$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/65c56412-61f6-3afb-8ae2-72d7fab41202.roa File: 65c56412-61f6-3afb-8ae2-72d7fab41202.roa (raw, json) Hash identifier: LCmHAsIcr9CJCAXWoDOkzAM5bYyBOR+YbIY4A8o5ijM= Subject key identifier: 27:DB:88:96:BE:C5:D5:CA:DD:FD:99:02:44:8C:73:FD:A7:CD:DD:69 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F612D6F2BFAE668ACFCFF6380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/65c56412-61f6-3afb-8ae2-72d7fab41202.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 63099 IP address blocks: 209.101.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6f:2b:fa:e6:68:ac:fc:ff:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=f933e9eb-5776-478c-a0ab-0581a098e325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0e:37:05:ea:7d:06:1b:a8:85:53:2b:9d:d5: 95:6c:42:06:23:b5:91:0e:c3:af:05:eb:8b:93:4a: c0:03:31:c0:15:06:e1:9a:aa:ab:32:8b:94:9c:cc: e0:67:41:59:81:6b:0a:3d:06:0c:e8:8a:54:8d:d1: ac:fd:71:6d:03:19:69:97:32:e5:cd:7f:35:0d:6f: bc:28:b7:63:4c:90:d8:99:cb:e4:ae:6c:11:ac:96: e7:59:88:58:ff:49:c0:0d:2c:ff:66:78:31:ef:73: 79:03:d8:83:0a:fb:94:89:a7:a3:a6:05:6f:9d:38: f9:40:88:bc:d1:dd:96:df:3e:fe:32:22:ae:f0:95: 39:e4:e9:35:1c:20:13:9c:e9:b3:ee:dc:5e:a8:97: 2f:86:26:81:4f:8c:61:43:ad:51:f6:5e:74:ca:46: a1:f4:84:fa:09:3a:08:5a:a4:bd:d7:e7:c7:39:cc: 24:12:aa:f2:66:5f:a6:22:70:e4:2f:34:ab:0b:94: ce:af:cc:2b:4d:c1:a9:b3:cd:a6:01:7e:e7:17:24: 28:64:56:bb:0e:56:d4:27:fb:c7:fc:98:39:ec:4e: a2:ad:37:0f:d2:8b:2a:39:55:de:66:ec:bc:9e:47: 2b:eb:e1:c7:56:79:5c:04:91:78:79:f5:18:64:92: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DB:88:96:BE:C5:D5:CA:DD:FD:99:02:44:8C:73:FD:A7:CD:DD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/65c56412-61f6-3afb-8ae2-72d7fab41202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:1b:bf:69:cb:bf:26:5f:48:1f:18:97:4b:81:7b:04:34:a8: 10:8f:e9:25:62:f7:1e:31:d0:a5:f0:9b:55:e2:8f:57:1b:34: b8:d7:74:bf:76:67:ad:7a:4f:67:f5:c8:ca:c6:76:d9:37:05: d0:1b:45:65:ef:1f:e4:0c:7b:76:dd:95:42:4a:a1:32:e3:72: e2:c8:c1:11:b9:09:91:5c:5c:39:fa:27:b4:9b:8e:d1:b1:06: a8:6f:46:7b:e0:64:aa:54:42:1e:3d:ed:b3:04:8f:5d:d8:ee: b4:35:cd:cb:d7:02:ae:fd:6c:9a:c4:81:e4:cd:01:47:e4:2f: 78:58:60:d0:d5:85:ed:9b:4c:53:38:f3:15:c5:50:2c:d8:f3: 1b:29:a7:84:15:a7:27:07:3d:74:5f:49:a6:af:1a:db:57:6c: 6c:4f:b6:d2:b2:4a:b3:15:8a:d2:87:87:09:a0:48:af:75:79: e1:f2:60:21:34:dd:fc:34:3f:18:04:b9:50:bb:8b:b7:fe:fa: a4:29:db:23:f9:c8:aa:45:78:49:38:f2:23:b2:5c:4f:a6:09: ca:47:8e:10:0d:d2:ec:91:b7:3e:a5:e4:6b:ab:90:97:bf:d1: a9:e5:0f:64:a1:ad:b7:4e:25:c1:59:52:ea:55:6f:4c:d2:37: 32:82:06:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLW8r+uZorPz/Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZjkzM2U5ZWItNTc3Ni00NzhjLWEwYWItMDU4MWEwOThlMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ43Bep9BhuohVMrndWVbEIGI7WRDsOvBeuL k0rAAzHAFQbhmqqrMouUnMzgZ0FZgWsKPQYM6IpUjdGs/XFtAxlplzLlzX81DW+8 KLdjTJDYmcvkrmwRrJbnWYhY/0nADSz/Zngx73N5A9iDCvuUiaejpgVvnTj5QIi8 0d2W3z7+MiKu8JU55Ok1HCATnOmz7txeqJcvhiaBT4xhQ61R9l50ykah9IT6CToI WqS91+fHOcwkEqryZl+mInDkLzSrC5TOr8wrTcGps82mAX7nFyQoZFa7DlbUJ/vH /Jg57E6irTcP0osqOVXeZuy8nkcr6+HHVnlcBJF4efUYZJLv+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfbiJa+xdXK3f2ZAkSMc/2nzd1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjVjNTY0MTItNjFmNi0z YWZiLThhZTItNzJkN2ZhYjQxMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcbv2nLvyZfSB8Yl0uBewQ0qBCP6SVi9x4x0KXwm1Xij1cbNLjXdL92 Z616T2f1yMrGdtk3BdAbRWXvH+QMe3bdlUJKoTLjcuLIwRG5CZFcXDn6J7SbjtGx BqhvRnvgZKpUQh497bMEj13Y7rQ1zcvXAq79bJrEgeTNAUfkL3hYYNDVhe2bTFM4 8xXFUCzY8xspp4QVpycHPXRfSaavGttXbGxPttKySrMVitKHhwmgSK91eeHyYCE0 3fw0PxgEuVC7i7f++qQp2yP5yKpFeEk48iOyXE+mCcpHjhAN0uyRtz6l5GurkJe/ 0anlD2ShrbdOJcFZUupVb0zSNzKCBmM= -----END CERTIFICATE-----Generated at Sun Oct 11 05:58:06 2026 by rpki-client