$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf0d3cd7-1cfe-3d2f-b90b-959e64149c57.roa File: bf0d3cd7-1cfe-3d2f-b90b-959e64149c57.roa (raw, json) Hash identifier: WMQxToqCbRBxyBhx/yv8Pl6G0jYEYOiI3iPQt6x0nVs= Subject key identifier: 28:48:24:CD:31:9E:62:E4:DD:BC:4B:52:A3:8F:22:BA:85:D1:D0:52 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EF69A78368AE9CD279CCC86C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf0d3cd7-1cfe-3d2f-b90b-959e64149c57.roa Signing time: Wed 26 Aug 2026 08:48:36 +0000 ROA not before: Wed 26 Aug 2026 08:48:36 +0000 ROA not after: Tue 24 Nov 2026 09:48:36 +0000 asID: 402265 IP address blocks: 209.101.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f6:9a:78:36:8a:e9:cd:27:9c:cc:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 26 08:48:36 2026 GMT Not After : Nov 24 09:48:36 2026 GMT Subject: CN=8ed62fc7-5c3b-44ed-81e2-39a7d02956ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:97:c2:e1:28:43:30:fa:8a:ad:c5:33:69: e2:a6:5a:59:ea:b0:88:8a:34:8d:fb:c7:59:61:aa: 92:45:df:9b:06:f7:96:2a:56:65:7f:f8:9f:a9:23: 34:a7:41:48:af:11:d6:cb:89:90:7b:32:3f:82:00: c5:e8:96:db:aa:8a:8c:bf:47:eb:5b:40:36:53:3c: 18:c6:26:57:ff:52:a7:ad:be:7c:7b:71:c7:57:3c: 8e:16:7b:5b:4b:90:d2:5b:18:50:37:a7:c7:81:b7: 62:7b:8c:44:24:67:fd:59:89:37:58:31:9e:f1:54: 89:62:55:a9:79:fd:24:f2:ca:a0:7b:be:a7:5f:ce: 07:c5:aa:35:fa:16:26:64:13:27:17:aa:5f:60:ca: 09:01:97:46:b0:4a:5b:18:ba:fb:3f:d4:df:5f:4d: 95:f6:ac:5c:25:98:20:3a:23:53:66:8b:6a:f9:7a: e7:38:e0:41:14:5b:54:c8:2a:ac:27:d0:20:91:01: 43:76:cb:70:cb:31:7c:57:26:0e:cd:0d:f9:83:f4: e7:73:3c:f3:61:06:37:90:b0:99:12:6a:04:42:50: bb:62:2c:0d:4d:8d:93:bb:21:67:80:80:df:b2:0b: 5c:3e:b1:7d:ab:78:0a:1a:34:17:62:dc:0e:b0:67: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:48:24:CD:31:9E:62:E4:DD:BC:4B:52:A3:8F:22:BA:85:D1:D0:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf0d3cd7-1cfe-3d2f-b90b-959e64149c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:19:90:60:10:2c:07:df:c3:6d:65:82:09:83:01:26:c3:0c: 3b:d4:cb:97:22:f9:77:bf:ee:96:9a:91:a6:64:65:5f:cf:cb: 34:cd:97:26:95:ea:c2:8d:9f:7f:c5:56:81:8b:3d:d1:32:cd: 2d:39:bd:d0:c5:94:79:2f:ca:a9:56:60:17:d1:d4:16:45:a8: 23:f6:e9:25:bb:7a:a8:ed:75:14:b8:f7:66:5e:94:dc:74:82: 5f:51:96:41:c5:83:9e:c5:d9:e6:98:57:49:c0:7d:c7:73:e2: 0a:7b:af:4f:27:ee:56:93:f3:63:31:49:87:69:d9:fc:9c:0e: ac:bb:22:86:ae:b8:5c:d3:b2:ba:b2:28:90:79:5b:27:db:85: b9:46:30:29:ea:65:b2:e2:38:06:61:a4:82:57:86:de:5c:95: d8:7a:04:55:3c:cb:79:26:ae:bd:0d:2a:10:4d:cc:a9:f9:09: d2:d3:00:69:65:db:c0:95:91:8c:1e:48:23:27:99:e6:12:c0: 97:cd:86:8d:0f:99:ab:20:8d:77:65:44:97:81:90:e1:73:a3: 42:ed:43:54:e6:fa:20:f5:b6:9b:55:59:59:9b:f0:a9:e1:1c: 94:fc:fc:99:0e:b0:fe:bf:9d:22:80:88:86:f4:6b:7b:09:62: f8:cf:04:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE72mng2iunNJ5zMhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyNjA4NDgzNloXDTI2MTEyNDA5NDgzNlowLzEtMCsGA1UEAxMk OGVkNjJmYzctNWMzYi00NGVkLTgxZTItMzlhN2QwMjk1NmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUGXwuEoQzD6iq3FM2niplpZ6rCIijSN+8dZ YaqSRd+bBveWKlZlf/ifqSM0p0FIrxHWy4mQezI/ggDF6JbbqoqMv0frW0A2UzwY xiZX/1Knrb58e3HHVzyOFntbS5DSWxhQN6fHgbdie4xEJGf9WYk3WDGe8VSJYlWp ef0k8sqge76nX84Hxao1+hYmZBMnF6pfYMoJAZdGsEpbGLr7P9TfX02V9qxcJZgg OiNTZotq+XrnOOBBFFtUyCqsJ9AgkQFDdstwyzF8VyYOzQ35g/TnczzzYQY3kLCZ EmoEQlC7YiwNTY2TuyFngIDfsgtcPrF9q3gKGjQXYtwOsGd6fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChIJM0xnmLk3bxLUqOPIrqF0dBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmYwZDNjZDctMWNmZS0z ZDJmLWI5MGItOTU5ZTY0MTQ5YzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYZkGAQLAffw21lggmDASbDDDvUy5ci+Xe/7paakaZkZV/PyzTNlyaV 6sKNn3/FVoGLPdEyzS05vdDFlHkvyqlWYBfR1BZFqCP26SW7eqjtdRS492ZelNx0 gl9RlkHFg57F2eaYV0nAfcdz4gp7r08n7laT82MxSYdp2fycDqy7IoauuFzTsrqy KJB5WyfbhblGMCnqZbLiOAZhpIJXht5cldh6BFU8y3kmrr0NKhBNzKn5CdLTAGll 28CVkYweSCMnmeYSwJfNho0PmasgjXdlRJeBkOFzo0LtQ1Tm+iD1tptVWVmb8Knh HJT8/JkOsP6/nSKAiIb0a3sJYvjPBKA= -----END CERTIFICATE-----Generated at Thu Sep 3 22:29:24 2026 by rpki-client