$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa File: 67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa (raw, json) Hash identifier: NUMnsQfpyXp+eNwNMLxe9TrCFzjf288VExRrjoeRyzo= Subject key identifier: CF:FF:FF:4A:19:22:CA:39:1E:AB:BD:82:AF:CF:F2:C5:61:85:86:6C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DBFD0A075BD27E19A0B2F1000 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 401783 IP address blocks: 209.101.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:a0:75:bd:27:e1:9a:0b:2f:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=a68391af-e676-4bef-a636-5b2118cea96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:d7:90:b6:80:bc:07:0e:68:59:a5:95:39: 76:b3:6c:94:43:42:36:fb:ff:92:4d:27:e9:ee:5e: 47:06:cf:ae:25:09:86:ab:19:21:ac:55:fd:db:e0: 5b:74:52:41:c2:3e:9a:a0:06:88:98:0e:7c:67:43: 83:ed:ea:7b:09:2f:f5:5b:07:6b:f5:fd:4f:bd:f7: 52:64:49:ac:59:39:fb:d1:63:b0:14:21:11:05:36: fb:05:01:b2:d4:e8:fd:5c:31:da:46:7f:47:3e:39: 5a:05:fe:d8:87:14:9d:40:3a:66:ca:cc:67:3a:e6: 72:3b:9d:79:66:19:8d:03:be:f4:8e:c0:69:ad:e3: ab:f0:54:96:4f:5f:7d:b2:a4:a8:fd:3d:fb:06:63: 45:e0:46:b3:c3:ee:88:88:a5:c3:03:2f:5d:fa:37: c0:61:93:cc:73:79:ff:1a:c1:e6:92:33:22:93:08: f9:95:47:c7:4b:d8:12:09:92:68:dd:a2:94:c7:ce: 24:e5:6c:85:e7:0e:0e:be:d0:4c:55:0c:32:5b:88: 6a:72:dd:16:7a:af:6d:ec:e6:9d:9e:67:96:20:d5: 55:21:e3:0e:89:7e:0b:b7:f6:5f:77:1e:0d:03:7a: 13:54:2c:7c:00:da:8f:8c:8e:2f:ab:b2:51:45:6d: d0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FF:FF:4A:19:22:CA:39:1E:AB:BD:82:AF:CF:F2:C5:61:85:86:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7e:52:0c:a2:2f:f9:0f:80:11:e6:22:f5:24:0f:ea:35:b1: 93:75:ef:7f:b0:5f:e4:fa:ad:05:38:ac:0b:e0:88:de:04:26: 6d:39:b0:bf:a2:6f:3b:87:ab:af:3a:0b:3b:2b:61:a6:f2:0d: 89:5a:87:6a:fa:e2:3f:fb:ac:0d:5c:2b:07:c8:d7:a3:2f:aa: 99:f7:ad:2d:9d:7d:ec:4f:f0:5d:15:fa:81:20:bd:14:6a:eb: 27:e4:6c:38:3f:c9:b6:fe:2e:d0:06:18:fa:af:2d:70:56:e4: 3b:89:fa:be:68:cc:dd:fc:5b:5f:fc:34:1d:0f:12:07:d9:d1: d6:37:19:a1:85:2a:77:dc:a6:08:d3:69:8d:44:c7:c6:87:83: 65:74:c1:cf:1b:c5:36:37:af:8b:5e:43:38:c7:97:31:b3:4f: ba:be:7b:86:c6:4e:26:93:cc:91:67:f7:a1:6a:48:8c:cd:83: 10:07:26:85:f9:1b:01:30:0a:c9:7d:f3:39:8a:b5:38:66:e0: bc:8c:19:5f:d9:2e:93:48:81:ab:15:09:7d:87:02:b4:a4:5b: 79:fd:a4:67:ec:b5:e3:27:8a:a2:71:d0:04:bd:3a:14:fd:0d: c3:a6:84:9a:9e:5b:01:b1:60:e1:49:69:8b:fe:38:b0:42:42: 94:72:af:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0KB1vSfhmgsvEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk YTY4MzkxYWYtZTY3Ni00YmVmLWE2MzYtNWIyMTE4Y2VhOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCvXkLaAvAcOaFmllTl2s2yUQ0I2+/+STSfp 7l5HBs+uJQmGqxkhrFX92+BbdFJBwj6aoAaImA58Z0OD7ep7CS/1Wwdr9f1PvfdS ZEmsWTn70WOwFCERBTb7BQGy1Oj9XDHaRn9HPjlaBf7YhxSdQDpmysxnOuZyO515 ZhmNA770jsBpreOr8FSWT199sqSo/T37BmNF4Eazw+6IiKXDAy9d+jfAYZPMc3n/ GsHmkjMikwj5lUfHS9gSCZJo3aKUx84k5WyF5w4OvtBMVQwyW4hqct0Weq9t7Oad nmeWINVVIeMOiX4Lt/Zfdx4NA3oTVCx8ANqPjI4vq7JRRW3QxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM///0oZIso5Hqu9gq/P8sVhhYZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjczNDFlZjEtOGVhNy0z NmZhLWFiNmQtZTc5Y2UyMGFmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR+UgyiL/kPgBHmIvUkD+o1sZN173+wX+T6rQU4rAvgiN4EJm05sL+i bzuHq686CzsrYabyDYlah2r64j/7rA1cKwfI16Mvqpn3rS2dfexP8F0V+oEgvRRq 6yfkbDg/ybb+LtAGGPqvLXBW5DuJ+r5ozN38W1/8NB0PEgfZ0dY3GaGFKnfcpgjT aY1Ex8aHg2V0wc8bxTY3r4teQzjHlzGzT7q+e4bGTiaTzJFn96FqSIzNgxAHJoX5 GwEwCsl98zmKtThm4LyMGV/ZLpNIgasVCX2HArSkW3n9pGfsteMniqJx0AS9OhT9 DcOmhJqeWwGxYOFJaYv+OLBCQpRyr08= -----END CERTIFICATE-----Generated at Wed May 13 10:46:49 2026 by rpki-client