$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/304538da-f130-3e1d-b805-e813e9173002.roa File: 304538da-f130-3e1d-b805-e813e9173002.roa (raw, json) Hash identifier: GzrG2ZepK54DGAZwSGzEsvudSP6Rmfn9X/ncuDdLRhU= Subject key identifier: EB:0C:EE:E3:B0:5F:A6:81:12:C0:7C:1C:BC:B5:2F:65:D0:6A:6A:4F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DA8AE17C6F6554B694DC4EE00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/304538da-f130-3e1d-b805-e813e9173002.roa Signing time: Tue 28 Apr 2026 18:08:09 +0000 ROA not before: Tue 28 Apr 2026 18:08:09 +0000 ROA not after: Mon 27 Jul 2026 18:08:09 +0000 asID: 142240 IP address blocks: 209.101.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:ae:17:c6:f6:55:4b:69:4d:c4:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 28 18:08:09 2026 GMT Not After : Jul 27 18:08:09 2026 GMT Subject: CN=f1a5095d-982b-4a2e-b0dc-a6c13c4e5b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:aa:cc:de:04:1b:9e:2c:5f:a2:aa:96:71: 98:4d:e0:8d:14:d2:d6:78:5b:0a:fc:6b:65:5f:a3: fd:fd:19:bb:c7:b7:73:64:d4:9c:9c:04:3e:6c:5c: a6:f5:b9:65:c0:2d:81:2b:55:8d:d5:a7:a5:0c:5d: bd:36:a3:3e:09:f9:b4:ab:4e:85:5a:d8:d3:52:98: a8:66:ca:bf:a0:f2:95:d3:85:36:06:84:72:63:b5: 24:68:95:ef:f2:58:69:b1:2a:43:08:37:56:e2:36: 3c:d5:6b:a6:2b:d4:f0:95:98:13:93:36:d9:3b:94: 6f:21:6f:b9:36:99:ec:c1:18:0d:75:7d:b5:ae:b4: 61:4a:de:13:9c:d7:bc:c7:92:3e:82:b5:cc:82:fa: 0b:f6:f0:72:ba:f3:3e:c5:c7:87:51:94:d8:03:9e: ef:35:6e:4d:7d:57:5c:96:eb:90:11:c1:00:0d:23: 06:fd:1a:f8:20:94:d0:d7:77:f3:db:0d:dc:29:88: c8:24:2b:1c:17:7b:86:64:b4:2b:cd:9e:ca:ac:1a: b3:b2:fe:3f:46:31:9e:7e:eb:1b:38:4c:7f:db:af: a2:a1:91:9f:b5:81:bd:b8:42:90:57:22:ff:b6:31: 99:8f:e5:13:a7:12:1e:33:e6:63:6a:8c:39:c2:7c: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0C:EE:E3:B0:5F:A6:81:12:C0:7C:1C:BC:B5:2F:65:D0:6A:6A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/304538da-f130-3e1d-b805-e813e9173002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:73:f6:40:b6:04:2c:74:77:aa:5a:7c:ee:4a:af:fd:3d:5f: 43:c1:85:fa:ce:51:c5:95:ad:d4:96:8c:d3:48:6c:59:8b:18: dc:d8:e6:40:68:b8:68:15:cc:59:94:e6:73:5e:06:33:84:37: e7:4e:e4:a1:05:d9:e0:40:5e:fd:d7:cb:53:1d:ee:02:f8:78: 73:1b:7a:72:9d:b7:df:9c:5a:34:8a:70:dc:19:0b:dd:1b:8b: e5:b8:78:af:e4:65:7c:32:7d:a3:ed:ee:d9:a4:02:c4:a2:8b: 57:37:c3:46:61:af:96:a2:b1:5a:a4:3b:c4:ba:3a:ff:77:f4: 40:2f:9d:f5:24:5e:31:0e:2f:9e:40:80:4a:cd:27:e6:ef:31: 63:d4:74:41:04:0f:52:40:71:0c:24:17:ac:6c:9b:c1:ff:1c: b2:6a:3d:de:3c:c4:80:b3:5c:92:b9:d6:dc:58:93:2b:7b:8d: 49:94:8c:63:bb:8c:62:8f:41:e8:dd:45:44:74:6f:13:e8:e8: f5:65:7a:d9:73:3b:3c:40:31:8e:5d:e0:cf:45:5e:eb:d8:a6: 67:45:1e:ec:3b:87:35:3e:3e:4d:ca:22:6f:db:3c:8c:38:2e: fa:32:0a:8e:a7:d3:fb:7a:b0:df:fb:d6:d0:dc:b3:c0:34:5b: 49:ec:b8:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2orhfG9lVLaU3E7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyODE4MDgwOVoXDTI2MDcyNzE4MDgwOVowLzEtMCsGA1UEAxMk ZjFhNTA5NWQtOTgyYi00YTJlLWIwZGMtYTZjMTNjNGU1YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsSqzN4EG54sX6KqlnGYTeCNFNLWeFsK/Gtl X6P9/Rm7x7dzZNScnAQ+bFym9bllwC2BK1WN1aelDF29NqM+Cfm0q06FWtjTUpio Zsq/oPKV04U2BoRyY7UkaJXv8lhpsSpDCDdW4jY81WumK9TwlZgTkzbZO5RvIW+5 NpnswRgNdX21rrRhSt4TnNe8x5I+grXMgvoL9vByuvM+xceHUZTYA57vNW5NfVdc luuQEcEADSMG/Rr4IJTQ13fz2w3cKYjIJCscF3uGZLQrzZ7KrBqzsv4/RjGefusb OEx/26+ioZGftYG9uEKQVyL/tjGZj+UTpxIeM+Zjaow5wnwtxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsM7uOwX6aBEsB8HLy1L2XQampPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzA0NTM4ZGEtZjEzMC0z ZTFkLWI4MDUtZTgxM2U5MTczMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5z9kC2BCx0d6pafO5Kr/09X0PBhfrOUcWVrdSWjNNIbFmLGNzY5kBo uGgVzFmU5nNeBjOEN+dO5KEF2eBAXv3Xy1Md7gL4eHMbenKdt9+cWjSKcNwZC90b i+W4eK/kZXwyfaPt7tmkAsSii1c3w0Zhr5aisVqkO8S6Ov939EAvnfUkXjEOL55A gErNJ+bvMWPUdEEED1JAcQwkF6xsm8H/HLJqPd48xICzXJK51txYkyt7jUmUjGO7 jGKPQejdRUR0bxPo6PVletlzOzxAMY5d4M9FXuvYpmdFHuw7hzU+Pk3KIm/bPIw4 LvoyCo6n0/t6sN/71tDcs8A0W0nsuIg= -----END CERTIFICATE-----Generated at Wed May 13 13:25:20 2026 by rpki-client