$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/65c56412-61f6-3afb-8ae2-72d7fab41202.roa File: 65c56412-61f6-3afb-8ae2-72d7fab41202.roa (raw, json) Hash identifier: 9Kp6uTS7zn/qkRdXJpPirQyK1N1Y2Dk0ZY/RZRUtVQM= Subject key identifier: 3D:62:18:A4:F6:05:DD:31:3A:99:75:C5:9C:E3:14:FE:DC:36:65:E3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EBF2265F0A946C9844D936520 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/65c56412-61f6-3afb-8ae2-72d7fab41202.roa Signing time: Thu 06 Aug 2026 11:57:13 +0000 ROA not before: Thu 06 Aug 2026 11:57:13 +0000 ROA not after: Wed 04 Nov 2026 12:57:13 +0000 asID: 63099 IP address blocks: 209.101.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:22:65:f0:a9:46:c9:84:4d:93:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 6 11:57:13 2026 GMT Not After : Nov 4 12:57:13 2026 GMT Subject: CN=f312fe42-7b8a-4a9e-b2e0-377b5051c0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:83:f6:1b:47:6a:c5:c1:cf:d6:34:14:4b: db:58:95:2c:bc:fd:e6:e2:27:54:72:ae:ba:0e:33: 52:40:ce:5f:db:ed:f4:c7:fe:71:f8:46:a6:ce:ad: ac:9d:3f:53:4f:6d:87:04:65:3f:b4:27:7c:64:34: 20:e1:99:2d:2e:4a:61:19:ef:7c:08:0b:b7:e8:04: bd:1f:f1:a2:9f:cf:ad:a2:59:f6:cd:e9:12:b5:34: 87:7e:f9:2a:0e:e2:e1:fd:ea:f3:dd:64:b9:0c:f5: 50:81:47:11:fe:d6:1a:d2:ae:d7:ad:ed:50:37:40: 11:61:3a:63:ea:58:46:1c:48:fb:b0:10:42:5e:f9: 93:4b:fc:ec:84:f3:7c:44:63:63:c1:67:c0:eb:73: 7d:56:5a:6a:34:e7:64:19:f7:b1:4a:fd:6d:04:08: 65:57:7d:81:3c:b4:f4:92:66:1b:76:d9:12:79:aa: f6:fb:23:0a:25:41:9b:2a:c7:33:9d:e5:6d:44:07: cc:26:14:0b:af:b2:14:88:22:7a:8e:97:28:53:bc: 86:db:df:bf:ba:69:58:cc:2e:e1:5e:73:8e:e8:78: 09:08:40:ea:a0:17:6a:c6:87:df:3d:ab:20:b5:8f: 2f:d1:e9:70:35:9b:23:ab:9a:41:08:18:e8:29:86: cd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:62:18:A4:F6:05:DD:31:3A:99:75:C5:9C:E3:14:FE:DC:36:65:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/65c56412-61f6-3afb-8ae2-72d7fab41202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:9d:d8:88:bd:35:35:24:17:f0:83:ae:b0:5a:6d:17:17:3e: bd:12:6b:c4:8c:34:d8:b4:9e:85:71:9c:e0:ad:e6:6a:f2:18: 25:17:eb:57:37:92:45:95:56:cb:ef:e7:36:2a:ba:7b:ce:48: 29:60:80:7a:cc:b1:78:13:ef:e6:42:d1:c3:37:c8:01:35:59: 71:5b:b6:02:16:b9:fe:06:5c:14:96:79:57:29:69:b7:93:be: f8:07:6e:cb:78:a5:95:00:5e:b5:6a:6b:68:47:bf:e3:45:02: a7:8c:a2:6e:31:68:e2:32:9b:9b:e2:e0:d5:18:3c:0c:06:8a: 6b:9e:ee:a4:27:5a:0c:17:e2:0c:f8:b8:be:93:f4:25:cb:87: d8:50:bc:99:fa:6c:24:2c:5b:fa:ae:41:d1:53:73:80:26:53: 6d:65:51:88:28:0d:5b:61:a5:f0:e9:0b:94:45:24:d5:0a:9c: 6a:39:7e:b0:7e:ca:bf:b1:5c:9d:e2:ba:2d:3e:bd:73:c1:b4: 68:db:f6:b5:bc:84:80:ea:f6:06:be:e7:fe:09:ed:fd:f1:6d: c0:cd:1c:ec:c7:8e:0c:c0:2e:92:3b:74:38:03:c4:2b:04:2d: 63:51:3c:4c:9c:b0:87:75:b1:de:a8:cc:21:b9:c8:be:7d:3d: d4:f1:66:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/ImXwqUbJhE2TZSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgwNjExNTcxM1oXDTI2MTEwNDEyNTcxM1owLzEtMCsGA1UEAxMk ZjMxMmZlNDItN2I4YS00YTllLWIyZTAtMzc3YjUwNTFjMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl42D9htHasXBz9Y0FEvbWJUsvP3m4idUcq66 DjNSQM5f2+30x/5x+Eamzq2snT9TT22HBGU/tCd8ZDQg4ZktLkphGe98CAu36AS9 H/Gin8+toln2zekStTSHfvkqDuLh/erz3WS5DPVQgUcR/tYa0q7Xre1QN0ARYTpj 6lhGHEj7sBBCXvmTS/zshPN8RGNjwWfA63N9VlpqNOdkGfexSv1tBAhlV32BPLT0 kmYbdtkSear2+yMKJUGbKsczneVtRAfMJhQLr7IUiCJ6jpcoU7yG29+/umlYzC7h XnOO6HgJCEDqoBdqxoffPasgtY8v0elwNZsjq5pBCBjoKYbNEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1iGKT2Bd0xOpl1xZzjFP7cNmXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjVjNTY0MTItNjFmNi0z YWZiLThhZTItNzJkN2ZhYjQxMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWd2Ii9NTUkF/CDrrBabRcXPr0Sa8SMNNi0noVxnOCt5mryGCUX61c3 kkWVVsvv5zYqunvOSClggHrMsXgT7+ZC0cM3yAE1WXFbtgIWuf4GXBSWeVcpabeT vvgHbst4pZUAXrVqa2hHv+NFAqeMom4xaOIym5vi4NUYPAwGimue7qQnWgwX4gz4 uL6T9CXLh9hQvJn6bCQsW/quQdFTc4AmU21lUYgoDVthpfDpC5RFJNUKnGo5frB+ yr+xXJ3iui0+vXPBtGjb9rW8hIDq9ga+5/4J7f3xbcDNHOzHjgzALpI7dDgDxCsE LWNRPEycsId1sd6ozCG5yL59PdTxZpM= -----END CERTIFICATE-----Generated at Wed Aug 26 17:33:38 2026 by rpki-client