$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91a68c0f-9d7f-3f5b-b9c5-75b77f94e9e5.roa File: 91a68c0f-9d7f-3f5b-b9c5-75b77f94e9e5.roa (raw, json) Hash identifier: CYmmX6BxeJFpEoHGoMl4eKnrYqSUtNNXb03x8fRUlxo= Subject key identifier: 28:BA:C4:6B:CC:FB:EE:45:29:B9:B6:BF:FF:57:23:6C:60:C5:A1:03 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D67DFB2404FE7B25237705E00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91a68c0f-9d7f-3f5b-b9c5-75b77f94e9e5.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 834 IP address blocks: 209.101.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:b2:40:4f:e7:b2:52:37:70:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=7574111f-6dfd-464a-81fb-035e6366e35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:09:4a:d6:2e:16:fa:3f:f7:7e:3d:a6:4a:07: 5d:4d:83:09:ac:4d:9a:a1:ae:44:72:8e:8e:01:90: 05:f5:01:2f:90:49:62:de:73:30:59:e1:a1:99:0d: f4:f0:f5:95:6f:84:9d:c4:1a:78:3a:92:2f:02:f9: 77:e5:30:cb:b2:03:b3:35:a8:03:9b:10:c5:53:ef: 3b:ab:fb:1c:77:90:66:22:0f:18:b1:6f:53:2c:3d: 01:fe:9c:e6:12:92:b1:bf:64:98:3d:3e:e5:47:8a: 22:4b:12:bc:16:2b:2d:1e:6e:b7:ba:01:ee:71:37: 5d:d2:07:ee:b4:5e:9b:16:1f:be:67:11:1a:e4:31: 6b:1f:ca:e4:6f:a5:69:94:03:05:ac:03:59:69:97: 0c:d4:20:ce:73:c5:ff:eb:bf:5a:d3:21:5d:8c:51: c3:75:70:39:dc:4e:e3:be:d9:1b:97:87:ad:2a:34: e0:67:13:27:d2:dd:a0:31:1b:84:56:84:30:7b:c1: a8:83:2a:da:a2:5d:b0:0b:e3:5f:97:7b:8a:17:b8: e1:d2:c8:25:0d:1b:95:64:6d:55:59:ab:31:ff:52: d4:13:6d:2d:9b:84:05:d0:ca:39:fe:b7:6b:83:9e: 4d:c0:c0:62:d6:60:74:9d:ed:bc:ce:58:d2:19:b1: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BA:C4:6B:CC:FB:EE:45:29:B9:B6:BF:FF:57:23:6C:60:C5:A1:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91a68c0f-9d7f-3f5b-b9c5-75b77f94e9e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:d2:8d:93:55:7d:3d:73:d9:8f:c9:8f:c6:58:22:ea:b0:c0: 3e:7e:06:3c:50:55:4a:8f:34:c8:cc:87:7b:9b:5c:b9:a6:40: 52:cb:53:e6:be:ed:f7:5b:a1:a2:e2:4f:7e:84:86:33:4c:bd: 7e:29:0b:49:03:c3:a0:cb:29:f4:bd:67:85:15:e0:cd:33:ad: ac:d4:06:b3:45:5c:b7:52:e9:61:80:30:40:80:b4:da:5a:8a: 4f:96:03:b3:45:a1:63:83:2e:6b:ef:a3:41:08:20:e1:ea:e9: 7a:b7:3f:88:5b:5f:d7:1c:c6:9d:96:f9:5f:d2:38:6c:d9:44: 43:9f:fd:d6:fb:18:98:82:f7:95:f4:e4:12:66:f2:06:ac:29: be:79:18:1d:15:e8:cc:d5:a0:fd:4d:ed:da:2c:70:ef:c2:3c: 11:00:7b:22:b6:f4:a9:2d:e0:6f:30:7f:12:1f:63:74:b4:59: 2c:59:c4:e7:a1:0f:38:db:ee:9b:07:b4:d7:41:a7:a8:f0:2c: 74:5f:71:a7:95:51:e8:22:da:88:df:16:fb:bf:c2:94:01:3b: 9f:40:db:ac:06:7f:a8:be:49:ce:b3:ee:80:d7:24:5c:fb:c3: de:ba:98:6e:ae:60:66:da:e8:36:7f:fc:9a:6c:45:5f:e3:d2: 4b:c1:01:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37JAT+eyUjdwXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NzU3NDExMWYtNmRmZC00NjRhLTgxZmItMDM1ZTYzNjZlMzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQlK1i4W+j/3fj2mSgddTYMJrE2aoa5Eco6O AZAF9QEvkEli3nMwWeGhmQ308PWVb4SdxBp4OpIvAvl35TDLsgOzNagDmxDFU+87 q/scd5BmIg8YsW9TLD0B/pzmEpKxv2SYPT7lR4oiSxK8FistHm63ugHucTdd0gfu tF6bFh++ZxEa5DFrH8rkb6VplAMFrANZaZcM1CDOc8X/679a0yFdjFHDdXA53E7j vtkbl4etKjTgZxMn0t2gMRuEVoQwe8Gogyraol2wC+Nfl3uKF7jh0sglDRuVZG1V Wasx/1LUE20tm4QF0Mo5/rdrg55NwMBi1mB0ne28zljSGbFezwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi6xGvM++5FKbm2v/9XI2xgxaEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTFhNjhjMGYtOWQ3Zi0z ZjViLWI5YzUtNzViNzdmOTRlOWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDSjZNVfT1z2Y/Jj8ZYIuqwwD5+BjxQVUqPNMjMh3ubXLmmQFLLU+a+ 7fdboaLiT36EhjNMvX4pC0kDw6DLKfS9Z4UV4M0zrazUBrNFXLdS6WGAMECAtNpa ik+WA7NFoWODLmvvo0EIIOHq6Xq3P4hbX9ccxp2W+V/SOGzZREOf/db7GJiC95X0 5BJm8gasKb55GB0V6MzVoP1N7doscO/CPBEAeyK29Kkt4G8wfxIfY3S0WSxZxOeh Dzjb7psHtNdBp6jwLHRfcaeVUegi2ojfFvu/wpQBO59A26wGf6i+Sc6z7oDXJFz7 w966mG6uYGba6DZ//JpsRV/j0kvBAZE= -----END CERTIFICATE-----Generated at Fri Apr 10 23:15:16 2026 by rpki-client