$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4811f8b7-58fb-3229-9ffa-92bea6971ce3.roa File: 4811f8b7-58fb-3229-9ffa-92bea6971ce3.roa (raw, json) Hash identifier: Z3tDu5ElMo14e4euZHJIzObwhz2IDbaYz8wjfufeFXI= Subject key identifier: 85:DF:8E:53:23:16:04:2F:97:0E:02:0B:4F:62:B3:A5:38:34:D5:EC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0BDCFF237F8E0B46F9099680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4811f8b7-58fb-3229-9ffa-92bea6971ce3.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 400031 IP address blocks: 209.101.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dc:ff:23:7f:8e:0b:46:f9:09:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=85c7b4ca-d07c-4981-80f3-1eb5aaa20387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:74:a7:a9:d7:45:2a:28:40:44:02:06:4b:e3: bf:fb:a2:25:77:7f:c8:1c:29:51:4f:25:4a:6b:88: a5:3a:51:df:65:31:79:f8:ed:a9:98:ea:65:c3:75: 08:96:2a:03:b5:d2:5b:b4:81:53:49:67:05:5b:13: b7:a2:63:b6:37:f9:c7:3c:35:8e:0c:e5:75:bd:4e: 58:2c:c4:6c:81:8d:0a:11:42:68:67:60:af:31:b3: 0a:fe:d3:49:f8:74:95:02:ef:a4:ff:68:56:43:46: 18:a6:e6:3b:d7:3f:84:18:3a:d0:9c:1d:a1:69:38: 00:25:78:48:ae:08:0f:9d:21:47:4d:19:06:1b:01: ae:1c:8c:8e:c4:60:23:fa:e2:ed:7a:2f:6e:5b:62: e6:57:7e:57:61:37:57:1a:5f:3c:f9:6d:a9:cc:74: cb:bb:ae:7a:65:0e:f2:2a:90:fc:f2:8d:5b:59:82: 44:0e:67:32:5a:45:fc:95:77:db:d2:57:80:f2:55: c7:d4:5d:1b:84:57:37:82:10:9c:4d:46:13:52:d8: e9:f8:42:87:c1:ea:19:f2:01:bd:e7:23:01:b5:a0: 1b:30:f4:c8:bc:07:9f:c0:24:97:4b:9b:1c:f1:29: 94:96:ef:e6:75:be:37:09:8a:c3:45:d1:9a:e3:90: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DF:8E:53:23:16:04:2F:97:0E:02:0B:4F:62:B3:A5:38:34:D5:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4811f8b7-58fb-3229-9ffa-92bea6971ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:38:16:2f:ea:68:9b:16:fa:28:7f:56:18:c8:2f:20:7c:5e: ad:48:e6:d3:9a:4a:0e:ac:2d:60:fd:b3:ae:f6:d0:0a:ca:72: d3:92:3f:4f:be:a9:fe:d3:c6:26:9c:9b:11:a6:fa:59:2c:61: d5:38:e1:d0:d3:a9:a3:85:22:96:34:12:b6:5b:b6:67:d9:54: 46:c6:a8:b0:c8:9b:72:0a:b9:8c:ec:87:f2:89:61:ec:21:58: 9a:7f:45:5e:3f:21:62:cd:90:8e:7b:df:9c:2b:01:dd:22:72: 58:bf:09:df:df:de:68:c1:68:a3:39:95:1b:ec:bf:bd:00:2e: 36:21:12:22:e6:e8:70:d2:14:a0:c9:9f:ec:60:97:1c:c5:31: 22:e8:c0:66:bd:2d:36:1d:4b:e6:0f:27:c7:c8:f3:87:67:bf: 63:bb:59:55:4e:79:13:1a:f0:db:fe:7a:d0:ce:45:e5:e7:f9: 9d:d3:00:cd:21:39:db:d4:10:3f:2c:3b:4d:9b:45:8c:04:10: 3a:5d:ef:15:0c:a0:67:41:9e:71:a0:db:22:0f:51:20:7d:d4: 8a:42:e6:16:eb:d8:95:7c:ed:d7:29:22:90:bd:ca:6c:c1:a3: 21:49:e6:d6:d9:38:58:d5:19:d8:d7:a1:d7:ca:d8:9f:17:cf: 30:85:e5:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3P8jf44LRvkJloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk ODVjN2I0Y2EtZDA3Yy00OTgxLTgwZjMtMWViNWFhYTIwMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nSnqddFKihARAIGS+O/+6Ild3/IHClRTyVK a4ilOlHfZTF5+O2pmOplw3UIlioDtdJbtIFTSWcFWxO3omO2N/nHPDWODOV1vU5Y LMRsgY0KEUJoZ2CvMbMK/tNJ+HSVAu+k/2hWQ0YYpuY71z+EGDrQnB2haTgAJXhI rggPnSFHTRkGGwGuHIyOxGAj+uLtei9uW2LmV35XYTdXGl88+W2pzHTLu656ZQ7y KpD88o1bWYJEDmcyWkX8lXfb0leA8lXH1F0bhFc3ghCcTUYTUtjp+EKHweoZ8gG9 5yMBtaAbMPTIvAefwCSXS5sc8SmUlu/mdb43CYrDRdGa45BziQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXfjlMjFgQvlw4CC09is6U4NNXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDgxMWY4YjctNThmYi0z MjI5LTlmZmEtOTJiZWE2OTcxY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WW8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA84Fi/qaJsW+ih/VhjILyB8Xq1I5tOaSg6sLWD9s6720ArKctOSP0++ qf7TxiacmxGm+lksYdU44dDTqaOFIpY0ErZbtmfZVEbGqLDIm3IKuYzsh/KJYewh WJp/RV4/IWLNkI5735wrAd0icli/Cd/f3mjBaKM5lRvsv70ALjYhEiLm6HDSFKDJ n+xglxzFMSLowGa9LTYdS+YPJ8fI84dnv2O7WVVOeRMa8Nv+etDOReXn+Z3TAM0h OdvUED8sO02bRYwEEDpd7xUMoGdBnnGg2yIPUSB91IpC5hbr2JV87dcpIpC9ymzB oyFJ5tbZOFjVGdjXodfK2J8XzzCF5VQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:33 2026 by rpki-client