$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/210a4ee1-88dc-3870-a4a6-a3f637aa2ec2.roa File: 210a4ee1-88dc-3870-a4a6-a3f637aa2ec2.roa (raw, json) Hash identifier: c/w8UjzguG7o3ipUbhYaSwC2bU31rMqaansco3axJdU= Subject key identifier: 64:47:3C:C5:AD:8E:12:07:7F:0D:14:FE:96:75:80:34:06:19:92:9D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D32A80BDB1A6351F115390500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/210a4ee1-88dc-3870-a4a6-a3f637aa2ec2.roa Signing time: Tue 17 Mar 2026 11:30:35 +0000 ROA not before: Tue 17 Mar 2026 11:30:35 +0000 ROA not after: Mon 15 Jun 2026 11:30:35 +0000 asID: 214025 IP address blocks: 209.101.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:a8:0b:db:1a:63:51:f1:15:39:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 17 11:30:35 2026 GMT Not After : Jun 15 11:30:35 2026 GMT Subject: CN=c1c22f3b-9d3f-498f-9337-c7bf61acf1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:c7:e4:97:26:f2:60:f7:05:29:ea:ec:56: bb:b3:1b:41:9d:fe:5f:7b:fd:9c:68:b1:64:b3:a5: 04:a5:4f:4d:bc:5a:e3:4d:83:ee:37:9d:24:c0:b8: b0:1e:96:ec:2f:ec:2d:bf:00:d5:be:d0:10:47:20: 93:ca:ba:1a:63:4e:05:1f:91:3f:d4:1d:39:b6:68: 99:82:14:21:51:1a:17:a6:2e:7b:1e:2b:52:ef:98: 8b:c4:c6:e9:36:f6:89:16:a5:e4:99:0b:d7:d5:3b: 67:05:30:77:59:ea:ad:57:94:05:89:ff:c7:51:fd: 5e:4e:3a:da:25:99:17:a8:3c:79:80:84:fd:fc:7d: 14:7a:00:88:b2:7c:80:83:a8:09:c4:ea:cf:40:05: 62:ef:6e:99:46:5c:2f:c9:a1:15:da:48:9c:1a:40: 1a:99:51:58:e9:57:2b:4f:8c:e6:88:e3:df:eb:e4: ea:12:c4:06:22:e8:45:0c:b0:cf:91:b1:70:86:4d: f1:55:72:41:1c:9c:0b:63:64:cf:36:48:8f:7f:ac: 19:ec:e4:b8:c7:6d:02:a0:2b:ff:81:cc:fa:b6:43: 84:9d:fd:0d:b6:bd:e0:7f:e5:b7:99:a3:85:7e:a0: 2b:a7:bf:00:e7:c3:6d:df:6a:e8:c1:0f:26:e5:65: a2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:47:3C:C5:AD:8E:12:07:7F:0D:14:FE:96:75:80:34:06:19:92:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/210a4ee1-88dc-3870-a4a6-a3f637aa2ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:e8:2a:74:91:ff:a0:b8:25:f9:8b:6f:32:c2:b8:02:3b:73: 92:42:73:43:9f:46:61:46:68:48:f6:e9:a6:ee:6d:82:d1:2b: b6:a5:4b:15:66:be:60:72:99:c9:ff:97:60:10:be:fc:b1:bd: c7:6b:e6:0b:56:3b:a0:3d:d4:22:46:d5:7b:e4:cd:5b:b5:82: 54:db:e0:1d:ca:8c:f2:62:a6:9d:ca:1b:fa:e6:a2:03:9b:18: 91:46:26:18:32:93:11:a7:06:e6:cc:2d:e6:ff:8c:76:b3:35: 3a:85:93:38:e2:f2:26:20:e9:ec:98:42:0b:ee:6d:03:13:cf: b6:c2:00:c2:78:e3:41:b6:76:a1:17:03:a5:7a:e4:b7:b4:b7: 99:34:c3:07:31:5b:b9:27:f7:e7:c7:73:ec:a0:c1:a7:ef:bb: 96:2d:82:2d:a2:e2:c1:f6:2a:cb:19:65:f7:b1:c1:56:3b:4b: 26:46:5f:75:75:c2:b4:4c:f2:ba:cc:84:d8:46:52:30:3a:17: 6b:2a:0d:ce:47:d2:f7:97:b5:93:de:57:bf:90:5e:3b:af:36: ee:e2:f3:1e:f6:2e:61:6c:69:d9:7a:8f:77:d8:4d:26:d2:8c: e2:d0:df:85:08:5b:51:1c:0a:e9:c3:8a:75:50:63:0c:0d:4a: 19:df:33:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0yqAvbGmNR8RU5BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxNzExMzAzNVoXDTI2MDYxNTExMzAzNVowLzEtMCsGA1UEAxMk YzFjMjJmM2ItOWQzZi00OThmLTkzMzctYzdiZjYxYWNmMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktXH5Jcm8mD3BSnq7Fa7sxtBnf5fe/2caLFk s6UEpU9NvFrjTYPuN50kwLiwHpbsL+wtvwDVvtAQRyCTyroaY04FH5E/1B05tmiZ ghQhURoXpi57HitS75iLxMbpNvaJFqXkmQvX1TtnBTB3WeqtV5QFif/HUf1eTjra JZkXqDx5gIT9/H0UegCIsnyAg6gJxOrPQAVi726ZRlwvyaEV2kicGkAamVFY6Vcr T4zmiOPf6+TqEsQGIuhFDLDPkbFwhk3xVXJBHJwLY2TPNkiPf6wZ7OS4x20CoCv/ gcz6tkOEnf0Ntr3gf+W3maOFfqArp78A58Nt32rowQ8m5WWivwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRHPMWtjhIHfw0U/pZ1gDQGGZKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjEwYTRlZTEtODhkYy0z ODcwLWE0YTYtYTNmNjM3YWEyZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7oKnSR/6C4JfmLbzLCuAI7c5JCc0OfRmFGaEj26abubYLRK7alSxVm vmBymcn/l2AQvvyxvcdr5gtWO6A91CJG1XvkzVu1glTb4B3KjPJipp3KG/rmogOb GJFGJhgykxGnBubMLeb/jHazNTqFkzji8iYg6eyYQgvubQMTz7bCAMJ440G2dqEX A6V65Le0t5k0wwcxW7kn9+fHc+ygwafvu5Ytgi2i4sH2KssZZfexwVY7SyZGX3V1 wrRM8rrMhNhGUjA6F2sqDc5H0veXtZPeV7+QXjuvNu7i8x72LmFsadl6j3fYTSbS jOLQ34UIW1EcCunDinVQYwwNShnfM2k= -----END CERTIFICATE-----Generated at Thu Mar 26 06:01:00 2026 by rpki-client