$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e54135f-3b14-3669-874f-37947287f569.roa File: 4e54135f-3b14-3669-874f-37947287f569.roa (raw, json) Hash identifier: M2BQkH8dEGHdiH9MnroxZhKydKvUX2lXKOvkFwtd1F8= Subject key identifier: 38:A7:E2:C6:77:8F:2F:AD:B0:BA:E3:11:A5:31:19:ED:18:78:38:5F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DAF101AD200C02D11FB8BE180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e54135f-3b14-3669-874f-37947287f569.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 212238 IP address blocks: 209.101.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:1a:d2:00:c0:2d:11:fb:8b:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=dd6b8ef1-ab8b-4e53-842e-f348180db236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:38:a1:0a:4e:06:26:39:fe:94:52:5d:fd:48: 8b:c2:02:d6:b4:b0:55:7a:af:90:6d:c9:be:37:fb: 0e:61:94:69:a1:25:b6:5d:fb:e0:0e:6b:8f:df:04: 0a:a8:61:49:a6:38:64:f4:14:cd:14:36:8c:f2:2f: 2d:d6:cf:ed:3e:c3:0b:43:0b:01:2b:8e:8f:87:d5: cd:1d:76:e3:75:f4:b8:00:8c:19:19:24:f4:fa:d3: 82:90:72:ae:67:98:05:12:0b:27:f9:f1:1d:24:a1: 92:47:47:17:85:27:8f:5e:f1:6e:2c:27:74:6d:ce: 86:85:c2:93:19:52:eb:1f:b5:82:5c:94:48:c1:7f: ec:e4:6e:c1:77:31:e2:9f:68:93:78:75:c2:a6:19: 47:ac:fe:3b:4a:8b:cb:bd:a3:9a:c2:87:78:af:ce: 45:81:bc:f9:1b:b3:04:a9:c8:80:87:46:ca:d1:3c: 5d:d7:fc:80:1b:29:48:3f:14:78:e5:9a:64:87:4a: 10:8e:de:ef:37:c9:ec:19:d6:a9:d3:5a:a4:ee:d5: 27:db:ab:39:ac:39:af:39:2c:60:35:8f:f7:70:69: 5e:5f:76:7d:71:cd:12:f7:44:51:01:74:03:1a:9d: a3:e8:25:91:46:1e:8b:d5:2c:8d:b9:5d:e4:5f:9f: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A7:E2:C6:77:8F:2F:AD:B0:BA:E3:11:A5:31:19:ED:18:78:38:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e54135f-3b14-3669-874f-37947287f569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:84:c9:b0:02:ea:0a:13:8e:ab:0f:54:1f:8a:98:fb:96:9a: 77:3b:f9:3f:f4:48:b2:2a:43:d3:85:8d:d9:e2:8f:63:4a:23: 04:b7:5c:91:eb:8b:f0:3b:e8:34:70:65:7f:73:d0:23:50:7f: 0b:b5:ff:23:d6:06:81:54:b7:a3:2d:b2:ca:36:e1:e2:09:df: 3c:a2:fb:eb:ce:55:e1:81:50:76:22:47:35:13:3b:b8:bf:22: 97:b3:3b:84:8a:4f:52:5a:0d:f6:9f:b7:94:2d:0f:e6:d5:7c: 98:44:30:23:ee:ba:24:2a:07:2d:e8:1a:90:99:11:21:0e:b4: 26:01:2d:01:fd:71:5c:fa:6b:ab:77:c0:3b:04:14:5e:60:46: 3b:66:d6:23:31:17:72:20:6d:10:fa:70:d5:c6:80:d6:ea:46: cd:cf:3a:6e:f5:95:9a:26:aa:14:42:16:f5:9a:54:5e:32:f4: 9e:7e:db:92:cb:bf:ae:ec:e0:73:2d:63:80:96:12:65:f1:f5: c8:fd:bc:8a:78:c1:0d:ef:8c:2f:b5:17:fe:69:58:cb:59:4b: 01:65:9b:97:63:09:1c:2c:a3:d1:bd:17:2c:9a:e3:35:c3:0b: 8d:af:43:b4:7a:e5:2a:18:ea:18:fb:3a:a5:eb:e0:f7:cd:47: 30:2a:28:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEBrSAMAtEfuL4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk ZGQ2YjhlZjEtYWI4Yi00ZTUzLTg0MmUtZjM0ODE4MGRiMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDihCk4GJjn+lFJd/UiLwgLWtLBVeq+Qbcm+ N/sOYZRpoSW2XfvgDmuP3wQKqGFJpjhk9BTNFDaM8i8t1s/tPsMLQwsBK46Ph9XN HXbjdfS4AIwZGST0+tOCkHKuZ5gFEgsn+fEdJKGSR0cXhSePXvFuLCd0bc6GhcKT GVLrH7WCXJRIwX/s5G7BdzHin2iTeHXCphlHrP47SovLvaOawod4r85Fgbz5G7ME qciAh0bK0Txd1/yAGylIPxR45Zpkh0oQjt7vN8nsGdap01qk7tUn26s5rDmvOSxg NY/3cGleX3Z9cc0S90RRAXQDGp2j6CWRRh6L1SyNuV3kX58+3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDin4sZ3jy+tsLrjEaUxGe0YeDhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGU1NDEzNWYtM2IxNC0z NjY5LTg3NGYtMzc5NDcyODdmNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WWWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWEybAC6goTjqsPVB+KmPuWmnc7+T/0SLIqQ9OFjdnij2NKIwS3XJHr i/A76DRwZX9z0CNQfwu1/yPWBoFUt6Mtsso24eIJ3zyi++vOVeGBUHYiRzUTO7i/ IpezO4SKT1JaDfaft5QtD+bVfJhEMCPuuiQqBy3oGpCZESEOtCYBLQH9cVz6a6t3 wDsEFF5gRjtm1iMxF3IgbRD6cNXGgNbqRs3POm71lZomqhRCFvWaVF4y9J5+25LL v67s4HMtY4CWEmXx9cj9vIp4wQ3vjC+1F/5pWMtZSwFlm5djCRwso9G9Fyya4zXD C42vQ7R65SoY6hj7OqXr4PfNRzAqKCA= -----END CERTIFICATE-----Generated at Tue May 5 23:20:44 2026 by rpki-client