrF9gXJGclE9yLukF/Ku95ASbG9JPsNfBlUODA1CkuPCEB4Efoz9XCu XCzajnYcdilrqwnkhV5Do5cR8EZtqhsTQ0fPhjsJhzyKHkFMqXKUKlkASHh9A5uS ecbTIKulpFFbSOzLp0AiK9twrpd7/oI= -----END CERTIFICATE-----Generated at Wed Jul 29 19:46:42 2026 by rpki-client