$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0d369c4d-7e7f-3989-add2-c83c1d0e2783.roa File: 0d369c4d-7e7f-3989-add2-c83c1d0e2783.roa (raw, json) Hash identifier: bG7tQJK8bFaIh0RatWa86lGxIBuy9lVnFdeM4Q2zANA= Subject key identifier: 11:52:CE:2D:55:7E:F1:79:F5:75:55:D0:15:60:4A:B9:1B:57:7F:20 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DCAFAF051D4F127359CF14210 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0d369c4d-7e7f-3989-add2-c83c1d0e2783.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 40676 IP address blocks: 209.101.236.0/22 maxlen: 24 209.101.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fa:f0:51:d4:f1:27:35:9c:f1:42:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=20ce5219-564e-4d21-a601-37dee9e57a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:74:15:a7:cf:09:e3:42:20:c0:2f:7a:ac: ae:99:30:a4:87:fb:45:1c:b6:0f:18:08:a3:34:31: 2a:70:7f:81:73:22:85:a1:fd:09:f1:11:72:4d:22: 12:66:fc:b5:23:77:7c:10:c5:ac:00:a7:96:b4:e1: 45:19:2f:43:2e:59:5e:f9:d4:dc:31:7b:86:f2:43: 66:1d:64:9f:49:86:ee:4d:61:0e:f5:05:a0:a8:38: ea:5d:2d:8f:97:ae:9a:11:b6:45:96:56:12:0c:d4: 6e:5d:5d:dc:7b:d8:e6:01:1c:2e:b5:67:9a:bb:23: 18:2a:d1:07:99:a6:e8:81:9f:b3:c4:34:c4:13:59: 1f:52:bf:ea:dc:28:ab:fa:3f:f1:44:68:97:55:a9: 89:7f:c5:5b:14:2b:0b:93:9e:a2:53:43:64:db:a0: 01:6b:f5:38:9d:66:82:19:f2:e2:4b:39:02:5e:9a: 47:88:90:52:c6:84:f8:ac:f7:ec:be:fd:af:c3:71: 0a:0a:e5:4a:52:69:60:0c:7e:11:0e:ee:58:14:97: ce:fb:54:e1:18:db:a2:1c:35:d4:58:98:b7:81:ff: 11:e9:eb:ca:1e:a4:e1:06:b4:a4:be:79:8a:18:d3: d3:40:5a:d5:11:83:45:b8:5b:92:54:5c:f5:cb:a5: 80:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:52:CE:2D:55:7E:F1:79:F5:75:55:D0:15:60:4A:B9:1B:57:7F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0d369c4d-7e7f-3989-add2-c83c1d0e2783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.236.0/22 209.101.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:20:2d:67:ed:4f:16:c9:83:12:4c:ff:2c:57:b3:eb:90:e2: 04:bc:79:bd:ee:36:e7:05:c4:0a:8c:48:cc:af:b8:39:33:96: bc:4a:e6:4f:f6:e9:b3:11:a0:d9:ca:a8:69:6d:6e:9b:44:50: 46:27:0e:42:5f:0b:f1:79:86:f9:6d:0c:07:51:4e:6f:d5:20: 4a:eb:03:03:01:e0:7c:38:b2:76:b4:2f:9b:45:8e:5f:1c:75: 19:f8:6a:be:86:90:26:fe:a8:cc:32:80:99:52:cd:af:7a:af: 91:95:48:53:09:72:8b:99:2c:05:6f:d3:30:42:99:18:23:af: 4e:16:bf:cc:c0:30:de:85:8c:ec:da:8a:d7:37:5b:b5:d1:ee: da:81:8f:1f:85:f8:5b:e7:73:ff:ea:21:78:d1:79:f8:98:4e: 5a:f4:de:28:a0:b0:79:52:63:43:79:21:32:1a:61:05:62:41: f8:7b:6a:1b:51:4f:ce:52:9d:4c:a8:a2:75:a5:55:6d:11:4d: a6:4d:5c:45:c6:94:a7:28:ae:45:cb:02:4f:18:bc:fd:5d:f1: 3f:df:f8:d2:43:22:88:1e:c5:4b:82:d2:cd:61:0d:e6:8e:a7: e0:8b:af:dc:ee:90:77:51:5d:8f:7f:02:2b:5f:96:66:ed:af: 54:3b:4b:d7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3K+vBR1PEnNZzxQhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk MjBjZTUyMTktNTY0ZS00ZDIxLWE2MDEtMzdkZWU5ZTU3YTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuB0FafPCeNCIMAveqyumTCkh/tFHLYPGAij NDEqcH+BcyKFof0J8RFyTSISZvy1I3d8EMWsAKeWtOFFGS9DLlle+dTcMXuG8kNm HWSfSYbuTWEO9QWgqDjqXS2Pl66aEbZFllYSDNRuXV3ce9jmARwutWeauyMYKtEH mabogZ+zxDTEE1kfUr/q3Cir+j/xRGiXVamJf8VbFCsLk56iU0Nk26ABa/U4nWaC GfLiSzkCXppHiJBSxoT4rPfsvv2vw3EKCuVKUmlgDH4RDu5YFJfO+1ThGNuiHDXU WJi3gf8R6evKHqThBrSkvnmKGNPTQFrVEYNFuFuSVFz1y6WABwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBFSzi1VfvF59XVV0BVgSrkbV38gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGQzNjljNGQtN2U3Zi0z OTg5LWFkZDItYzgzYzFkMGUyNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0WXsAwQC 0WX0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAAgLWftTxbJgxJM/yxXs+uQ4gS8eb3uNucFxAqMSMyvuDkz lrxK5k/26bMRoNnKqGltbptEUEYnDkJfC/F5hvltDAdRTm/VIErrAwMB4Hw4sna0 L5tFjl8cdRn4ar6GkCb+qMwygJlSza96r5GVSFMJcouZLAVv0zBCmRgjr04Wv8zA MN6FjOzaitc3W7XR7tqBjx+F+Fvnc//qIXjRefiYTlr03iigsHlSY0N5ITIaYQVi Qfh7ahtRT85SnUyoonWlVW0RTaZNXEXGlKcorkXLAk8YvP1d8T/f+NJDIogexUuC 0s1hDeaOp+CLr9zukHdRXY9/Aitflmbtr1Q7S9c= -----END CERTIFICATE-----Generated at Wed May 13 13:35:59 2026 by rpki-client