$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c2a2755-bbf5-380e-90a2-08aa182b0e2e.roa File: 6c2a2755-bbf5-380e-90a2-08aa182b0e2e.roa (raw, json) Hash identifier: SDi5cyk/71RT3s4N5bWnovCh05SQM2Li69ZRAkOGxrI= Subject key identifier: 48:BC:42:94:DE:0B:CE:C0:2D:3B:C9:E6:20:E0:8E:58:12:EE:02:A9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DEC7B3A11237CEF318A2C7180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c2a2755-bbf5-380e-90a2-08aa182b0e2e.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 2914 IP address blocks: 209.101.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:3a:11:23:7c:ef:31:8a:2c:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=62b2d560-b192-4345-b6c5-012893b2e4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:01:c9:ab:84:df:8d:0b:6a:de:47:68:a1: 40:05:74:1a:8b:7e:01:e5:f2:fe:37:85:dc:f6:5e: fb:89:62:a3:4d:56:4f:53:29:5c:82:7c:49:e5:ce: 2a:57:9e:22:2d:f7:c7:f9:30:d3:55:c1:04:de:01: 66:28:48:2c:cd:08:e1:9b:b6:c7:88:1e:b4:d5:63: 21:7d:78:04:f6:0e:f9:b3:5f:e8:4f:b4:87:16:8e: 17:7e:70:83:72:d5:a8:52:93:a0:65:18:c3:06:50: 45:fb:66:a6:33:45:37:1f:8f:94:0e:bf:a6:d5:44: ab:a3:88:fe:f3:00:8e:81:65:9f:9c:61:51:45:7b: 60:e9:3e:6d:98:e8:af:da:4f:2d:a3:14:ed:c5:20: 76:78:46:78:9c:97:ed:fd:c4:8d:c9:e0:5e:22:01: 89:02:e0:0b:52:d9:1a:a4:03:d3:4d:b0:d7:70:c2: 74:db:e3:5a:24:da:5b:27:03:d3:92:19:04:ef:db: b0:f0:d8:f9:98:80:8c:94:ed:4c:35:8e:d2:f3:60: 5d:12:ec:68:c0:5f:7d:d1:2e:87:9d:37:a3:78:62: 98:d6:16:72:09:d6:cb:fd:de:cb:3a:38:7a:4f:0e: 12:f6:d9:37:ba:86:19:b0:58:87:0a:cd:db:bd:0b: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BC:42:94:DE:0B:CE:C0:2D:3B:C9:E6:20:E0:8E:58:12:EE:02:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c2a2755-bbf5-380e-90a2-08aa182b0e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c4:c1:23:d5:16:8c:8b:6a:b4:45:7b:04:d7:60:79:4f:29: 0c:43:91:f7:16:ed:46:6e:d4:d7:61:c6:c9:ed:1e:25:66:c9: 2f:29:55:07:a6:f0:92:88:d5:90:a4:f7:f3:14:a5:b7:09:1a: b0:d8:f6:e4:f3:57:78:9e:b4:ce:98:df:e8:c0:da:36:3f:d5: bd:38:c3:d6:1f:91:f9:94:c2:a0:76:eb:03:ed:83:e4:c7:27: e8:e3:01:11:60:e2:77:18:02:72:d5:61:96:51:e9:1d:7b:ac: 90:6f:91:f5:26:16:86:ca:d4:68:09:21:56:bc:b8:7c:32:a9: 95:de:74:02:29:4c:d4:92:eb:22:c9:d1:e2:3c:09:e6:6d:17: b9:13:0c:e2:e5:49:ce:a1:a6:15:b7:f7:cb:8f:30:8a:f5:c5: 4a:ad:8e:f3:25:a1:27:e8:a4:ca:18:ad:8f:28:5b:bb:74:ef: 28:63:b8:5b:0d:6c:a3:63:6e:82:c3:a0:3e:c1:b5:8a:32:77: 67:4d:1b:81:ca:70:14:3e:9d:0c:bb:1e:00:df:e8:66:d0:68: 83:56:4e:02:66:26:0c:23:a3:8d:89:71:e8:43:67:bd:89:3c: 64:25:c6:ac:a0:08:a3:88:f3:9a:fe:81:35:45:31:e9:37:71: 27:ed:70:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3sezoRI3zvMYoscYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk NjJiMmQ1NjAtYjE5Mi00MzQ1LWI2YzUtMDEyODkzYjJlNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN8ByauE340Lat5HaKFABXQai34B5fL+N4Xc 9l77iWKjTVZPUylcgnxJ5c4qV54iLffH+TDTVcEE3gFmKEgszQjhm7bHiB601WMh fXgE9g75s1/oT7SHFo4XfnCDctWoUpOgZRjDBlBF+2amM0U3H4+UDr+m1USro4j+ 8wCOgWWfnGFRRXtg6T5tmOiv2k8toxTtxSB2eEZ4nJft/cSNyeBeIgGJAuALUtka pAPTTbDXcMJ02+NaJNpbJwPTkhkE79uw8Nj5mICMlO1MNY7S82BdEuxowF990S6H nTejeGKY1hZyCdbL/d7LOjh6Tw4S9tk3uoYZsFiHCs3bvQv1mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi8QpTeC87ALTvJ5iDgjlgS7gKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNmMyYTI3NTUtYmJmNS0z ODBlLTkwYTItMDhhYTE4MmIwZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbEwSPVFoyLarRFewTXYHlPKQxDkfcW7UZu1NdhxsntHiVmyS8pVQem 8JKI1ZCk9/MUpbcJGrDY9uTzV3ietM6Y3+jA2jY/1b04w9YfkfmUwqB26wPtg+TH J+jjARFg4ncYAnLVYZZR6R17rJBvkfUmFobK1GgJIVa8uHwyqZXedAIpTNSS6yLJ 0eI8CeZtF7kTDOLlSc6hphW398uPMIr1xUqtjvMloSfopMoYrY8oW7t07yhjuFsN bKNjboLDoD7BtYoyd2dNG4HKcBQ+nQy7HgDf6GbQaINWTgJmJgwjo42JcehDZ72J PGQlxqygCKOI85r+gTVFMek3cSftcEk= -----END CERTIFICATE-----Generated at Sat May 23 17:49:51 2026 by rpki-client