$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3dd11a13-1cce-30be-96e9-71ede70d4fd9.roa File: 3dd11a13-1cce-30be-96e9-71ede70d4fd9.roa (raw, json) Hash identifier: iJRFtntSXel+jM0ZoQgLmVst96Ow2nA0yeRFhTi9/7E= Subject key identifier: 35:54:7D:AA:4F:FB:2D:F0:B8:80:A4:A6:06:88:7C:DF:0D:76:1E:12 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D6C0FD9CC19D8A5310906C820 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3dd11a13-1cce-30be-96e9-71ede70d4fd9.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 2856 IP address blocks: 209.101.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:d9:cc:19:d8:a5:31:09:06:c8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=6131a4df-e291-4a91-b170-5ba6536af528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:80:e9:a8:14:b7:6c:26:f8:6a:3a:27:9f: 5f:27:43:3f:00:fe:57:d1:0f:6d:15:53:8b:89:2e: 20:f0:b7:f6:9b:39:6d:97:4d:ad:e3:1e:f6:e9:dd: 72:8e:d9:18:c8:6a:08:b1:db:6c:9d:ba:67:8a:d3: db:78:e4:c2:cf:8b:d7:4e:66:8d:45:5d:9b:e9:47: 44:fa:7c:8a:da:cd:dd:7e:82:4a:56:f9:c4:c8:e0: 65:c0:50:c6:12:c3:54:40:8f:ad:57:a1:0c:a3:0c: 32:9d:5a:a1:b6:41:c5:6a:ae:9d:68:a9:0e:35:bc: 1c:90:dc:77:d7:8c:f1:3a:4f:7a:33:ee:b7:9c:8b: 30:41:2d:5d:59:e6:cd:06:e5:bb:83:06:7a:31:4b: e6:95:09:3d:23:93:7b:82:e9:78:66:74:36:d6:c6: 3a:d1:60:91:24:4a:a7:cf:e8:de:0f:60:70:d0:a7: 8a:1d:18:37:41:34:4e:52:a3:c9:93:46:ba:e8:72: 61:cc:f4:d5:d4:8f:0e:f6:63:a9:a9:f2:94:f7:f2: 54:0f:03:10:4e:82:84:99:e8:9f:12:6a:74:9a:61: 4f:9b:0c:ca:1c:c3:07:73:fc:46:23:8b:46:9e:f9: 89:0c:30:89:c2:1e:27:ec:d4:b1:87:00:bd:cd:cd: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:54:7D:AA:4F:FB:2D:F0:B8:80:A4:A6:06:88:7C:DF:0D:76:1E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3dd11a13-1cce-30be-96e9-71ede70d4fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:66:23:aa:df:e8:b0:b2:67:90:60:1f:a7:2a:7e:52:9b:04: 6b:cb:cf:ec:3f:db:2f:19:73:6e:04:03:46:b7:48:09:8b:95: 5f:19:f5:37:1a:75:a3:73:3a:62:18:03:3e:f6:06:ca:97:42: eb:7b:74:5e:4a:8e:5c:50:6f:b6:18:b2:0a:78:35:d8:d7:cb: 73:1b:2c:83:96:64:20:e1:61:3c:62:f6:60:a1:95:5d:16:0e: b8:2d:cb:3a:c5:d8:54:ac:c2:85:5b:99:62:f9:b4:76:6c:19: 77:75:b6:e2:4a:6d:01:8a:d9:d5:a2:24:20:b5:6a:5a:88:6c: 5a:e0:33:c4:7a:af:2e:e8:bc:3a:27:f6:35:2a:94:e0:1f:18: 53:3f:9b:8e:64:ca:05:71:ae:e9:a7:3d:f1:d3:4a:cf:71:93: b2:31:e8:73:ab:9c:3d:06:32:6b:de:f2:0d:22:35:64:d4:63: 1d:2e:85:df:e4:04:3d:07:8c:0c:89:1f:fc:0d:85:ec:e3:82: e2:5c:35:25:b0:2f:d4:1c:d4:c0:ee:f7:11:c6:d9:22:94:36: 24:3a:fd:8a:6c:f8:98:81:65:a5:89:6f:dd:d7:73:22:d5:51: 40:b6:0e:a1:04:bf:f2:dc:42:37:53:6b:44:a8:a7:3f:40:97: 99:bb:1b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9nMGdilMQkGyCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NjEzMWE0ZGYtZTI5MS00YTkxLWIxNzAtNWJhNjUzNmFmNTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpWA6agUt2wm+Go6J59fJ0M/AP5X0Q9tFVOL iS4g8Lf2mzltl02t4x726d1yjtkYyGoIsdtsnbpnitPbeOTCz4vXTmaNRV2b6UdE +nyK2s3dfoJKVvnEyOBlwFDGEsNUQI+tV6EMowwynVqhtkHFaq6daKkONbwckNx3 14zxOk96M+63nIswQS1dWebNBuW7gwZ6MUvmlQk9I5N7gul4ZnQ21sY60WCRJEqn z+jeD2Bw0KeKHRg3QTROUqPJk0a66HJhzPTV1I8O9mOpqfKU9/JUDwMQToKEmeif Emp0mmFPmwzKHMMHc/xGI4tGnvmJDDCJwh4n7NSxhwC9zc3HVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVUfapP+y3wuICkpgaIfN8Ndh4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2RkMTFhMTMtMWNjZS0z MGJlLTk2ZTktNzFlZGU3MGQ0ZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRmI6rf6LCyZ5BgH6cqflKbBGvLz+w/2y8Zc24EA0a3SAmLlV8Z9Tca daNzOmIYAz72BsqXQut7dF5KjlxQb7YYsgp4NdjXy3MbLIOWZCDhYTxi9mChlV0W DrgtyzrF2FSswoVbmWL5tHZsGXd1tuJKbQGK2dWiJCC1alqIbFrgM8R6ry7ovDon 9jUqlOAfGFM/m45kygVxrumnPfHTSs9xk7Ix6HOrnD0GMmve8g0iNWTUYx0uhd/k BD0HjAyJH/wNhezjguJcNSWwL9Qc1MDu9xHG2SKUNiQ6/Yps+JiBZaWJb93XcyLV UUC2DqEEv/LcQjdTa0Sopz9Al5m7G/A= -----END CERTIFICATE-----Generated at Fri Apr 10 23:16:55 2026 by rpki-client