$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6a0607-5470-33bb-a3da-78cd4c521774.roa File: 2b6a0607-5470-33bb-a3da-78cd4c521774.roa (raw, json) Hash identifier: TDXhSWCi3wtgp9OR0A6oX1lYPl+ZmiGceO3qMpUKZzQ= Subject key identifier: 59:59:42:0C:79:14:6C:E6:C9:87:6B:80:07:3B:3C:2E:20:5C:23:11 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EBB11A47ECBA6AED61B0C4E00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6a0607-5470-33bb-a3da-78cd4c521774.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 54252 IP address blocks: 209.101.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:a4:7e:cb:a6:ae:d6:1b:0c:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=c1bd0edb-54e7-4bf4-84c3-7a64c855abd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:e3:f6:6f:cc:af:99:57:54:3b:84:22:d5: 82:b4:4a:3e:6e:a8:48:5f:dc:3c:90:9d:4f:e2:44: a2:fc:ac:af:45:7f:6c:52:29:a6:5d:3a:d2:41:e7: 57:b3:d5:4a:ac:77:1f:89:6c:97:83:5e:64:dc:3d: c3:4a:b5:84:cb:95:53:ff:d3:38:71:a4:ea:07:74: 27:44:a5:1c:e2:e4:8f:f0:d5:92:f2:61:0f:22:bd: 8f:b7:29:1f:9a:49:90:97:f6:a0:ca:a2:b9:c2:61: e0:7b:c2:63:dd:a4:7e:60:1d:99:28:76:f5:af:6d: 3a:4b:e0:d9:d6:f9:12:e4:0c:0f:33:2d:60:cd:24: 97:4f:a2:2b:ca:9d:22:b8:e5:9c:05:64:fa:cb:c7: c2:18:27:fe:91:35:ac:76:ef:d3:c3:54:64:7b:35: a3:7d:42:10:ee:64:c1:9b:41:1b:e7:3d:b9:80:d1: b4:5b:be:ba:90:ba:ed:df:77:b6:6b:10:ac:e9:a2: e2:7a:7c:41:41:3d:3c:0d:28:cf:1e:54:04:95:e4: 84:73:c0:da:1d:8d:a2:48:0f:8f:f7:f8:68:cb:2d: df:cf:d5:be:21:68:5f:33:18:10:e3:62:40:d9:23: 9f:13:87:99:4d:10:e4:1e:26:9e:0e:6f:84:63:b8: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:59:42:0C:79:14:6C:E6:C9:87:6B:80:07:3B:3C:2E:20:5C:23:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6a0607-5470-33bb-a3da-78cd4c521774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fc:d9:87:3e:20:3c:e3:3e:e8:0d:63:1f:ce:bc:e2:79:ae: 47:31:38:2f:5b:91:4e:a1:41:8f:6c:b6:93:64:46:f4:98:d9: 77:f6:dd:d8:9d:56:0e:a9:3d:f6:8f:c5:6c:99:0c:6d:55:de: 83:68:ce:cb:70:64:39:52:e8:62:97:cb:f0:5b:33:5c:d3:f5: 0f:f6:65:af:1b:3f:95:1a:db:f9:28:17:3c:2d:78:b5:a1:da: 7f:d3:14:c1:1b:10:03:34:ba:1e:7f:2b:8e:0d:b6:11:04:48: bf:69:2c:84:90:22:12:ba:7e:b8:fb:75:9e:e7:c5:75:49:c9: 5f:a9:c7:a4:d3:30:c9:2e:af:d9:2d:fb:b0:c5:7d:08:f9:a2: 01:93:8f:64:27:31:91:b6:2e:2d:e4:ba:48:22:1c:dc:76:9b: 30:ac:c7:37:ef:a5:0b:18:16:8f:95:90:cd:49:15:ab:57:c0: 4d:1e:f0:1f:ad:89:33:f3:ba:0a:dd:30:e9:79:36:98:19:aa: 5a:cf:77:be:22:25:1e:3d:ea:cc:8c:5f:b3:99:68:e0:f2:de: 6c:7a:86:97:e4:bf:04:63:91:0c:b0:0b:b3:8b:cd:f9:e2:55: 8b:1d:d4:35:41:4c:af:34:bb:56:49:f8:7f:b6:8f:54:d0:c9: a7:5f:22:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EaR+y6au1hsMTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YzFiZDBlZGItNTRlNy00YmY0LTg0YzMtN2E2NGM4NTVhYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEjj9m/Mr5lXVDuEItWCtEo+bqhIX9w8kJ1P 4kSi/KyvRX9sUimmXTrSQedXs9VKrHcfiWyXg15k3D3DSrWEy5VT/9M4caTqB3Qn RKUc4uSP8NWS8mEPIr2PtykfmkmQl/agyqK5wmHge8Jj3aR+YB2ZKHb1r206S+DZ 1vkS5AwPMy1gzSSXT6Iryp0iuOWcBWT6y8fCGCf+kTWsdu/Tw1RkezWjfUIQ7mTB m0Eb5z25gNG0W766kLrt33e2axCs6aLienxBQT08DSjPHlQEleSEc8DaHY2iSA+P 9/hoyy3fz9W+IWhfMxgQ42JA2SOfE4eZTRDkHiaeDm+EY7hw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlZQgx5FGzmyYdrgAc7PC4gXCMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmI2YTA2MDctNTQ3MC0z M2JiLWEzZGEtNzhjZDRjNTIxNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX82Yc+IDzjPugNYx/OvOJ5rkcxOC9bkU6hQY9stpNkRvSY2Xf23did Vg6pPfaPxWyZDG1V3oNozstwZDlS6GKXy/BbM1zT9Q/2Za8bP5Ua2/koFzwteLWh 2n/TFMEbEAM0uh5/K44NthEESL9pLISQIhK6frj7dZ7nxXVJyV+px6TTMMkur9kt +7DFfQj5ogGTj2QnMZG2Li3kukgiHNx2mzCsxzfvpQsYFo+VkM1JFatXwE0e8B+t iTPzugrdMOl5NpgZqlrPd74iJR496syMX7OZaODy3mx6hpfkvwRjkQywC7OLzfni VYsd1DVBTK80u1ZJ+H+2j1TQyadfIpI= -----END CERTIFICATE-----Generated at Wed Aug 26 15:15:24 2026 by rpki-client