$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2f2d0804-c643-36bc-bff2-43fd33327470.roa File: 2f2d0804-c643-36bc-bff2-43fd33327470.roa (raw, json) Hash identifier: NRLI2UloXQF6wOHV/41HHUNmsdzu26xo1wTHd8/EnrI= Subject key identifier: AA:B8:7C:46:67:E3:96:CB:D2:44:C3:F7:1B:39:3D:BC:DC:01:0A:55 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DE150A6A0604922A7CBDBE8C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2f2d0804-c643-36bc-bff2-43fd33327470.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 5650 IP address blocks: 209.101.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:a6:a0:60:49:22:a7:cb:db:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=8a7a79b3-139c-4834-aa42-c85e37229541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:be:57:73:e7:c2:6d:95:6f:fc:0c:43:7c:be: ab:e9:9e:a1:a6:18:85:af:e4:34:aa:05:4d:33:fe: 59:bb:be:86:d1:cb:d9:1b:a2:d6:0b:c8:2f:06:f7: 60:da:e5:59:f5:59:3c:f5:92:28:0f:c0:33:74:65: be:af:af:94:1c:40:a6:ad:a4:cb:7a:e5:41:5c:12: 91:ee:1a:29:62:f7:08:76:bb:82:67:3b:41:a3:6d: 5a:b6:ef:af:7b:33:58:2d:9c:1e:16:f6:20:ed:e8: c9:2b:52:0c:ed:ca:35:ac:cd:59:46:7b:44:9e:c8: f6:09:0d:82:ac:26:5b:7f:3e:0a:de:41:e7:cc:cf: 66:7b:bd:ac:61:cf:3f:e4:63:82:b6:5e:01:17:e2: b9:69:f0:21:0b:9d:67:df:dc:d4:60:d3:5c:6b:b2: 4d:7d:45:ec:39:c1:c2:b2:b5:36:c1:b5:17:63:5e: d1:d8:f0:db:6f:5a:d1:09:50:f7:41:25:51:c7:2d: 39:3a:63:80:c9:58:f9:ca:8f:d2:41:ef:a9:d3:9b: a2:32:74:21:8c:50:d6:5a:3c:d9:d1:fd:98:20:20: aa:c4:80:e0:df:f6:e2:1f:31:ea:34:a5:63:72:c1: 49:5e:0b:19:bb:3a:38:ba:8f:6a:72:ad:18:1f:d8: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B8:7C:46:67:E3:96:CB:D2:44:C3:F7:1B:39:3D:BC:DC:01:0A:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2f2d0804-c643-36bc-bff2-43fd33327470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:56:5f:1e:f2:f9:9b:58:b2:ba:f1:af:ca:03:c5:78:d1:bf: 3f:5a:d6:9b:cd:fe:2b:74:7d:42:f2:4e:2b:d2:d7:d9:66:b8: b3:15:d0:d0:0c:74:d3:b1:6a:33:7d:ea:3f:da:3b:58:7b:c4: 09:88:ac:43:63:e6:57:44:25:f7:f8:7e:1b:03:5f:94:23:32: f0:43:a8:32:b0:88:bb:57:7e:e4:e5:00:48:33:5e:36:0b:be: c4:93:22:35:05:f5:55:b6:35:af:a1:fa:1d:1f:5b:aa:cb:8d: 58:00:98:cc:99:ae:c0:a0:de:19:a0:47:a8:ef:c8:c1:ae:5d: 87:1d:ca:3f:e0:43:fc:49:93:b6:36:28:2f:14:8a:59:5c:53: 86:df:fb:8b:f8:bc:51:2d:e5:fd:56:0f:3a:a9:f7:8d:de:ed: 44:ab:3d:36:80:a6:54:8a:37:15:33:72:ba:c6:28:54:b6:04: ab:77:f6:bd:91:46:da:2b:00:0e:db:b4:15:73:0a:bc:05:d9: 50:4d:29:ce:89:7c:ba:8f:d7:61:d3:38:36:3f:9a:b0:6d:a5: ab:a9:14:90:62:3c:dc:3b:87:8e:e8:8d:67:28:f1:81:10:13: cb:d5:b0:47:c5:ce:d0:d9:b1:e9:be:c9:11:a7:44:1a:25:aa: 70:2f:72:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKagYEkip8vb6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk OGE3YTc5YjMtMTM5Yy00ODM0LWFhNDItYzg1ZTM3MjI5NTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL5Xc+fCbZVv/AxDfL6r6Z6hphiFr+Q0qgVN M/5Zu76G0cvZG6LWC8gvBvdg2uVZ9Vk89ZIoD8AzdGW+r6+UHECmraTLeuVBXBKR 7hopYvcIdruCZztBo21atu+vezNYLZweFvYg7ejJK1IM7co1rM1ZRntEnsj2CQ2C rCZbfz4K3kHnzM9me72sYc8/5GOCtl4BF+K5afAhC51n39zUYNNca7JNfUXsOcHC srU2wbUXY17R2PDbb1rRCVD3QSVRxy05OmOAyVj5yo/SQe+p05uiMnQhjFDWWjzZ 0f2YICCqxIDg3/biHzHqNKVjcsFJXgsZuzo4uo9qcq0YH9jQwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKq4fEZn45bL0kTD9xs5PbzcAQpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmYyZDA4MDQtYzY0My0z NmJjLWJmZjItNDNmZDMzMzI3NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1WXx7y+ZtYsrrxr8oDxXjRvz9a1pvN/it0fULyTivS19lmuLMV0NAM dNOxajN96j/aO1h7xAmIrENj5ldEJff4fhsDX5QjMvBDqDKwiLtXfuTlAEgzXjYL vsSTIjUF9VW2Na+h+h0fW6rLjVgAmMyZrsCg3hmgR6jvyMGuXYcdyj/gQ/xJk7Y2 KC8UillcU4bf+4v4vFEt5f1WDzqp943e7USrPTaAplSKNxUzcrrGKFS2BKt39r2R RtorAA7btBVzCrwF2VBNKc6JfLqP12HTODY/mrBtpaupFJBiPNw7h47ojWco8YEQ E8vVsEfFztDZsem+yRGnRBolqnAvcrc= -----END CERTIFICATE-----Generated at Wed Jun 3 08:18:33 2026 by rpki-client