$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7e0b5f5-7aa6-3fa7-acb0-eb1e7771c54d.roa File: a7e0b5f5-7aa6-3fa7-acb0-eb1e7771c54d.roa (raw, json) Hash identifier: fIEfvnpZvxjGjd5M+s5w23pEK/PDJczlzCT7TcRhr5I= Subject key identifier: 0D:F2:18:3A:2F:48:25:00:B7:DB:17:8C:42:7D:D2:9F:BE:4F:51:18 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EE7BCCC1609C163FAACEEEB40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7e0b5f5-7aa6-3fa7-acb0-eb1e7771c54d.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 834 IP address blocks: 209.101.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:cc:16:09:c1:63:fa:ac:ee:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=22622bf6-9e85-4889-866b-c7c72b5325cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:46:15:36:69:23:ec:ad:48:40:34:1e:4b: 93:cf:1c:77:8e:eb:93:2d:2f:73:98:d3:5b:84:9a: 1e:cd:05:09:4d:e7:45:72:9e:2f:19:99:79:ef:ea: 69:e4:48:ab:41:46:f4:d7:28:b1:65:db:19:b5:4d: 01:95:58:26:c6:20:b4:51:c1:5d:1d:f7:0e:95:2a: 6c:8a:a9:a5:a9:d3:c4:00:81:e0:c7:91:1f:05:d4: 9f:12:c4:5a:56:5b:87:5d:e5:0f:f7:05:48:08:13: 0a:fc:02:e6:16:52:2b:c0:ad:fc:25:0d:9d:1a:e5: 41:39:86:78:d7:5f:e8:9f:b8:c4:79:fa:9f:b6:15: 86:22:f6:07:63:78:1c:bc:b8:53:8f:01:5f:6b:ba: b7:89:b0:74:ed:bd:64:a0:79:b4:06:2d:37:33:a7: 3b:d5:a3:12:5b:36:2a:49:5c:ef:84:ed:c1:5b:b5: ab:8e:94:03:d6:6f:87:e0:7f:3a:29:d2:82:41:d3: 04:fd:98:e0:e8:26:ab:14:e5:2b:63:8b:9a:70:b3: 18:53:ac:bf:4a:82:87:ce:32:72:96:fb:0e:a4:6c: d9:ce:1e:13:57:fa:be:7d:7d:a3:77:e1:22:f8:97: 83:5b:1e:94:5c:0c:8a:2c:11:e6:cc:6e:35:66:fb: 9d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F2:18:3A:2F:48:25:00:B7:DB:17:8C:42:7D:D2:9F:BE:4F:51:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7e0b5f5-7aa6-3fa7-acb0-eb1e7771c54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:4e:53:5b:0d:06:68:3a:a8:f2:61:9d:71:ce:5d:28:5a:91: 9d:3b:d0:78:b8:fa:14:a6:7c:d1:8a:13:a5:98:d8:64:58:ce: c9:8d:db:9b:8e:88:03:80:5d:03:f2:b9:e8:ed:19:90:f7:07: 3b:8a:d1:bc:98:23:a5:af:3b:5e:9c:bf:3a:3c:72:6d:3c:7b: 95:49:29:47:9a:e1:77:27:e6:33:c8:d9:09:ce:43:71:ab:3f: c3:84:f3:8f:18:39:13:0b:4e:8f:1a:0c:0e:76:27:91:22:a3: 34:84:01:2b:a1:ac:0a:ff:f7:1c:52:50:c3:8f:3b:4f:a3:66: 84:58:5a:9b:e8:96:f1:ef:15:20:a7:58:7c:d3:35:07:ad:3d: b3:f8:c2:96:12:4c:db:ee:94:ec:e5:44:63:b4:ec:4a:9a:22: 26:e7:b6:23:b2:9c:f0:b7:a2:36:de:8d:0f:be:6e:e7:c3:9f: aa:36:11:a5:5e:1b:3b:5f:63:b0:7f:97:8a:b5:1c:81:13:17: 26:c7:3f:31:7b:d3:4a:80:1b:14:62:68:1a:25:96:f6:85:32: 74:e4:7c:88:11:5a:f8:02:59:bf:b0:ac:81:af:92:79:5a:31: 2d:6d:a5:0b:90:d8:3f:6b:b8:41:0e:24:fe:65:8b:df:20:8a: d2:3c:af:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvMwWCcFj+qzu60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MjI2MjJiZjYtOWU4NS00ODg5LTg2NmItYzdjNzJiNTMyNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu9GFTZpI+ytSEA0HkuTzxx3juuTLS9zmNNb hJoezQUJTedFcp4vGZl57+pp5EirQUb01yixZdsZtU0BlVgmxiC0UcFdHfcOlSps iqmlqdPEAIHgx5EfBdSfEsRaVluHXeUP9wVICBMK/ALmFlIrwK38JQ2dGuVBOYZ4 11/on7jEefqfthWGIvYHY3gcvLhTjwFfa7q3ibB07b1koHm0Bi03M6c71aMSWzYq SVzvhO3BW7WrjpQD1m+H4H86KdKCQdME/Zjg6CarFOUrY4uacLMYU6y/SoKHzjJy lvsOpGzZzh4TV/q+fX2jd+Ei+JeDWx6UXAyKLBHmzG41ZvudNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3yGDovSCUAt9sXjEJ90p++T1EYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTdlMGI1ZjUtN2FhNi0z ZmE3LWFjYjAtZWIxZTc3NzFjNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJOU1sNBmg6qPJhnXHOXShakZ070Hi4+hSmfNGKE6WY2GRYzsmN25uO iAOAXQPyuejtGZD3BzuK0byYI6WvO16cvzo8cm08e5VJKUea4Xcn5jPI2QnOQ3Gr P8OE848YORMLTo8aDA52J5EiozSEASuhrAr/9xxSUMOPO0+jZoRYWpvolvHvFSCn WHzTNQetPbP4wpYSTNvulOzlRGO07EqaIibntiOynPC3ojbejQ++bufDn6o2EaVe GztfY7B/l4q1HIETFybHPzF700qAGxRiaBollvaFMnTkfIgRWvgCWb+wrIGvknla MS1tpQuQ2D9ruEEOJP5li98gitI8rzE= -----END CERTIFICATE-----Generated at Wed Aug 26 16:14:16 2026 by rpki-client