$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/078a7928-b840-3566-90b1-8218ce2cbc20.roa File: 078a7928-b840-3566-90b1-8218ce2cbc20.roa (raw, json) Hash identifier: /edYNuVcaHJ/576AcHW+bz19Zmb/KZmIzqr25EGUAJk= Subject key identifier: 3C:2B:98:BE:33:37:77:2C:73:BF:0D:E7:39:49:A1:2B:40:28:03:7E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4987705A054089F5D7DBF540 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/078a7928-b840-3566-90b1-8218ce2cbc20.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5065 IP address blocks: 209.101.52.0/24 maxlen: 24 209.101.53.0/24 maxlen: 24 209.101.54.0/24 maxlen: 24 209.101.55.0/24 maxlen: 24 209.101.56.0/24 maxlen: 24 209.101.57.0/24 maxlen: 24 209.101.58.0/24 maxlen: 24 209.101.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:70:5a:05:40:89:f5:d7:db:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8949ad84-3f4a-4335-b176-9498d6a5d8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:3e:0d:6d:91:f1:1a:7d:ba:a4:6d:9b:30: d4:2f:ff:21:34:8e:b7:38:a0:69:f8:8f:88:83:48: 36:43:a3:31:6d:37:93:d0:f2:45:4b:dd:47:16:91: 41:f5:b7:55:94:ee:c4:41:f0:bf:0d:80:15:51:29: 3f:ea:52:d0:c1:d9:37:6d:b5:52:45:2d:c5:74:17: 11:ab:9f:63:7d:9b:46:a3:aa:7d:9c:04:1e:42:94: 51:2f:5c:a4:9c:0f:af:b9:6c:64:f0:f5:c4:8a:68: ee:e5:34:c4:3e:15:d0:19:8b:b8:cc:6f:25:99:1c: 1c:ef:6f:7b:c1:a0:30:c7:39:ef:86:79:12:9e:96: b1:b9:ae:4e:65:9e:a9:d2:a6:5f:30:5c:02:fd:7a: f6:f2:4b:7a:c1:8a:a1:d0:74:38:89:fb:21:99:07: ae:b4:7f:57:0b:be:2c:85:6e:5e:20:d7:27:53:6e: f7:ec:a4:58:eb:26:7b:59:1f:d0:ed:17:c5:a4:ff: c5:f9:62:4b:a0:90:ae:66:c9:96:07:4d:79:98:97: 38:42:57:91:77:83:b6:c4:29:fe:4d:b8:a4:bf:f4: 5d:f2:b7:7f:75:97:8f:fd:88:43:11:40:9f:82:bf: a9:c2:51:6b:ad:a7:2a:1b:cf:17:4f:4d:41:17:5c: 4c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2B:98:BE:33:37:77:2C:73:BF:0D:E7:39:49:A1:2B:40:28:03:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/078a7928-b840-3566-90b1-8218ce2cbc20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.52.0-209.101.59.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:83:e2:e6:f5:d7:13:5d:1f:9f:9a:d6:0f:f2:a8:84:0c:96: 6c:40:76:30:0b:fc:9e:50:8a:5c:1c:72:31:11:46:2f:c2:b9: be:2d:a0:44:de:f6:30:16:c5:6c:e6:d0:d9:e5:8d:a3:a2:b3: 9b:e3:69:6c:47:88:28:58:0d:79:b2:97:e2:c7:46:36:af:9d: b6:c3:ca:80:47:96:f1:a9:cd:2f:6d:35:12:b7:da:d2:1a:8f: 9a:1d:81:73:9d:bd:ee:d3:f5:2b:3d:4c:59:b8:57:f8:ab:20: fa:58:da:ad:94:1e:09:10:9b:81:42:42:6d:33:d9:dd:4c:62: 7a:ff:ce:19:ee:ae:dd:e5:10:38:22:5a:b1:9f:63:cb:11:4e: ae:00:88:ed:0d:b9:10:21:98:1c:6d:77:c3:b2:62:01:4b:e5: 5e:b0:4a:05:83:63:46:59:ed:77:f6:34:e5:8b:26:18:ec:f0: 1b:9f:a7:0a:8c:4c:b4:ac:98:cc:46:85:e8:95:fe:5e:91:07: a9:99:cc:df:c2:52:38:94:1e:e5:f7:67:ef:ad:4c:fa:1a:70: d2:a5:be:76:32:72:6c:e3:16:bd:c6:e3:3e:b0:11:4b:88:98: d8:02:53:26:09:b2:bd:ca:51:49:cd:53:8e:3f:40:22:17:c9: d4:b6:e0:86 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9Jh3BaBUCJ9dfb9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODk0OWFkODQtM2Y0YS00MzM1LWIxNzYtOTQ5OGQ2YTVkOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMo+DW2R8Rp9uqRtmzDUL/8hNI63OKBp+I+I g0g2Q6MxbTeT0PJFS91HFpFB9bdVlO7EQfC/DYAVUSk/6lLQwdk3bbVSRS3FdBcR q59jfZtGo6p9nAQeQpRRL1yknA+vuWxk8PXEimju5TTEPhXQGYu4zG8lmRwc7297 waAwxznvhnkSnpaxua5OZZ6p0qZfMFwC/Xr28kt6wYqh0HQ4ifshmQeutH9XC74s hW5eINcnU2737KRY6yZ7WR/Q7RfFpP/F+WJLoJCuZsmWB015mJc4QleRd4O2xCn+ Tbikv/Rd8rd/dZeP/YhDEUCfgr+pwlFrracqG88XT01BF1xMeQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDwrmL4zN3csc78N5zlJoStAKAN+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDc4YTc5MjgtYjg0MC0z NTY2LTkwYjEtODIxOGNlMmNiYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRZTQD BALRZTgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMoPi5vXXE10fn5rWD/KohAyWbEB2MAv8nlCKXBxyMRFG L8K5vi2gRN72MBbFbObQ2eWNo6Kzm+NpbEeIKFgNebKX4sdGNq+dtsPKgEeW8anN L201Erfa0hqPmh2Bc5297tP1Kz1MWbhX+Ksg+ljarZQeCRCbgUJCbTPZ3Uxiev/O Ge6u3eUQOCJasZ9jyxFOrgCI7Q25ECGYHG13w7JiAUvlXrBKBYNjRlntd/Y05Ysm GOzwG5+nCoxMtKyYzEaF6JX+XpEHqZnM38JSOJQe5fdn761M+hpw0qW+djJybOMW vcbjPrARS4iY2AJTJgmyvcpRSc1Tjj9AIhfJ1Lbghg== -----END CERTIFICATE-----Generated at Sun Oct 11 07:02:58 2026 by rpki-client