$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa File: 33bcd53a-1310-3cd5-91f3-46979f980f8e.roa (raw, json) Hash identifier: yv8ltDygEn6JF+DCleREW1bwOVvp+0d/6/5I0EXLPpw= Subject key identifier: A1:02:7B:5E:75:11:38:EC:D8:52:8C:58:C7:01:F3:36:A4:B6:7F:B1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DBFD0460EEAC3C04FE6FCEF00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 401783 IP address blocks: 209.101.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:46:0e:ea:c3:c0:4f:e6:fc:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=1fa93be9-9089-4859-8c4c-5fdf3bfd28f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8c:bc:3a:ee:4e:7d:6c:75:dd:13:d8:ff:49: 0d:43:d8:ae:ee:cc:bd:91:d5:7e:73:19:ad:a3:52: 2d:09:91:de:2a:a5:ec:8e:81:e9:c3:1a:c9:12:c8: d8:aa:bc:b9:cf:49:3e:ec:a2:f9:02:ff:72:5c:f9: 01:0b:8b:41:d2:8b:6d:58:8d:ca:50:98:99:a6:a8: f8:f9:ac:4e:36:4e:30:3b:15:8b:16:fc:66:c7:0a: ca:83:5a:fa:49:41:0e:d2:71:b5:dc:e8:90:cd:dd: 0f:96:c0:e7:0f:91:f9:68:1d:4d:26:a4:e0:44:96: 7f:30:b9:f1:58:97:4f:e7:3e:72:5e:ea:c9:32:10: f0:bc:37:8f:0a:da:05:f7:91:c4:5d:a0:7b:8c:8b: e1:3e:89:19:a7:6f:24:cf:a0:05:f3:3d:f6:f0:70: 7c:10:e5:ad:16:a9:4a:4c:ee:7c:35:ab:e7:3b:5a: d7:50:e4:62:e5:2f:07:ec:05:1a:7f:7c:9e:2f:1f: 17:e1:9a:b8:fc:38:d7:03:c4:eb:bf:a2:33:89:ff: 49:dc:aa:df:7b:29:7c:06:c9:23:f7:ee:55:45:d9: f6:95:69:7d:cb:22:84:dd:7f:bf:30:54:42:07:be: 21:ca:e8:1a:a3:42:1f:8e:53:e4:4c:ac:35:96:c4: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:02:7B:5E:75:11:38:EC:D8:52:8C:58:C7:01:F3:36:A4:B6:7F:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:84:b5:42:45:16:bb:e0:08:63:e3:43:2e:bc:01:6f:ea:5d: 32:46:54:21:42:51:19:d8:0a:a9:57:d5:77:31:80:13:39:9b: 29:2b:9e:fe:7f:ff:53:22:17:f1:bc:9c:f1:ad:9c:1a:ef:92: d9:39:20:75:46:c7:0a:ff:43:92:35:56:a4:ce:1a:df:e8:10: bb:83:a2:78:e6:bb:f4:95:57:40:0e:bb:6f:e0:bd:4f:71:07: df:5d:8b:b3:13:d5:2d:6b:e2:6a:f4:a5:b4:0e:4d:f1:7c:25: 59:d2:f4:7c:f5:97:91:88:c1:e6:16:c3:30:ea:c5:e4:1b:47: 47:45:72:1e:eb:66:a9:bc:18:6a:13:b4:97:81:e8:0a:3c:13: 56:44:bc:b1:09:e9:4e:72:82:9f:58:0b:bd:6c:b7:27:82:a2: 3d:5a:f2:57:66:c1:37:e7:45:a2:90:2f:08:a8:0e:ac:c0:79: cf:d0:cd:0d:63:85:2d:67:1b:f1:a9:1f:48:98:5a:81:55:78: 78:29:a8:14:8c:fe:aa:c2:1f:a2:a6:12:57:73:77:02:6f:45: 38:24:3a:08:60:a3:69:fe:13:d0:2a:49:30:35:af:2c:9d:7d: a0:e1:5b:9f:9e:69:00:64:1e:02:e1:95:3b:7e:dc:a4:94:82: a2:80:09:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0EYO6sPAT+b87wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk MWZhOTNiZTktOTA4OS00ODU5LThjNGMtNWZkZjNiZmQyOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIy8Ou5OfWx13RPY/0kNQ9iu7sy9kdV+cxmt o1ItCZHeKqXsjoHpwxrJEsjYqry5z0k+7KL5Av9yXPkBC4tB0ottWI3KUJiZpqj4 +axONk4wOxWLFvxmxwrKg1r6SUEO0nG13OiQzd0PlsDnD5H5aB1NJqTgRJZ/MLnx WJdP5z5yXurJMhDwvDePCtoF95HEXaB7jIvhPokZp28kz6AF8z328HB8EOWtFqlK TO58NavnO1rXUORi5S8H7AUaf3yeLx8X4Zq4/DjXA8Trv6Izif9J3Krfeyl8Bskj 9+5VRdn2lWl9yyKE3X+/MFRCB74hyugao0IfjlPkTKw1lsRngwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKECe151ETjs2FKMWMcB8zaktn+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzNiY2Q1M2EtMTMxMC0z Y2Q1LTkxZjMtNDY5NzlmOTgwZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGEtUJFFrvgCGPjQy68AW/qXTJGVCFCURnYCqlX1XcxgBM5mykrnv5/ /1MiF/G8nPGtnBrvktk5IHVGxwr/Q5I1VqTOGt/oELuDonjmu/SVV0AOu2/gvU9x B99di7MT1S1r4mr0pbQOTfF8JVnS9Hz1l5GIweYWwzDqxeQbR0dFch7rZqm8GGoT tJeB6Ao8E1ZEvLEJ6U5ygp9YC71styeCoj1a8ldmwTfnRaKQLwioDqzAec/QzQ1j hS1nG/GpH0iYWoFVeHgpqBSM/qrCH6KmEldzdwJvRTgkOghgo2n+E9AqSTA1ryyd faDhW5+eaQBkHgLhlTt+3KSUgqKACfU= -----END CERTIFICATE-----Generated at Wed May 13 14:20:51 2026 by rpki-client