$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa File: dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa (raw, json) Hash identifier: ig9sEVszVj207Jg4LyJv8BEAeEK8I2Fg0YT+FP6+nCY= Subject key identifier: A4:13:22:EE:D1:83:0F:6D:C2:BE:DC:45:40:3F:B6:2E:4F:09:72:71 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0BDD01B03286394033C5B600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 212238 IP address blocks: 209.101.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:01:b0:32:86:39:40:33:c5:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=2e626457-6a7d-4383-871d-d8bf3618dac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:de:8c:02:4a:9f:9a:2d:c2:e0:55:bd:8e:6f: e7:0b:2e:39:8d:79:e6:ef:57:0e:a0:2e:be:6c:3c: ab:32:35:53:26:93:c5:50:a0:85:c6:5a:4a:fc:4e: 1d:ac:ea:4e:43:4c:e2:a8:31:01:4f:5d:02:13:1c: 08:77:75:23:3b:86:c3:a4:af:26:58:2d:72:e2:e8: ef:c2:02:1d:13:ef:84:37:75:87:e9:12:69:da:c7: a4:e1:ab:0a:7c:dd:7f:77:5b:f4:c8:36:9f:fa:65: 26:32:14:52:99:2a:9f:25:53:ca:22:6e:84:30:c3: 79:48:c9:d8:87:27:84:b7:da:81:8b:c1:38:11:08: ed:8d:07:e3:58:08:9a:17:45:25:20:34:a8:4b:6e: d1:8f:28:c8:79:f6:72:8c:b7:04:26:2a:de:42:bc: 39:55:60:3e:c3:97:6e:3a:c5:c1:9f:92:93:60:2f: 28:78:9b:be:68:16:5b:0e:df:9a:74:7a:aa:80:24: 73:cd:37:52:b6:29:55:94:4d:96:1a:c9:a7:1b:e9: 72:2e:97:0c:64:b8:8d:ec:3b:29:7e:67:e2:2b:f3: 65:ad:62:8e:87:d3:c9:bb:02:a8:ae:b3:db:fc:75: f5:b2:9d:8d:2b:27:42:5b:c9:01:a8:f1:c3:50:bd: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:13:22:EE:D1:83:0F:6D:C2:BE:DC:45:40:3F:B6:2E:4F:09:72:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedd4608-759f-34b1-9a8b-8d7c2c711c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:de:c8:16:6e:cf:9c:4d:81:55:a9:aa:01:bf:15:ed:fd:96: 0c:44:de:37:a3:78:d8:15:aa:c7:5a:b9:11:2b:80:10:42:9e: ad:65:49:63:ef:3e:15:fd:45:0f:f8:a7:f2:e1:fe:85:48:42: 7f:7c:7e:ac:4f:06:17:be:28:ab:f8:3b:79:d0:3d:6c:8f:7e: e7:6a:3e:df:af:09:8a:1b:bb:2c:18:e2:ac:63:a2:c7:4b:9e: 4b:7d:68:d3:3d:54:93:e2:95:a9:cf:47:92:02:2d:60:3b:60: 88:7a:c4:82:7c:c5:b4:22:3c:66:3b:bb:2c:59:c3:74:72:fb: dd:8b:13:8c:b2:37:77:37:6d:ce:1b:73:28:4d:d5:d4:7d:52: fe:f2:29:55:45:96:eb:d8:a0:7d:eb:83:e2:7b:a5:1c:58:f1: b4:a8:89:68:9f:45:06:08:08:77:92:57:41:23:ce:5a:08:6d: 58:70:7f:cc:64:aa:92:cf:45:04:1a:ef:38:05:ce:12:9d:56: c4:0c:ea:33:21:e4:6c:d2:21:97:56:02:37:ce:31:62:34:80: 04:06:99:20:1e:46:41:cc:24:cd:01:f7:c6:48:bb:42:df:9d: 79:98:1c:e0:19:57:41:82:ec:4c:65:5c:64:4c:6f:e1:ae:fb: c8:a5:3e:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3QGwMoY5QDPFtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk MmU2MjY0NTctNmE3ZC00MzgzLTg3MWQtZDhiZjM2MThkYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN6MAkqfmi3C4FW9jm/nCy45jXnm71cOoC6+ bDyrMjVTJpPFUKCFxlpK/E4drOpOQ0ziqDEBT10CExwId3UjO4bDpK8mWC1y4ujv wgIdE++EN3WH6RJp2sek4asKfN1/d1v0yDaf+mUmMhRSmSqfJVPKIm6EMMN5SMnY hyeEt9qBi8E4EQjtjQfjWAiaF0UlIDSoS27RjyjIefZyjLcEJireQrw5VWA+w5du OsXBn5KTYC8oeJu+aBZbDt+adHqqgCRzzTdStilVlE2WGsmnG+lyLpcMZLiN7Dsp fmfiK/NlrWKOh9PJuwKorrPb/HX1sp2NKydCW8kBqPHDUL2NzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQTIu7Rgw9twr7cRUA/ti5PCXJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGVkZDQ2MDgtNzU5Zi0z NGIxLTlhOGItOGQ3YzJjNzExYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3eyBZuz5xNgVWpqgG/Fe39lgxE3jejeNgVqsdauRErgBBCnq1lSWPv PhX9RQ/4p/Lh/oVIQn98fqxPBhe+KKv4O3nQPWyPfudqPt+vCYobuywY4qxjosdL nkt9aNM9VJPilanPR5ICLWA7YIh6xIJ8xbQiPGY7uyxZw3Ry+92LE4yyN3c3bc4b cyhN1dR9Uv7yKVVFluvYoH3rg+J7pRxY8bSoiWifRQYICHeSV0EjzloIbVhwf8xk qpLPRQQa7zgFzhKdVsQM6jMh5GzSIZdWAjfOMWI0gAQGmSAeRkHMJM0B98ZIu0Lf nXmYHOAZV0GC7ExlXGRMb+Gu+8ilPm0= -----END CERTIFICATE-----Generated at Tue Mar 10 03:31:52 2026 by rpki-client