$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6a0607-5470-33bb-a3da-78cd4c521774.roa File: 2b6a0607-5470-33bb-a3da-78cd4c521774.roa (raw, json) Hash identifier: U0bZKmJ91p0kN7u6DbVSUrOWck3bCz+SvEmoyCJP3QU= Subject key identifier: A5:3A:5F:0B:4F:41:39:F2:86:D1:3E:F0:5C:DD:A2:5E:A4:29:3F:72 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D386A26810158832B6BF5CA40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6a0607-5470-33bb-a3da-78cd4c521774.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 54252 IP address blocks: 209.101.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:26:81:01:58:83:2b:6b:f5:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=ab3707c2-b9c7-40ae-b69a-bdc0b4e7c2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:e7:ae:c2:59:a9:f3:20:29:4e:52:82:6f: e3:d7:52:ef:de:46:0b:98:0d:06:b1:54:ef:f6:51: e9:95:f0:3b:b3:cc:0a:e7:fd:c5:96:d3:dc:09:e0: 3e:1b:15:2d:9f:31:1f:14:2d:fe:95:5d:07:43:9f: 8c:7b:3a:55:5d:dc:df:7d:27:d0:58:7f:f0:31:0f: 0d:52:26:d0:23:a6:51:0e:d8:b6:ed:e1:b2:2f:1e: 55:b4:a7:18:0b:83:31:1a:e3:0c:88:d2:5e:42:0f: 54:8b:35:bd:78:11:78:4c:a4:1c:ce:fc:38:55:32: b4:73:c0:12:77:34:a4:a6:ec:62:65:47:b2:95:71: 8a:aa:0e:46:92:73:9e:a6:9b:3b:f9:9a:d2:f9:e7: 5a:60:19:00:57:76:2f:cc:d5:96:91:b4:57:36:b7: e7:c7:07:47:e5:c5:eb:ad:d3:83:43:cd:4b:bf:fe: b7:8f:55:ed:fb:1b:40:cf:3d:bc:1b:3b:10:f6:a3: a6:5e:38:47:44:c7:4e:7b:ac:35:1e:0c:28:71:3d: 47:c9:51:b2:f8:5d:7e:c2:32:97:e5:92:64:be:5e: 4d:c2:3a:bb:65:e1:af:0b:0e:42:49:24:ab:5e:83: 44:ea:d6:2e:2c:48:d7:17:8a:8c:fb:61:57:aa:b2: 23:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3A:5F:0B:4F:41:39:F2:86:D1:3E:F0:5C:DD:A2:5E:A4:29:3F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6a0607-5470-33bb-a3da-78cd4c521774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:94:54:2c:38:87:3a:84:6b:d9:27:ad:f4:f1:f4:89:cf:79: bd:f2:7d:fb:7f:ab:b2:65:dc:ec:b3:e8:e4:f3:ef:6c:0d:83: a2:ed:7c:47:ea:0a:0f:bf:14:d0:3c:8e:36:02:a6:9e:8b:f5: f0:06:ec:19:fd:96:25:9d:8e:21:68:3c:56:07:2e:f3:e0:e6: c4:2d:b1:bb:f9:d2:8e:e4:78:24:5f:b7:0f:25:c2:db:4a:36: 05:74:37:6b:91:73:64:44:7d:96:f0:27:d6:d8:e9:83:65:ff: e9:68:74:39:2d:4b:a3:e2:8f:6c:4c:5c:10:f3:87:0d:40:02: 1c:c0:fd:f0:0b:0c:60:a8:5e:fc:43:12:d2:72:b6:ec:15:3b: ce:06:b4:1a:31:6a:00:d4:34:b1:6c:c5:c4:cf:68:a4:1c:1b: 1e:75:b6:06:69:77:f0:39:ed:d5:e5:46:60:a2:46:0c:e8:bf: 4f:3e:73:83:fb:49:95:9f:93:12:09:54:0f:5b:0f:65:d7:e9: b1:ce:03:d4:9b:6b:fe:11:65:db:1f:36:78:db:d4:eb:d8:8a: c1:8f:c8:e9:24:c2:cd:72:36:54:0b:e1:db:df:e8:34:54:01: e1:a7:e1:bd:a8:f2:03:01:96:47:06:c0:a5:f6:e0:38:0f:78: 2f:01:e2:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04aiaBAViDK2v1ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YWIzNzA3YzItYjljNy00MGFlLWI2OWEtYmRjMGI0ZTdjMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9XnrsJZqfMgKU5Sgm/j11Lv3kYLmA0GsVTv 9lHplfA7s8wK5/3FltPcCeA+GxUtnzEfFC3+lV0HQ5+MezpVXdzffSfQWH/wMQ8N UibQI6ZRDti27eGyLx5VtKcYC4MxGuMMiNJeQg9UizW9eBF4TKQczvw4VTK0c8AS dzSkpuxiZUeylXGKqg5GknOepps7+ZrS+edaYBkAV3YvzNWWkbRXNrfnxwdH5cXr rdODQ81Lv/63j1Xt+xtAzz28GzsQ9qOmXjhHRMdOe6w1HgwocT1HyVGy+F1+wjKX 5ZJkvl5Nwjq7ZeGvCw5CSSSrXoNE6tYuLEjXF4qM+2FXqrIjjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKU6XwtPQTnyhtE+8Fzdol6kKT9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmI2YTA2MDctNTQ3MC0z M2JiLWEzZGEtNzhjZDRjNTIxNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2UVCw4hzqEa9knrfTx9InPeb3yfft/q7Jl3Oyz6OTz72wNg6LtfEfq Cg+/FNA8jjYCpp6L9fAG7Bn9liWdjiFoPFYHLvPg5sQtsbv50o7keCRftw8lwttK NgV0N2uRc2REfZbwJ9bY6YNl/+lodDktS6Pij2xMXBDzhw1AAhzA/fALDGCoXvxD EtJytuwVO84GtBoxagDUNLFsxcTPaKQcGx51tgZpd/A57dXlRmCiRgzov08+c4P7 SZWfkxIJVA9bD2XX6bHOA9Sba/4RZdsfNnjb1OvYisGPyOkkws1yNlQL4dvf6DRU AeGn4b2o8gMBlkcGwKX24DgPeC8B4lk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:31:33 2026 by rpki-client