$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bbbf1e1d-51c2-3c0c-af59-2887e55df975.roa File: bbbf1e1d-51c2-3c0c-af59-2887e55df975.roa (raw, json) Hash identifier: eEn8m9rJEstxICo66eFJTq89WfHNjDIrnlhh6XRAwMQ= Subject key identifier: 25:3E:ED:4C:22:3A:89:17:B5:D6:DC:A5:FF:17:B6:D5:87:7F:4C:09 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F612D6F0834AD04248C8BF300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bbbf1e1d-51c2-3c0c-af59-2887e55df975.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 63099 IP address blocks: 209.101.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6f:08:34:ad:04:24:8c:8b:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=ecc67a04-1083-4072-b55a-f7c2e4d3ec46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:76:a1:ce:a3:c8:6b:a3:68:c9:b1:a6:0b:c3: 1a:2a:27:72:1b:ea:fa:89:a5:ab:6d:12:32:d7:e4: 79:b1:9d:5d:76:5a:0d:07:ac:ba:37:e0:2c:6a:37: ce:ec:ce:d7:ec:39:56:9d:8d:1d:fc:11:d0:2f:1c: 8d:33:eb:83:3f:9d:3f:3b:07:6c:18:9d:69:46:a5: aa:b6:64:0c:64:c1:2b:b3:63:cf:45:3c:17:5b:2d: 4f:b2:83:95:40:3a:8b:ae:c6:eb:32:5a:34:c3:06: 98:ff:31:ea:0a:19:f9:5f:0f:18:58:a7:ea:e4:02: d2:38:c7:5b:f6:05:79:1e:62:1e:93:61:06:2f:08: 09:4a:93:ec:b2:f7:93:3b:77:b7:2e:a5:85:b4:5d: c2:d8:26:97:82:ff:e6:87:60:38:34:65:09:39:d7: fc:8f:4f:18:9b:c3:24:04:79:19:9e:ca:47:e5:ee: 46:59:8e:ad:63:4f:2f:c0:32:af:86:6c:45:ef:e3: f2:e2:1d:2b:50:91:29:db:81:c3:72:f6:70:b3:f8: 96:29:a6:0c:4d:2d:1d:c0:41:87:bf:65:c3:35:7d: 9e:72:7a:34:0c:e0:76:83:50:0a:9c:07:fe:5b:27: 15:cb:56:59:01:27:fb:0e:90:99:bf:31:f9:be:fc: f5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3E:ED:4C:22:3A:89:17:B5:D6:DC:A5:FF:17:B6:D5:87:7F:4C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bbbf1e1d-51c2-3c0c-af59-2887e55df975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:aa:93:15:70:c0:ef:44:af:ea:1d:65:35:9c:ec:8c:42:57: 5b:5e:91:d6:b1:e8:9e:bb:84:4c:eb:56:26:d3:eb:9b:f0:bb: c3:6e:c1:09:dc:a5:0a:07:09:82:33:18:43:e2:95:d0:fc:c0: e3:39:fe:8f:88:21:7d:93:02:8f:5d:1f:69:ef:a7:29:42:ff: 4e:8d:5d:18:15:58:72:79:ec:8f:05:25:9e:81:f8:41:c0:be: f1:9e:05:cd:ee:31:12:73:78:3c:99:e2:79:4b:19:48:b5:2d: 5a:0a:03:49:46:06:d7:78:43:46:68:0a:65:f1:5a:b1:9e:26: a5:8c:b1:29:09:d9:15:94:1e:a5:fa:57:80:de:ab:ed:19:ac: 84:e1:73:0b:c2:35:93:c8:99:69:12:17:b2:af:1d:f1:26:bf: b5:4c:e7:82:8b:7d:1e:9b:11:50:05:d4:29:32:79:fb:c1:f2: 0c:06:1c:1a:c9:9e:f0:84:15:36:82:85:a3:f3:fb:e2:4f:d9: 5e:b6:25:b8:4d:1f:11:e6:02:57:7d:26:7d:1f:15:31:d9:c2: 29:74:34:3d:4b:48:ab:9b:d9:35:b5:c6:ac:cb:e4:84:3f:32: ed:34:78:ad:25:f1:50:bf:5f:a0:af:2c:f4:89:55:ca:e9:c0: f5:69:50:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLW8INK0EJIyL8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZWNjNjdhMDQtMTA4My00MDcyLWI1NWEtZjdjMmU0ZDNlYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nahzqPIa6NoybGmC8MaKidyG+r6iaWrbRIy 1+R5sZ1ddloNB6y6N+AsajfO7M7X7DlWnY0d/BHQLxyNM+uDP50/OwdsGJ1pRqWq tmQMZMErs2PPRTwXWy1PsoOVQDqLrsbrMlo0wwaY/zHqChn5Xw8YWKfq5ALSOMdb 9gV5HmIek2EGLwgJSpPssveTO3e3LqWFtF3C2CaXgv/mh2A4NGUJOdf8j08Ym8Mk BHkZnspH5e5GWY6tY08vwDKvhmxF7+Py4h0rUJEp24HDcvZws/iWKaYMTS0dwEGH v2XDNX2ecno0DOB2g1AKnAf+WycVy1ZZASf7DpCZvzH5vvz1hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCU+7UwiOokXtdbcpf8XttWHf0wJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmJiZjFlMWQtNTFjMi0z YzBjLWFmNTktMjg4N2U1NWRmOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOqkxVwwO9Er+odZTWc7IxCV1tekdax6J67hEzrVibT65vwu8NuwQnc pQoHCYIzGEPildD8wOM5/o+IIX2TAo9dH2nvpylC/06NXRgVWHJ57I8FJZ6B+EHA vvGeBc3uMRJzeDyZ4nlLGUi1LVoKA0lGBtd4Q0ZoCmXxWrGeJqWMsSkJ2RWUHqX6 V4Deq+0ZrIThcwvCNZPImWkSF7KvHfEmv7VM54KLfR6bEVAF1CkyefvB8gwGHBrJ nvCEFTaChaPz++JP2V62JbhNHxHmAld9Jn0fFTHZwil0ND1LSKub2TW1xqzL5IQ/ Mu00eK0l8VC/X6CvLPSJVcrpwPVpUCw= -----END CERTIFICATE-----Generated at Sun Oct 11 06:36:38 2026 by rpki-client