$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ddb3b3b-2713-3a14-9565-77a5613ea7e1.roa File: 5ddb3b3b-2713-3a14-9565-77a5613ea7e1.roa (raw, json) Hash identifier: tZJKBg/+JAS7UCfs9gtIyPNppyQICl56Mk7X9chwKT0= Subject key identifier: E9:45:9E:54:2B:5F:F8:57:79:D8:69:E3:B6:EB:41:C5:62:1D:9D:4A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D7167D518959992882D126F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ddb3b3b-2713-3a14-9565-77a5613ea7e1.roa Signing time: Wed 08 Apr 2026 22:57:08 +0000 ROA not before: Wed 08 Apr 2026 22:57:08 +0000 ROA not after: Tue 07 Jul 2026 22:57:08 +0000 asID: 7029 IP address blocks: 209.101.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:67:d5:18:95:99:92:88:2d:12:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 8 22:57:08 2026 GMT Not After : Jul 7 22:57:08 2026 GMT Subject: CN=6e9f8bde-f92d-4c28-b765-c2b5b282bad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:67:38:a1:bf:9a:46:cc:94:ff:51:8f:bd: 10:24:1a:7e:99:b7:d1:b3:b3:5d:48:41:34:74:12: 63:92:20:fd:3d:3e:18:c9:92:1e:34:aa:73:74:1b: cb:ac:8c:2c:d7:25:07:8e:46:f3:03:6d:75:17:12: 9b:3a:01:38:c1:a5:b1:ce:2a:a0:8d:2d:3b:de:56: e5:cd:72:bf:00:2c:12:b6:9d:34:ad:ec:4a:14:98: cc:dc:eb:f2:67:8d:85:3a:30:6d:ab:f1:85:c8:97: 20:34:b2:f2:0e:25:f2:3e:77:38:39:ff:a4:99:9a: d6:eb:3d:34:23:57:17:61:0c:97:2b:a8:f6:94:08: 0d:2a:7d:4d:71:6a:16:d0:da:49:07:2e:27:d5:de: 48:6e:7a:39:24:4c:bf:ac:3b:2f:fc:bb:1f:df:ed: de:81:f2:db:f1:3d:64:98:22:cf:00:f2:e5:f8:d5: 44:8e:0d:ba:3a:ef:a4:34:a0:1b:71:85:26:4a:cb: 40:ff:19:6c:49:b5:e6:81:dc:c4:16:1f:5c:0a:e0: cd:93:42:5e:8a:27:38:71:45:a3:d2:87:de:54:dc: dd:21:11:21:1b:37:64:58:8e:a8:ff:b2:16:af:9f: b5:73:3e:36:31:f9:58:6c:f6:39:19:55:b1:56:f2: 6a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:45:9E:54:2B:5F:F8:57:79:D8:69:E3:B6:EB:41:C5:62:1D:9D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ddb3b3b-2713-3a14-9565-77a5613ea7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:37:0f:e2:c4:77:47:e1:c6:5a:dd:3c:1a:66:97:f9:62:bc: 2b:5d:2d:9d:4e:99:37:31:bc:86:ec:d8:98:79:45:8e:b2:01: f0:69:85:48:59:69:46:6c:a1:62:d3:6f:d1:1f:54:b7:ae:8f: a2:d3:ab:2c:15:6e:c0:5f:a6:ba:f9:e7:4e:d2:1e:28:23:d8: 44:69:54:61:d0:2c:89:34:39:98:b1:58:3b:0d:dc:23:c6:99: 8a:af:3c:12:0d:ad:ae:39:21:d0:0e:eb:ea:65:41:a0:ce:30: a8:34:b9:93:89:30:69:2c:79:ec:a5:1a:0d:0d:cb:fd:cc:34: 8b:37:e2:6f:25:49:6e:f4:01:30:b2:2b:ff:c4:a4:48:83:17: 1a:0a:a6:3c:e0:24:fd:d6:b4:d9:17:ca:33:75:38:16:dd:25: ca:3a:53:67:fb:45:4b:7d:70:22:30:f4:4b:9b:51:65:24:c4: 94:23:e3:56:ca:12:0f:b8:1a:2e:48:4b:3a:4b:79:c6:94:fd: 80:82:70:5c:65:7f:d4:bf:fa:25:c6:d6:1a:e7:78:98:81:29: b7:7e:41:8c:8f:bd:77:19:7f:54:85:76:8d:eb:b7:85:d3:eb: f2:66:fa:24:4e:fb:bd:41:97:02:71:47:5c:fe:8c:7f:1f:5c: 98:68:07:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xZ9UYlZmSiC0Sb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwODIyNTcwOFoXDTI2MDcwNzIyNTcwOFowLzEtMCsGA1UEAxMk NmU5ZjhiZGUtZjkyZC00YzI4LWI3NjUtYzJiNWIyODJiYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K5nOKG/mkbMlP9Rj70QJBp+mbfRs7NdSEE0 dBJjkiD9PT4YyZIeNKpzdBvLrIws1yUHjkbzA211FxKbOgE4waWxziqgjS073lbl zXK/ACwStp00rexKFJjM3OvyZ42FOjBtq/GFyJcgNLLyDiXyPnc4Of+kmZrW6z00 I1cXYQyXK6j2lAgNKn1NcWoW0NpJBy4n1d5Ibno5JEy/rDsv/Lsf3+3egfLb8T1k mCLPAPLl+NVEjg26Ou+kNKAbcYUmSstA/xlsSbXmgdzEFh9cCuDNk0Jeiic4cUWj 0ofeVNzdIREhGzdkWI6o/7IWr5+1cz42MflYbPY5GVWxVvJqHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlFnlQrX/hXedhp47brQcViHZ1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWRkYjNiM2ItMjcxMy0z YTE0LTk1NjUtNzdhNTYxM2VhN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK43D+LEd0fhxlrdPBpml/livCtdLZ1OmTcxvIbs2Jh5RY6yAfBphUhZ aUZsoWLTb9EfVLeuj6LTqywVbsBfprr5507SHigj2ERpVGHQLIk0OZixWDsN3CPG mYqvPBINra45IdAO6+plQaDOMKg0uZOJMGkseeylGg0Ny/3MNIs34m8lSW70ATCy K//EpEiDFxoKpjzgJP3WtNkXyjN1OBbdJco6U2f7RUt9cCIw9EubUWUkxJQj41bK Eg+4Gi5ISzpLecaU/YCCcFxlf9S/+iXG1hrneJiBKbd+QYyPvXcZf1SFdo3rt4XT 6/Jm+iRO+71BlwJxR1z+jH8fXJhoB5w= -----END CERTIFICATE-----Generated at Fri Apr 10 23:13:29 2026 by rpki-client