$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78367323-f44c-32a6-a102-2c55668cc4a1.roa File: 78367323-f44c-32a6-a102-2c55668cc4a1.roa (raw, json) Hash identifier: 2xxYuZsrY/bM1S+MOAoj9036I96dDoM/ooKq2lMLDmc= Subject key identifier: 9A:66:06:DA:C5:2C:5E:7F:E6:11:A0:60:2A:CC:66:F7:11:B5:38:54 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0BDD1D720E5DCD226C31AC40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78367323-f44c-32a6-a102-2c55668cc4a1.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 400031 IP address blocks: 209.101.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:1d:72:0e:5d:cd:22:6c:31:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=9e87c7b7-dd4d-4351-93d7-c8b9ec907269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:68:d5:68:92:da:c1:4a:16:d1:0d:e3:76:e7: 21:52:b1:e6:9c:80:00:95:07:23:70:9a:3d:06:e5: 45:03:f8:d1:d8:f7:ec:8c:53:ae:86:09:e3:85:de: b2:cd:b2:ad:60:1d:42:d6:44:5e:0c:e6:29:c3:45: 4a:72:45:6e:59:64:df:23:cb:cb:73:99:2a:63:2a: 40:93:4b:0c:e8:f4:39:3d:b7:be:c7:d8:e4:3d:a3: bf:cf:39:93:f0:b1:8b:3d:23:b6:c5:6c:f1:e9:e9: 5f:00:9a:95:10:0b:a7:b7:d7:d2:0f:c3:50:a0:3c: d8:71:07:91:67:71:6a:e9:c9:b0:c2:b6:93:43:e9: 34:c9:8e:d6:70:f8:02:cb:4e:c0:03:bb:23:cf:a7: 9d:dc:66:14:0c:7a:b1:23:c9:ad:3a:d3:ee:8e:93: b9:f5:8f:84:a2:45:78:c8:1a:32:ed:43:60:2e:e6: 8d:6e:50:18:c7:dd:df:26:b8:2a:e9:00:a6:01:8e: 0a:99:0f:80:80:b0:6f:27:a1:ce:62:ca:ee:99:08: ba:55:47:92:8c:5c:07:54:ce:2e:10:65:f4:bc:d0: 13:59:af:bc:e9:b6:65:d8:0e:4f:ff:95:1b:dc:d7: 77:01:6a:53:9c:b5:32:25:43:9d:9b:64:29:3a:a6: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:66:06:DA:C5:2C:5E:7F:E6:11:A0:60:2A:CC:66:F7:11:B5:38:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78367323-f44c-32a6-a102-2c55668cc4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:da:c5:f5:5f:76:a9:f7:56:b7:be:53:ba:b6:bf:30:47:68: 3a:e3:08:71:f8:1d:14:1b:7b:91:9e:4a:83:b6:fc:f6:30:d0: a2:81:dc:83:cf:e6:69:4f:b1:e2:f3:c2:2f:e0:4e:1d:e6:07: 70:86:64:4e:00:76:d3:82:b1:e8:5e:cb:05:49:96:42:6e:ce: 93:f6:5a:f4:a1:b7:75:f1:fa:49:40:1f:1d:6e:80:82:4a:fe: 70:ff:d7:a3:8a:bc:a0:73:a4:1d:27:fe:86:b3:c0:77:76:bc: 2e:0c:50:77:c7:56:cf:9f:3a:26:08:5c:30:5c:5a:40:18:23: a8:32:dd:92:26:16:cc:7a:a8:6b:e4:92:0c:7c:fb:2d:d2:a3: a8:c8:9b:63:e8:e8:84:71:38:16:14:65:23:23:b3:4d:e7:79: e6:42:3a:a9:98:33:81:e1:53:47:cf:b8:2e:0b:82:d6:8d:90: 6c:99:b9:ad:66:5d:7e:90:4f:b6:41:85:02:9a:d6:44:14:0f: 17:14:07:1b:91:8d:a5:99:4c:b8:3a:e3:ad:5b:32:32:37:1a: 46:3a:e2:a3:10:61:9e:30:e2:ed:2a:d1:d2:8d:aa:e7:2b:3d: b9:21:39:c9:93:f9:eb:71:21:0b:27:82:9f:84:ea:8d:19:d4: 63:b8:76:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3R1yDl3NImwxrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk OWU4N2M3YjctZGQ0ZC00MzUxLTkzZDctYzhiOWVjOTA3MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWjVaJLawUoW0Q3jduchUrHmnIAAlQcjcJo9 BuVFA/jR2PfsjFOuhgnjhd6yzbKtYB1C1kReDOYpw0VKckVuWWTfI8vLc5kqYypA k0sM6PQ5Pbe+x9jkPaO/zzmT8LGLPSO2xWzx6elfAJqVEAunt9fSD8NQoDzYcQeR Z3Fq6cmwwraTQ+k0yY7WcPgCy07AA7sjz6ed3GYUDHqxI8mtOtPujpO59Y+EokV4 yBoy7UNgLuaNblAYx93fJrgq6QCmAY4KmQ+AgLBvJ6HOYsrumQi6VUeSjFwHVM4u EGX0vNATWa+86bZl2A5P/5Ub3Nd3AWpTnLUyJUOdm2QpOqZMUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpmBtrFLF5/5hGgYCrMZvcRtThUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzgzNjczMjMtZjQ0Yy0z MmE2LWExMDItMmM1NTY2OGNjNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7axfVfdqn3Vre+U7q2vzBHaDrjCHH4HRQbe5GeSoO2/PYw0KKB3IPP 5mlPseLzwi/gTh3mB3CGZE4AdtOCseheywVJlkJuzpP2WvSht3Xx+klAHx1ugIJK /nD/16OKvKBzpB0n/oazwHd2vC4MUHfHVs+fOiYIXDBcWkAYI6gy3ZImFsx6qGvk kgx8+y3So6jIm2Po6IRxOBYUZSMjs03neeZCOqmYM4HhU0fPuC4LgtaNkGyZua1m XX6QT7ZBhQKa1kQUDxcUBxuRjaWZTLg6461bMjI3GkY64qMQYZ4w4u0q0dKNqucr PbkhOcmT+etxIQsngp+E6o0Z1GO4dok= -----END CERTIFICATE-----Generated at Thu Mar 26 19:50:42 2026 by rpki-client