$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa File: 4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa (raw, json) Hash identifier: rOJHsD446V64hPkvjqEfbRqhMZM+2tQMHFkia71rWkE= Subject key identifier: FD:E5:23:07:68:45:1D:BB:79:42:15:27:C7:2E:AC:60:0D:8F:19:A6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DBFD02CBE18B42A7D11244B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 401783 IP address blocks: 209.101.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:2c:be:18:b4:2a:7d:11:24:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=f404735d-1c6e-49c6-b7f6-633d6e09310a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:95:14:8d:54:b5:7e:2b:ac:ba:89:33:f6: 6c:3c:5b:e7:f0:c2:ab:18:10:82:f7:c2:b4:80:70: ab:75:c7:b0:1e:84:f6:69:f0:36:c4:4d:1b:e9:af: 13:2b:5f:22:df:0f:4e:b8:1f:2f:bd:1a:49:36:12: 50:47:56:ff:f7:3a:75:8f:9d:1c:83:de:ad:c7:82: d7:c6:b9:ca:e5:0f:13:c3:7e:64:5a:c6:8a:2d:aa: 94:9c:89:aa:0b:d9:5b:23:2f:97:e4:7c:3a:5c:b8: a0:a5:7d:50:05:7c:56:3f:bc:c2:77:8f:25:f2:83: 10:32:fd:36:79:f1:85:64:d5:e7:43:d6:bf:12:30: df:ba:64:3d:0c:b6:72:07:f6:3b:ab:e1:c8:e3:80: 7f:d6:94:39:8e:fb:f9:b4:79:93:a4:01:c8:32:42: a6:90:a7:fd:43:96:d9:42:2a:69:fb:c8:bc:e0:8c: 97:f9:a9:a8:89:b8:61:01:51:84:dc:12:08:43:28: a7:b9:1b:57:8d:20:e8:23:bc:bd:84:05:78:d1:3e: 03:01:65:ec:41:b7:62:72:1c:0f:28:7c:3e:75:0d: 90:2a:df:56:05:eb:22:b7:68:6b:1b:93:b2:22:4a: 1d:83:b9:a8:77:83:d1:5c:8f:ae:45:e3:6c:e3:63: 54:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E5:23:07:68:45:1D:BB:79:42:15:27:C7:2E:AC:60:0D:8F:19:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4dbfba96-ed7b-3dee-a614-530faaf6fca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a3:89:b4:fe:58:79:d5:ef:99:09:25:8b:3b:cd:55:15:a2: a5:2d:b9:de:8c:53:38:83:59:3e:8e:eb:37:85:a7:bb:a4:ad: 40:b7:06:7f:a9:c8:9c:7d:e7:ce:d2:31:18:e5:49:67:54:95: 3d:4a:95:d4:3d:01:30:38:57:83:af:66:f9:b0:a7:6c:8b:77: c6:83:c9:f8:91:5d:5c:fe:f9:1b:51:4f:4e:67:77:24:fc:d2: 5e:ef:79:84:25:12:12:4b:4d:c1:3a:2b:9f:d0:77:46:c2:69: 3b:63:4f:73:25:17:cf:98:66:b4:f2:f3:2c:66:e7:fe:31:22: a7:af:c5:a7:0a:c0:9b:8f:77:7f:7c:cb:31:e7:a5:86:40:c3: 97:4e:19:1b:a4:fe:31:e5:ef:c1:f1:27:0f:64:9b:18:45:00: 07:e7:46:2a:94:45:fd:c3:25:ce:98:7a:89:bc:6d:84:1d:e0: 68:bf:59:28:d5:aa:09:bb:bb:de:a9:fb:0b:09:3c:f2:e4:a5: 6e:e8:ae:d6:b1:06:53:a4:b9:42:a9:c3:4e:98:ad:02:d9:8b: 45:52:77:d3:c9:ba:f4:86:85:a0:28:d0:de:3c:c7:c2:14:f1: 1f:d2:fd:9e:73:5c:40:9c:b6:b2:92:01:de:ee:a8:dd:66:ce: 6b:a2:a8:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0Cy+GLQqfREkS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk ZjQwNDczNWQtMWM2ZS00OWM2LWI3ZjYtNjMzZDZlMDkzMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoGVFI1UtX4rrLqJM/ZsPFvn8MKrGBCC98K0 gHCrdcewHoT2afA2xE0b6a8TK18i3w9OuB8vvRpJNhJQR1b/9zp1j50cg96tx4LX xrnK5Q8Tw35kWsaKLaqUnImqC9lbIy+X5Hw6XLigpX1QBXxWP7zCd48l8oMQMv02 efGFZNXnQ9a/EjDfumQ9DLZyB/Y7q+HI44B/1pQ5jvv5tHmTpAHIMkKmkKf9Q5bZ Qipp+8i84IyX+amoibhhAVGE3BIIQyinuRtXjSDoI7y9hAV40T4DAWXsQbdichwP KHw+dQ2QKt9WBesit2hrG5OyIkodg7mod4PRXI+uReNs42NUEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3lIwdoRR27eUIVJ8curGANjxmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGRiZmJhOTYtZWQ3Yi0z ZGVlLWE2MTQtNTMwZmFhZjZmY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmjibT+WHnV75kJJYs7zVUVoqUtud6MUziDWT6O6zeFp7ukrUC3Bn+p yJx9587SMRjlSWdUlT1KldQ9ATA4V4OvZvmwp2yLd8aDyfiRXVz++RtRT05ndyT8 0l7veYQlEhJLTcE6K5/Qd0bCaTtjT3MlF8+YZrTy8yxm5/4xIqevxacKwJuPd398 yzHnpYZAw5dOGRuk/jHl78HxJw9kmxhFAAfnRiqURf3DJc6Yeom8bYQd4Gi/WSjV qgm7u96p+wsJPPLkpW7ortaxBlOkuUKpw06YrQLZi0VSd9PJuvSGhaAo0N48x8IU 8R/S/Z5zXECctrKSAd7uqN1mzmuiqLQ= -----END CERTIFICATE-----Generated at Wed May 13 10:51:28 2026 by rpki-client