$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2ca5f3ad-2231-3457-bd4b-59716840d59d.roa File: 2ca5f3ad-2231-3457-bd4b-59716840d59d.roa (raw, json) Hash identifier: buLPxSGoSVnefArek8o/MfJcBbaRoniALRaYITA4zs0= Subject key identifier: 59:0B:50:4F:E8:74:FD:68:E5:31:ED:6B:FB:B0:FD:03:A1:18:9D:15 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5F2063C34DFD52475BB03B38 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2ca5f3ad-2231-3457-bd4b-59716840d59d.roa Signing time: Thu 02 Apr 2026 09:48:38 +0000 ROA not before: Thu 02 Apr 2026 09:48:38 +0000 ROA not after: Wed 01 Jul 2026 09:48:38 +0000 asID: 64267 IP address blocks: 209.101.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:20:63:c3:4d:fd:52:47:5b:b0:3b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 2 09:48:38 2026 GMT Not After : Jul 1 09:48:38 2026 GMT Subject: CN=dd2d871d-6f51-4849-95ba-fc5217b01686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:23:68:bf:b6:dc:a1:3e:3b:f5:3d:55:10:83: d8:72:aa:c5:e0:72:09:8d:bd:53:ae:34:a4:f9:b5: 69:61:02:b2:64:d6:e6:33:44:99:44:ed:0e:b0:26: e3:04:2e:88:9e:84:af:9c:8c:e0:ab:9b:a6:a3:e7: 07:e7:08:f5:ea:3e:d7:02:26:8f:9d:12:3f:27:2a: 18:6a:ff:56:87:ea:92:af:3b:24:b7:67:39:91:c6: d0:2e:6b:e3:dd:c8:b5:f0:a8:d0:92:ab:41:e3:23: b6:d0:cc:ec:3a:02:a0:56:39:d1:68:98:9a:01:38: fc:65:b5:7d:22:f1:ad:80:51:dc:29:32:6b:c9:bd: 29:89:9f:5f:d4:c8:92:3f:3f:2e:19:7b:5e:fc:08: 4c:52:09:ca:c2:d3:9e:b6:a7:38:93:2a:2c:25:97: c5:31:7f:41:50:73:6d:7c:32:9b:f0:cb:e8:24:01: 24:6f:f2:30:9f:23:58:eb:4b:86:b5:e6:97:1f:dc: dc:07:c8:20:19:75:5c:ed:d1:af:24:04:4d:2a:5f: 47:72:ca:6c:d6:70:df:f3:a2:dd:bc:f3:02:b5:68: 9b:5a:95:ce:aa:59:e9:66:7d:76:d4:38:11:b7:e3: 79:12:8d:e7:18:ba:f8:a8:f5:5d:1a:05:ee:f1:9b: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0B:50:4F:E8:74:FD:68:E5:31:ED:6B:FB:B0:FD:03:A1:18:9D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2ca5f3ad-2231-3457-bd4b-59716840d59d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bc:43:d7:31:64:9c:05:db:13:5a:18:e8:55:0a:30:44:1d: 85:19:f9:de:c8:4b:34:6b:b5:a0:7e:d9:1d:77:27:af:0b:49: 6c:ca:e5:5a:64:8b:36:a0:a5:c8:de:fb:3c:03:7a:20:2f:31: e8:36:f8:97:16:29:a7:fb:77:83:de:e3:5c:28:72:29:59:1e: 93:f9:4f:f3:20:3a:03:89:8d:c1:40:b4:d5:98:c4:6c:90:6e: b2:35:2a:41:53:55:07:53:b3:4e:84:72:4c:98:0b:80:18:48: 64:36:a2:f3:55:08:d2:9a:d6:02:93:3e:6c:78:dd:f3:2e:0c: 1b:93:94:f8:8b:a3:4a:96:4f:10:cc:ef:45:2e:b3:7d:67:3b: 0d:0a:95:32:94:dd:09:3a:60:c8:cf:a0:ae:8f:3a:e0:10:6e: f8:1a:e1:09:32:6b:aa:1b:d2:d9:e0:2e:02:be:9e:6b:40:37: 69:61:68:60:f1:11:c1:d6:62:f6:29:f3:f9:a4:69:1a:82:87: f6:bd:12:ab:ea:04:6b:36:e4:8b:ba:ac:e0:84:56:ee:5f:bc: 11:92:99:63:28:8d:40:f7:42:48:f2:da:7f:1e:6a:2f:75:86: 95:8f:58:ac:6d:60:f7:f8:e8:40:5f:95:1c:ba:bd:1b:04:69: bc:1c:dc:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fIGPDTf1SR1uwOzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwMjA5NDgzOFoXDTI2MDcwMTA5NDgzOFowLzEtMCsGA1UEAxMk ZGQyZDg3MWQtNmY1MS00ODQ5LTk1YmEtZmM1MjE3YjAxNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyNov7bcoT479T1VEIPYcqrF4HIJjb1TrjSk +bVpYQKyZNbmM0SZRO0OsCbjBC6InoSvnIzgq5umo+cH5wj16j7XAiaPnRI/JyoY av9Wh+qSrzskt2c5kcbQLmvj3ci18KjQkqtB4yO20MzsOgKgVjnRaJiaATj8ZbV9 IvGtgFHcKTJryb0piZ9f1MiSPz8uGXte/AhMUgnKwtOetqc4kyosJZfFMX9BUHNt fDKb8MvoJAEkb/IwnyNY60uGteaXH9zcB8ggGXVc7dGvJARNKl9Hcsps1nDf86Ld vPMCtWibWpXOqlnpZn121DgRt+N5Eo3nGLr4qPVdGgXu8ZsmpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkLUE/odP1o5THta/uw/QOhGJ0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmNhNWYzYWQtMjIzMS0z NDU3LWJkNGItNTk3MTY4NDBkNTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+8Q9cxZJwF2xNaGOhVCjBEHYUZ+d7ISzRrtaB+2R13J68LSWzK5Vpk izagpcje+zwDeiAvMeg2+JcWKaf7d4Pe41wocilZHpP5T/MgOgOJjcFAtNWYxGyQ brI1KkFTVQdTs06EckyYC4AYSGQ2ovNVCNKa1gKTPmx43fMuDBuTlPiLo0qWTxDM 70Uus31nOw0KlTKU3Qk6YMjPoK6POuAQbvga4Qkya6ob0tngLgK+nmtAN2lhaGDx EcHWYvYp8/mkaRqCh/a9EqvqBGs25Iu6rOCEVu5fvBGSmWMojUD3Qkjy2n8eai91 hpWPWKxtYPf46EBflRy6vRsEabwc3Gc= -----END CERTIFICATE-----Generated at Fri Apr 10 23:14:07 2026 by rpki-client