$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa File: 1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa (raw, json) Hash identifier: bePWnPagGZJT2j3iKWAxOwmjC1pAWAscnlZ8+MWBaw8= Subject key identifier: B5:29:0C:2D:04:93:B9:23:34:DF:3B:CF:A4:30:C9:EC:F0:7A:63:A3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DBFD09A6FFF4D175600004D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 401783 IP address blocks: 209.101.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:9a:6f:ff:4d:17:56:00:00:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=4ba32e13-94b0-448f-a466-e2d67b874e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fe:e4:f7:05:2f:57:3d:45:78:a5:d2:53:e5: e6:2a:08:e1:ca:35:21:cd:21:80:f9:15:bd:67:c1: b3:52:30:f3:19:59:61:e2:a1:e6:d9:1d:f3:b5:b5: ed:c1:b7:ed:6d:c7:19:58:8a:2f:55:17:d7:8d:60: db:3a:7d:cf:fa:a9:a8:64:59:c9:6c:13:49:5d:0f: df:be:ed:02:87:d1:e6:e8:e6:83:7a:5d:bc:d4:ae: 06:cf:ef:0e:6e:b5:6d:b2:79:ec:fd:35:9a:2a:29: 24:73:91:50:90:ba:93:75:21:90:da:9d:67:e9:96: f7:6c:ce:f3:b2:59:dd:02:d7:18:68:1d:cd:06:30: 17:50:2d:92:e8:07:43:e3:17:87:1b:b2:c5:d4:04: 2e:6f:f9:e3:09:4f:8b:d4:b5:ef:c7:77:9f:6c:57: a6:a0:64:d0:98:43:53:e5:08:2f:54:f4:87:e9:79: 35:ba:f0:90:5f:ad:ce:d1:10:16:29:a2:83:5d:d9: 66:86:77:92:eb:56:7d:2a:03:e2:47:cb:ef:b2:5b: f0:87:dc:4b:d8:46:a5:69:fb:e6:ff:69:b2:00:a3: 00:8c:2d:79:6b:c3:b2:4e:bb:8a:53:49:34:89:88: 5f:b4:ae:14:9e:d4:b1:b7:45:ff:9d:b8:8c:5d:96: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:29:0C:2D:04:93:B9:23:34:DF:3B:CF:A4:30:C9:EC:F0:7A:63:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1de7cfb2-22fd-3b64-8e03-aadce03995eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:90:ff:a7:67:65:f3:64:e5:7e:c0:5c:0c:3d:a1:e5:73:70: 7e:04:44:3c:84:11:4c:5c:c7:c4:3c:0f:1f:43:08:b8:04:a1: 19:fa:28:ba:eb:70:87:39:27:d7:7e:fe:d9:90:46:0d:8c:a4: cf:6c:eb:21:2e:2a:fc:72:18:c0:0e:a4:71:03:df:1a:0e:ca: 19:86:88:7a:05:96:11:a5:4b:97:80:32:01:69:3e:af:e3:5e: d9:64:28:8f:c8:13:e9:dd:b3:27:a0:f2:26:19:63:87:b5:d5: ca:56:e7:a6:9c:e1:60:e3:ab:12:8c:de:44:c0:c5:e4:8d:74: c1:14:66:84:0b:b4:42:f7:a4:17:30:06:4c:aa:eb:41:97:66: d5:20:4e:79:17:7b:95:22:3e:e4:3c:1f:55:2b:6d:43:8c:fc: e9:7c:1c:58:e5:43:b9:03:82:15:f1:aa:c1:97:aa:1b:25:29: 34:50:49:c9:32:8f:3b:e2:67:f6:8e:33:84:d8:e0:84:82:f2: 1b:2a:ac:e3:c6:2f:ff:48:3d:ad:5f:29:1c:a1:b8:70:2f:fc: 07:94:ca:41:56:85:71:7c:bb:b6:98:9b:bf:ae:b3:88:c9:01: a3:89:d8:0c:1a:58:2a:93:19:5a:03:e9:24:69:9b:72:6a:6e: 9d:66:95:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0Jpv/00XVgAATYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk NGJhMzJlMTMtOTRiMC00NDhmLWE0NjYtZTJkNjdiODc0ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP7k9wUvVz1FeKXSU+XmKgjhyjUhzSGA+RW9 Z8GzUjDzGVlh4qHm2R3ztbXtwbftbccZWIovVRfXjWDbOn3P+qmoZFnJbBNJXQ/f vu0Ch9Hm6OaDel281K4Gz+8ObrVtsnns/TWaKikkc5FQkLqTdSGQ2p1n6Zb3bM7z slndAtcYaB3NBjAXUC2S6AdD4xeHG7LF1AQub/njCU+L1LXvx3efbFemoGTQmENT 5QgvVPSH6Xk1uvCQX63O0RAWKaKDXdlmhneS61Z9KgPiR8vvslvwh9xL2Ealafvm /2myAKMAjC15a8OyTruKU0k0iYhftK4UntSxt0X/nbiMXZZZ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUpDC0Ek7kjNN87z6QwyezwemOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWRlN2NmYjItMjJmZC0z YjY0LThlMDMtYWFkY2UwMzk5NWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2Q/6dnZfNk5X7AXAw9oeVzcH4ERDyEEUxcx8Q8Dx9DCLgEoRn6KLrr cIc5J9d+/tmQRg2MpM9s6yEuKvxyGMAOpHED3xoOyhmGiHoFlhGlS5eAMgFpPq/j XtlkKI/IE+ndsyeg8iYZY4e11cpW56ac4WDjqxKM3kTAxeSNdMEUZoQLtEL3pBcw Bkyq60GXZtUgTnkXe5UiPuQ8H1UrbUOM/Ol8HFjlQ7kDghXxqsGXqhslKTRQScky jzviZ/aOM4TY4ISC8hsqrOPGL/9IPa1fKRyhuHAv/AeUykFWhXF8u7aYm7+us4jJ AaOJ2AwaWCqTGVoD6SRpm3Jqbp1mleQ= -----END CERTIFICATE-----Generated at Wed May 13 10:58:25 2026 by rpki-client