$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d20837e4-2123-3a2c-a073-954fe4563a09.roa File: d20837e4-2123-3a2c-a073-954fe4563a09.roa (raw, json) Hash identifier: SzYFWzkfcXFgIShyJ+ZORtn0kZjgte6MH5AgGeli2FM= Subject key identifier: 3D:1F:7B:20:90:16:88:40:58:08:C6:E3:E0:C4:A5:B5:8D:E4:B7:9C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F7088257B93E6585A3DAA2300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d20837e4-2123-3a2c-a073-954fe4563a09.roa Signing time: Fri 09 Oct 2026 01:00:12 +0000 ROA not before: Fri 09 Oct 2026 01:00:12 +0000 ROA not after: Thu 07 Jan 2027 02:00:12 +0000 asID: 54690 IP address blocks: 207.145.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:88:25:7b:93:e6:58:5a:3d:aa:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 01:00:12 2026 GMT Not After : Jan 7 02:00:12 2027 GMT Subject: CN=7267f148-2f1e-4961-b4bc-721545cd5be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:63:94:5d:ec:0f:9d:e5:da:aa:2e:9b:eb: 63:02:da:39:6a:31:05:c8:16:78:6a:e6:2c:83:a4: 4c:6f:2d:57:36:46:7d:d9:8d:c7:e0:f3:52:91:39: fc:f4:f5:a7:b5:a0:b3:89:76:72:ff:2a:a0:bf:90: 57:01:80:cc:8c:e9:05:93:66:e8:62:34:53:5a:f7: 7b:c6:4b:9a:7d:cb:0e:af:47:bf:bb:0b:a8:f2:8b: 8e:e0:69:9d:25:82:14:a0:d8:fa:bf:65:3f:8c:b9: 35:a4:c6:f6:af:1e:49:8b:45:61:b3:cd:89:90:44: 9e:84:47:b6:5a:db:68:35:8a:6b:2a:8b:d1:2a:01: 30:6a:62:da:1e:e0:61:8d:ce:e4:e9:5a:90:35:a2: 56:99:47:e0:d0:95:93:c8:54:61:ca:14:37:60:df: fb:ca:3a:ed:91:e9:f7:e9:a7:32:8d:44:e0:08:ed: b7:63:73:d5:12:21:84:94:d7:b5:56:88:65:0e:d9: 61:d5:fa:01:51:d8:c1:13:1e:ba:a3:4e:54:4a:9f: 51:b4:ab:12:39:8a:1a:1c:6d:bc:61:2e:7e:65:16: b4:92:e4:f3:66:24:f2:0f:1d:e1:c0:5d:f7:47:30: e4:06:d6:89:ad:20:95:33:00:62:82:e9:57:4d:7d: 9f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1F:7B:20:90:16:88:40:58:08:C6:E3:E0:C4:A5:B5:8D:E4:B7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d20837e4-2123-3a2c-a073-954fe4563a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 207.145.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:90:fb:fe:e2:de:90:3d:33:44:7f:8e:b8:92:d4:21:3a:46: 52:a6:d1:a0:89:3f:bb:3c:34:0a:97:5b:f1:c8:df:da:be:05: c5:d2:be:91:ac:7f:89:37:73:d4:74:51:49:c7:08:bc:b8:48: 22:92:68:67:ce:91:a1:70:43:09:68:13:29:3e:44:08:5e:04: dd:95:7a:18:0a:c2:91:e0:55:cb:78:ef:08:d8:6d:01:81:a8: d3:91:31:8f:15:b5:c4:65:34:c1:1d:ee:f2:e7:26:30:31:66: 0b:42:6b:d3:db:df:1d:c6:3d:6b:78:62:ea:9d:a9:be:d6:c8: 02:5b:fb:81:e6:9b:96:40:1a:cd:92:5c:73:c3:e8:76:43:e1: f5:ae:9c:3f:26:55:fe:0d:54:f4:45:73:95:99:17:ca:e5:70: 22:60:eb:77:54:77:d8:45:17:37:aa:90:50:5f:1b:57:8d:12: e5:03:bf:a7:40:d0:32:7d:8f:e1:f3:88:cc:f5:2b:e7:20:79: 35:18:54:ef:2c:18:3c:56:55:9d:23:cb:dd:e1:43:a1:e0:61: 29:99:bb:23:64:32:a2:b8:3c:f5:62:81:a4:36:ec:90:89:de: 2f:40:04:f5:a8:ee:c3:33:ee:a6:40:83:a9:79:1d:a0:84:79: 99:8f:28:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wiCV7k+ZYWj2qIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk NzI2N2YxNDgtMmYxZS00OTYxLWI0YmMtNzIxNTQ1Y2Q1YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8VjlF3sD53l2qoum+tjAto5ajEFyBZ4auYs g6RMby1XNkZ92Y3H4PNSkTn89PWntaCziXZy/yqgv5BXAYDMjOkFk2boYjRTWvd7 xkuafcsOr0e/uwuo8ouO4GmdJYIUoNj6v2U/jLk1pMb2rx5Ji0Vhs82JkESehEe2 WttoNYprKovRKgEwamLaHuBhjc7k6VqQNaJWmUfg0JWTyFRhyhQ3YN/7yjrtken3 6acyjUTgCO23Y3PVEiGElNe1VohlDtlh1foBUdjBEx66o05USp9RtKsSOYoaHG28 YS5+ZRa0kuTzZiTyDx3hwF33RzDkBtaJrSCVMwBigulXTX2fiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0feyCQFohAWAjG4+DEpbWN5LecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDIwODM3ZTQtMjEyMy0z YTJjLWEwNzMtOTU0ZmU0NTYzYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz5FmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOQ+/7i3pA9M0R/jriS1CE6RlKm0aCJP7s8NAqXW/HI39q+BcXSvpGs f4k3c9R0UUnHCLy4SCKSaGfOkaFwQwloEyk+RAheBN2VehgKwpHgVct47wjYbQGB qNORMY8VtcRlNMEd7vLnJjAxZgtCa9Pb3x3GPWt4Yuqdqb7WyAJb+4Hmm5ZAGs2S XHPD6HZD4fWunD8mVf4NVPRFc5WZF8rlcCJg63dUd9hFFzeqkFBfG1eNEuUDv6dA 0DJ9j+HziMz1K+cgeTUYVO8sGDxWVZ0jy93hQ6HgYSmZuyNkMqK4PPVigaQ27JCJ 3i9ABPWo7sMz7qZAg6l5HaCEeZmPKAs= -----END CERTIFICATE-----Generated at Sun Oct 11 10:00:07 2026 by rpki-client