$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa File: 22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa (raw, json) Hash identifier: +3mlRK0/YjMamkT/p2On/PTka0660QtK8OtqCuynaKk= Subject key identifier: B9:4A:3D:B7:43:03:E1:5F:69:05:8C:78:08:01:68:A3:37:AE:49:A1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DBFD098B034C2F474C316D180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 401783 IP address blocks: 209.101.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:98:b0:34:c2:f4:74:c3:16:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=da40649e-c3ca-4550-91bb-055a5f242537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:da:6c:a7:d8:4f:0b:22:43:a0:84:71:1a: cc:11:a3:d8:98:7f:33:ed:e6:6a:45:a0:74:ff:73: 84:79:b9:9f:2b:1e:1f:3c:f7:0a:cc:b8:da:64:a1: a9:64:1f:4a:c6:7b:10:bf:22:4f:23:9c:15:a4:e0: 6e:9e:c6:6c:ec:f5:24:0e:4f:4b:e4:11:72:f1:4c: ef:7f:9f:66:43:d3:4c:13:61:4d:ba:57:34:8f:72: 44:00:66:02:16:3a:4e:73:66:0c:b1:3e:a5:28:3e: b5:fe:1d:94:ef:30:0d:29:3c:95:ae:42:e3:72:ee: 0c:17:a9:27:37:55:78:aa:64:43:50:66:4f:d6:59: ff:be:a5:72:cb:52:8c:32:d3:68:83:de:ab:e4:21: 3f:75:35:e8:13:db:38:76:16:4f:9e:db:fe:27:df: 91:a5:ea:90:80:73:d8:26:39:a7:ca:74:eb:d8:34: 2c:3e:f2:5b:c1:22:c6:0d:02:05:20:52:b8:19:2f: 0a:24:bc:fc:62:54:80:21:4d:cb:68:9d:8a:8e:14: 6d:bc:f4:92:93:37:10:44:75:77:e8:53:6f:c0:98: bb:7c:29:3b:ca:9b:f2:f8:8a:9f:9f:bb:c8:1f:aa: 1a:a6:05:ca:d2:49:37:68:9d:97:42:67:1c:6a:0d: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4A:3D:B7:43:03:E1:5F:69:05:8C:78:08:01:68:A3:37:AE:49:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:21:f1:24:71:96:36:1f:7d:e1:d2:d0:61:0f:64:eb:5b:29: e3:d1:97:41:55:0d:34:94:2d:ef:7a:aa:56:e0:a7:99:98:30: 81:7a:81:c4:a2:85:93:b4:48:40:2a:b0:e4:24:13:58:8a:0a: 8d:a8:37:19:0b:36:8f:93:52:41:5e:2a:29:8a:47:88:3b:1a: 39:c6:0e:43:44:8b:2b:ba:11:66:d4:94:f4:c6:0e:c7:1e:1f: 3a:6a:42:0d:be:dc:cf:94:74:ff:e2:81:f9:1d:01:5c:4c:34: b5:c9:bb:d7:f4:91:f5:81:cd:26:58:b9:bb:bf:05:97:d0:cf: f9:8f:ae:e4:bb:24:d8:fd:ad:23:93:e6:43:7c:f3:20:ff:85: 32:01:81:5d:74:e2:a0:25:2d:b1:b4:45:91:d4:fb:a4:d0:de: 3c:17:c1:d7:13:4e:28:ba:28:98:5e:5c:63:4b:5f:f9:21:37: 2a:0c:32:a5:2f:c7:f0:31:12:36:85:16:64:32:d8:88:81:c6: 0e:79:61:98:45:c7:6a:3e:78:44:a0:d5:e5:ca:9a:9a:e3:3a: ea:4b:6a:98:cb:1b:52:40:57:86:0c:de:b0:d1:d4:2b:c6:fa: 93:51:99:d0:d4:13:43:89:4e:30:8c:63:69:99:6a:9c:46:4d: 41:de:cf:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0JiwNML0dMMW0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk ZGE0MDY0OWUtYzNjYS00NTUwLTkxYmItMDU1YTVmMjQyNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtTabKfYTwsiQ6CEcRrMEaPYmH8z7eZqRaB0 /3OEebmfKx4fPPcKzLjaZKGpZB9KxnsQvyJPI5wVpOBunsZs7PUkDk9L5BFy8Uzv f59mQ9NME2FNulc0j3JEAGYCFjpOc2YMsT6lKD61/h2U7zANKTyVrkLjcu4MF6kn N1V4qmRDUGZP1ln/vqVyy1KMMtNog96r5CE/dTXoE9s4dhZPntv+J9+RpeqQgHPY JjmnynTr2DQsPvJbwSLGDQIFIFK4GS8KJLz8YlSAIU3LaJ2KjhRtvPSSkzcQRHV3 6FNvwJi7fCk7ypvy+Iqfn7vIH6oapgXK0kk3aJ2XQmccag2nQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlKPbdDA+FfaQWMeAgBaKM3rkmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjJiMGJmYTAtYmNhZS0z MWM0LWFjM2MtOWExNDJhNjgzOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJch8SRxljYffeHS0GEPZOtbKePRl0FVDTSULe96qlbgp5mYMIF6gcSi hZO0SEAqsOQkE1iKCo2oNxkLNo+TUkFeKimKR4g7GjnGDkNEiyu6EWbUlPTGDsce HzpqQg2+3M+UdP/igfkdAVxMNLXJu9f0kfWBzSZYubu/BZfQz/mPruS7JNj9rSOT 5kN88yD/hTIBgV104qAlLbG0RZHU+6TQ3jwXwdcTTii6KJheXGNLX/khNyoMMqUv x/AxEjaFFmQy2IiBxg55YZhFx2o+eESg1eXKmprjOupLapjLG1JAV4YM3rDR1CvG +pNRmdDUE0OJTjCMY2mZapxGTUHezyI= -----END CERTIFICATE-----Generated at Wed May 13 14:01:02 2026 by rpki-client