$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce9edb05-00b6-33fb-b966-269dd30aa498.roa File: ce9edb05-00b6-33fb-b966-269dd30aa498.roa (raw, json) Hash identifier: zAcgzkC7aEEBYzra1sfyV05QgmBDOeos2/YQKi6K/cY= Subject key identifier: 79:0D:BF:37:04:7B:1F:48:CE:94:D3:F8:4D:8D:4E:58:3C:B7:88:15 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F58CD63568B58F1843F5FC6C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce9edb05-00b6-33fb-b966-269dd30aa498.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 834 IP address blocks: 209.101.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:63:56:8b:58:f1:84:3f:5f:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=4592a1f2-69f1-4a16-9d2f-501cf61ecace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c2:98:de:2c:4f:04:d0:9f:2f:a4:91:ae:fc: 28:64:a4:f7:06:92:0e:88:e7:47:b2:7d:27:7b:3c: 92:eb:dd:bf:40:1d:18:1e:14:36:58:f4:72:9c:12: 56:80:fa:ae:06:6c:da:d6:d9:f0:a0:7b:bb:6b:7e: d9:74:39:11:64:a7:20:ed:6c:c3:49:ea:16:c3:38: f6:21:46:1b:e7:ce:04:84:a7:d3:06:b4:66:c9:e9: 01:37:ff:80:0e:63:62:3f:49:ae:a4:3f:4c:2f:bb: 71:af:d8:1f:14:0f:32:0e:ee:f3:a6:cf:53:b4:3d: f6:3e:84:4a:73:2d:76:86:f3:6c:de:de:75:36:05: bc:d1:0a:69:a9:57:8a:86:56:3a:3c:33:00:45:f2: a2:79:50:e4:d7:15:c4:e1:96:11:16:a5:bf:e2:e9: 6f:e3:bc:ac:c6:dc:ca:12:78:c6:92:a7:3c:9d:35: f8:59:22:f8:38:b6:b9:59:3e:96:64:11:a7:4d:ac: 4c:cd:79:32:8f:ad:72:13:ef:21:d9:aa:50:f5:54: 4a:33:38:2b:b3:dd:dd:60:be:36:29:ef:91:06:c4: 58:9d:1c:a8:8c:af:36:19:d6:d9:0c:9b:13:94:0e: 92:1d:34:20:db:99:f7:29:e8:b1:7c:06:66:c8:5b: c2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0D:BF:37:04:7B:1F:48:CE:94:D3:F8:4D:8D:4E:58:3C:B7:88:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce9edb05-00b6-33fb-b966-269dd30aa498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:e4:3d:9f:11:85:9a:12:49:b9:c0:18:dd:5f:cf:95:cc:d2: 4c:2d:c0:a0:4b:9f:1e:60:c0:a3:7e:21:0c:8d:77:fa:b3:d4: f5:93:00:97:32:4d:72:43:5e:64:21:89:1d:57:ab:a0:11:73: 0d:06:98:e3:8e:dd:14:bc:a5:1e:d1:d1:7b:c8:9e:79:5c:20: 5c:a7:46:b8:dd:45:9b:8d:b7:13:2b:91:6a:c6:f1:53:01:29: 66:a1:4e:64:ae:06:55:c5:96:ec:15:6b:26:5e:aa:0e:56:36: e9:58:38:c7:64:44:a8:eb:b5:44:1c:82:66:e1:b8:32:7c:10: 17:d0:de:de:26:c4:f2:f5:24:73:18:7e:81:08:b1:00:52:22: 39:cf:43:fd:00:f4:08:a1:65:7b:fa:92:07:b5:fe:85:54:ef: 85:62:93:ed:88:04:61:e5:a1:0d:4e:42:47:22:7d:25:cc:fc: a2:cf:af:01:68:5f:fb:a8:91:af:a6:6e:1a:ba:df:51:0b:15: d1:7e:9d:45:12:aa:87:fe:e3:a3:bf:0d:f5:0e:f0:1c:9b:05: 10:bc:98:9b:22:b1:b3:09:89:91:51:08:d5:c8:78:ad:82:0b: 2e:db:cc:ae:7a:58:ef:3f:0d:03:bb:b3:92:93:a8:01:2a:27: cd:c1:15:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzWNWi1jxhD9fxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk NDU5MmExZjItNjlmMS00YTE2LTlkMmYtNTAxY2Y2MWVjYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcKY3ixPBNCfL6SRrvwoZKT3BpIOiOdHsn0n ezyS692/QB0YHhQ2WPRynBJWgPquBmza1tnwoHu7a37ZdDkRZKcg7WzDSeoWwzj2 IUYb584EhKfTBrRmyekBN/+ADmNiP0mupD9ML7txr9gfFA8yDu7zps9TtD32PoRK cy12hvNs3t51NgW80QppqVeKhlY6PDMARfKieVDk1xXE4ZYRFqW/4ulv47ysxtzK EnjGkqc8nTX4WSL4OLa5WT6WZBGnTaxMzXkyj61yE+8h2apQ9VRKMzgrs93dYL42 Ke+RBsRYnRyojK82GdbZDJsTlA6SHTQg25n3KeixfAZmyFvCpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkNvzcEex9IzpTT+E2NTlg8t4gVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2U5ZWRiMDUtMDBiNi0z M2ZiLWI5NjYtMjY5ZGQzMGFhNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMjkPZ8RhZoSSbnAGN1fz5XM0kwtwKBLnx5gwKN+IQyNd/qz1PWTAJcy TXJDXmQhiR1Xq6ARcw0GmOOO3RS8pR7R0XvInnlcIFynRrjdRZuNtxMrkWrG8VMB KWahTmSuBlXFluwVayZeqg5WNulYOMdkRKjrtUQcgmbhuDJ8EBfQ3t4mxPL1JHMY foEIsQBSIjnPQ/0A9AihZXv6kge1/oVU74Vik+2IBGHloQ1OQkcifSXM/KLPrwFo X/uoka+mbhq631ELFdF+nUUSqof+46O/DfUO8BybBRC8mJsisbMJiZFRCNXIeK2C Cy7bzK56WO8/DQO7s5KTqAEqJ83BFSY= -----END CERTIFICATE-----Generated at Sat Oct 10 22:10:05 2026 by rpki-client