$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa File: 4894f3df-aa63-3248-9184-fd1db1926b55.roa (raw, json) Hash identifier: JYzTk30Qy6kIW5QREY7DUIJc+aT/vO2XNZtVT/cvp1U= Subject key identifier: 14:B8:21:45:DD:E8:06:BC:F0:B4:DB:E4:2B:82:63:2D:82:AD:31:B9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D47C5067140A4ADCE75943400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 199527 IP address blocks: 209.213.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:06:71:40:a4:ad:ce:75:94:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=286968bb-cda4-4aac-932d-1ae4a5317c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fd:53:7d:6b:8c:42:c2:59:f6:1a:3e:cc:22: e6:86:71:af:97:33:44:1f:3b:09:f7:ef:bc:5a:38: c3:0d:e1:e0:0f:57:1e:af:8e:af:7e:da:54:3c:26: 57:85:8a:59:cc:97:01:d8:a4:a7:c4:e5:8e:ed:ad: f8:a5:eb:c0:b7:bd:14:df:12:84:b5:22:2b:52:17: 06:b6:6c:4e:62:f7:2b:30:4b:38:e0:b3:3a:75:9a: 36:20:5b:c7:ae:d9:05:52:2b:bd:02:e8:5d:e3:0a: 58:cf:0e:77:6e:f5:b6:d3:d8:05:3d:36:52:9e:c3: aa:dd:65:09:46:21:a9:36:fa:60:d2:c8:25:8b:38: 44:f9:f1:72:03:e6:ce:37:e9:8e:c3:7c:a4:1d:fa: 55:28:2a:3c:5c:9c:07:cc:3c:20:aa:18:11:6f:ab: be:01:30:5e:05:09:0c:45:9a:a9:ee:c6:c5:99:46: 22:be:25:af:fe:f6:82:da:34:b7:ec:12:5d:6e:dd: 31:7d:f4:2b:9c:7e:0c:0b:2a:ba:b1:f0:dc:bd:21: 23:76:7f:bb:fb:56:6f:fd:34:47:1b:85:6e:78:63: a3:b4:d9:01:35:c9:69:cb:43:7b:70:b0:e9:aa:7b: 91:0e:5e:64:af:0b:20:64:b1:31:4b:f6:f7:2d:1b: 4f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B8:21:45:DD:E8:06:BC:F0:B4:DB:E4:2B:82:63:2D:82:AD:31:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.213.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:66:1d:37:9d:e6:ad:e9:85:01:30:8f:5c:76:66:cf:7b:81: bf:3d:0c:f6:61:f7:8c:71:9c:20:18:81:f1:dd:68:87:56:44: 33:7e:ec:fd:0f:65:36:1e:dc:40:f3:09:1c:2c:a5:27:44:d0: 43:bb:37:0c:2b:a1:f5:20:f7:5c:83:a5:5b:dc:b2:cb:e7:a4: 60:e7:f8:c9:a6:06:1f:b6:00:b8:9d:f7:2d:96:fc:9b:ec:ec: f8:17:5d:09:f3:57:e0:70:3f:2c:2e:46:79:60:89:4c:b7:33: 82:ca:91:9c:8a:8a:dc:a8:88:88:7e:2d:24:d0:9c:b1:4c:70: 12:76:b3:f9:0b:9a:c3:5b:49:53:00:8e:36:6b:cc:ea:05:b0: 98:c3:5c:2d:72:ac:f8:93:df:f1:4a:03:cf:aa:7d:7a:54:70: 7b:18:c4:cb:c8:3a:57:bf:27:dc:cc:f5:10:6d:3f:0a:5e:bf: 4f:cb:ef:9c:21:cb:00:46:a5:ac:a2:76:78:b5:c5:6a:23:a2: 1e:68:47:53:67:22:4e:b5:a4:15:80:1a:37:16:06:17:15:09: 45:9a:88:a9:bb:d8:47:23:37:d4:eb:ea:a6:a1:17:07:58:81: 64:d6:41:50:e6:e1:e5:fb:19:0e:26:c9:12:a4:b7:e6:a1:13: 20:d0:a0:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQZxQKStznWUNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk Mjg2OTY4YmItY2RhNC00YWFjLTkzMmQtMWFlNGE1MzE3YzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf1TfWuMQsJZ9ho+zCLmhnGvlzNEHzsJ9++8 WjjDDeHgD1cer46vftpUPCZXhYpZzJcB2KSnxOWO7a34pevAt70U3xKEtSIrUhcG tmxOYvcrMEs44LM6dZo2IFvHrtkFUiu9Auhd4wpYzw53bvW209gFPTZSnsOq3WUJ RiGpNvpg0sglizhE+fFyA+bON+mOw3ykHfpVKCo8XJwHzDwgqhgRb6u+ATBeBQkM RZqp7sbFmUYiviWv/vaC2jS37BJdbt0xffQrnH4MCyq6sfDcvSEjdn+7+1Zv/TRH G4VueGOjtNkBNclpy0N7cLDpqnuRDl5krwsgZLExS/b3LRtPLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBS4IUXd6Aa88LTb5CuCYy2CrTG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDg5NGYzZGYtYWE2My0z MjQ4LTkxODQtZmQxZGIxOTI2YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0dXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9mHTed5q3phQEwj1x2Zs97gb89DPZh94xxnCAYgfHdaIdWRDN+7P0P ZTYe3EDzCRwspSdE0EO7NwwrofUg91yDpVvcssvnpGDn+MmmBh+2ALid9y2W/Jvs 7PgXXQnzV+BwPywuRnlgiUy3M4LKkZyKityoiIh+LSTQnLFMcBJ2s/kLmsNbSVMA jjZrzOoFsJjDXC1yrPiT3/FKA8+qfXpUcHsYxMvIOle/J9zM9RBtPwpev0/L75wh ywBGpayidni1xWojoh5oR1NnIk61pBWAGjcWBhcVCUWaiKm72EcjN9Tr6qahFwdY gWTWQVDm4eX7GQ4myRKkt+ahEyDQoBE= -----END CERTIFICATE-----Generated at Thu Mar 26 20:14:03 2026 by rpki-client