$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b65b89f1-96b1-3ddd-8772-63484052b2b9.roa File: b65b89f1-96b1-3ddd-8772-63484052b2b9.roa (raw, json) Hash identifier: 3+1dqdQviRRKhn5o/LgjfPNwDdwWTqwern04bKgNSpw= Subject key identifier: 72:B4:99:C8:D2:00:52:57:F0:5E:15:DC:00:7B:6C:35:7D:3C:51:5B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DEC7B234E9A77E7514F7615E0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b65b89f1-96b1-3ddd-8772-63484052b2b9.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 400031 IP address blocks: 209.101.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:23:4e:9a:77:e7:51:4f:76:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=15a4f679-b6b5-4757-bed4-aa519be1a13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2c:ba:75:53:18:26:26:45:15:79:0a:5c:36: 2d:60:a8:0e:53:d6:f6:b8:f9:58:a1:47:eb:cf:c4: 02:a8:e3:1f:4d:b3:25:13:b4:c2:2f:f3:00:b2:91: cf:49:59:b4:0f:8b:34:ef:32:42:5b:cf:1d:fd:a6: 7d:47:56:cb:9d:21:c8:e6:3a:02:d1:7c:38:80:86: ad:33:b4:46:20:f9:db:21:a4:21:58:e0:df:2e:1c: 72:7d:a0:84:7c:13:f2:d4:fd:ef:08:0b:30:24:3f: d5:3c:ed:d0:e7:2c:f9:21:0e:a0:30:90:5e:a9:ec: 3d:9e:bb:37:3d:0d:ac:5f:e1:11:62:15:0c:40:a5: 5f:a3:ed:99:0a:0d:2f:34:34:03:28:6a:e0:e8:9b: 54:3a:61:8d:22:24:cc:d2:f7:2e:67:c2:df:05:fc: 30:80:b5:52:44:09:b4:48:ab:a7:e0:69:9a:3e:a7: bf:50:74:6d:08:42:3c:66:91:0c:52:95:10:01:62: be:92:11:fb:b4:9b:c5:40:74:04:33:0d:2c:01:2c: ba:ae:7c:fd:72:05:bb:33:7b:83:c9:de:23:bd:d9: e6:7f:b6:16:b5:1d:bd:01:14:af:71:8f:ca:93:c2: 05:74:32:8a:fe:cc:49:98:17:9b:2b:a1:b4:1e:c1: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B4:99:C8:D2:00:52:57:F0:5E:15:DC:00:7B:6C:35:7D:3C:51:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b65b89f1-96b1-3ddd-8772-63484052b2b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f5:c3:39:d4:bb:48:dc:da:d9:eb:31:31:9f:31:4b:a1:62: 58:c3:0a:96:a7:14:32:1a:78:86:b8:b9:c3:19:72:56:6a:ca: 1e:dc:6a:ae:90:0e:cd:5c:cf:97:cc:64:e2:d0:02:fd:6a:a0: 99:96:58:84:48:1e:41:2d:02:c6:42:f8:f4:35:d5:75:a4:61: 9c:8a:07:7a:53:96:d8:57:cb:56:58:d9:5a:a0:af:bb:71:e1: f5:f7:68:9d:9e:a3:51:cd:e9:55:da:9d:49:cf:8b:52:3b:42: 34:cd:9b:08:4a:03:90:80:84:67:84:9b:ef:14:e2:35:d2:a2: 64:05:e0:28:b7:16:c1:a3:63:15:50:6f:bf:a0:0e:cb:36:b9: dc:50:5f:eb:8f:86:7a:c4:44:8b:02:29:f5:ce:11:4c:77:c1: 84:78:fb:54:a1:6a:03:15:0e:dc:d6:44:1e:43:ac:c2:e8:43: 57:41:a8:8f:32:4d:15:3a:46:b6:a6:3b:03:96:bd:de:85:44: b6:59:f6:51:1e:94:ae:f5:77:56:b2:55:80:17:14:e6:01:89: 28:e5:3e:41:99:55:b0:a1:16:f6:56:74:43:83:03:b8:f5:39: 97:1c:83:bd:c4:5e:41:35:d0:73:e1:a5:a8:63:e6:c7:50:6a: fc:25:31:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3seyNOmnfnUU92FeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk MTVhNGY2NzktYjZiNS00NzU3LWJlZDQtYWE1MTliZTFhMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Cy6dVMYJiZFFXkKXDYtYKgOU9b2uPlYoUfr z8QCqOMfTbMlE7TCL/MAspHPSVm0D4s07zJCW88d/aZ9R1bLnSHI5joC0Xw4gIat M7RGIPnbIaQhWODfLhxyfaCEfBPy1P3vCAswJD/VPO3Q5yz5IQ6gMJBeqew9nrs3 PQ2sX+ERYhUMQKVfo+2ZCg0vNDQDKGrg6JtUOmGNIiTM0vcuZ8LfBfwwgLVSRAm0 SKun4GmaPqe/UHRtCEI8ZpEMUpUQAWK+khH7tJvFQHQEMw0sASy6rnz9cgW7M3uD yd4jvdnmf7YWtR29ARSvcY/Kk8IFdDKK/sxJmBebK6G0HsGTIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHK0mcjSAFJX8F4V3AB7bDV9PFFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjY1Yjg5ZjEtOTZiMS0z ZGRkLTg3NzItNjM0ODQwNTJiMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB31wznUu0jc2tnrMTGfMUuhYljDCpanFDIaeIa4ucMZclZqyh7caq6Q Ds1cz5fMZOLQAv1qoJmWWIRIHkEtAsZC+PQ11XWkYZyKB3pTlthXy1ZY2Vqgr7tx 4fX3aJ2eo1HN6VXanUnPi1I7QjTNmwhKA5CAhGeEm+8U4jXSomQF4Ci3FsGjYxVQ b7+gDss2udxQX+uPhnrERIsCKfXOEUx3wYR4+1ShagMVDtzWRB5DrMLoQ1dBqI8y TRU6RramOwOWvd6FRLZZ9lEelK71d1ayVYAXFOYBiSjlPkGZVbChFvZWdEODA7j1 OZccg73EXkE10HPhpahj5sdQavwlMdo= -----END CERTIFICATE-----Generated at Sun May 24 13:10:22 2026 by rpki-client