$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e91139a-1899-321a-a9d8-e06b5d529e8c.roa File: 7e91139a-1899-321a-a9d8-e06b5d529e8c.roa (raw, json) Hash identifier: 3fHuOGzgmOI43JZkpQ3SpqARzGMaxr/dOTc8OZYCctY= Subject key identifier: 13:B0:7D:D4:76:BE:AC:C6:DF:8C:1F:B6:66:CA:53:D7:D9:C8:40:9A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DAD92D13E898979E35D0BC600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e91139a-1899-321a-a9d8-e06b5d529e8c.roa Signing time: Thu 30 Apr 2026 12:12:14 +0000 ROA not before: Thu 30 Apr 2026 12:12:14 +0000 ROA not after: Wed 29 Jul 2026 12:12:14 +0000 asID: 399955 IP address blocks: 209.101.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:92:d1:3e:89:89:79:e3:5d:0b:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 30 12:12:14 2026 GMT Not After : Jul 29 12:12:14 2026 GMT Subject: CN=f579e1dd-9bb1-4fdb-ba1b-84cb031798ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:4d:c9:ac:29:32:ad:a4:65:1a:51:79:da: c9:a4:ed:2c:76:d6:d8:5d:07:54:df:ef:f4:ba:b1: 37:c0:01:96:4d:c3:5e:5e:a4:7b:fb:68:98:13:e2: 59:c4:4c:92:6d:df:46:ad:a0:69:23:e6:d1:28:81: 0a:52:ed:18:cc:3f:73:11:87:ae:d5:27:28:13:60: aa:b1:e0:dc:ae:00:e1:1e:8d:f0:d5:d2:bd:bb:da: f1:47:28:0d:a1:a9:f8:fc:63:d9:a8:7b:59:14:cc: 97:9b:a6:30:af:b9:da:00:96:eb:42:50:bb:7d:61: 63:66:74:22:27:5f:b0:6d:23:c3:2c:b9:b8:3e:0c: 58:34:4d:f6:02:08:28:e8:4d:be:30:cf:df:65:7f: 0b:e3:3d:13:10:82:cf:9b:26:85:d1:f4:f4:35:af: 10:46:bd:2a:29:88:94:36:e1:1a:e4:11:4e:11:b3: f8:1c:9a:38:fd:38:f2:be:73:9e:6c:45:32:09:96: 17:13:d8:66:ec:11:76:3d:43:51:0c:dc:7a:75:28: 72:f9:66:6f:07:ba:fd:e3:6d:3b:c3:15:13:21:40: d2:3e:1d:b8:5a:25:f4:05:ed:67:0d:4f:3b:d9:c1: 50:8c:49:14:0d:29:bc:7e:09:c0:ca:ae:1a:32:40: b8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B0:7D:D4:76:BE:AC:C6:DF:8C:1F:B6:66:CA:53:D7:D9:C8:40:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e91139a-1899-321a-a9d8-e06b5d529e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:66:10:fb:8d:b9:59:98:14:b2:15:d1:61:b7:cd:6c:31:92: a4:43:6b:ea:72:dc:d2:ba:50:78:b8:99:50:58:bf:54:7a:7e: 36:f9:94:6c:7a:ed:aa:46:83:c9:22:09:b8:7a:86:95:71:e1: d9:6f:f9:a1:02:47:7f:ac:11:b3:b9:5a:c8:21:91:ed:49:35: fc:41:30:9d:82:57:e3:77:35:3e:6f:29:1a:bf:60:68:85:ee: 91:07:8b:bd:68:b6:03:b8:63:8f:e5:47:85:c3:86:e8:b7:d9: fb:02:4f:dc:a5:99:3d:ef:14:fc:c6:6c:92:83:64:7b:b4:28: 50:84:cf:85:11:e5:23:46:1e:35:78:36:ad:ff:55:f8:d4:da: a1:2e:8c:52:ef:aa:6b:fb:e5:3a:a1:08:af:b2:6c:81:2e:73: 0e:0d:f8:d2:b7:40:c9:aa:e7:61:13:e5:f8:90:ea:9e:c2:ca: a7:9f:4b:22:62:0c:c4:04:f3:22:4d:00:64:7f:e3:26:25:5b: c1:af:67:3a:ca:97:45:d4:ce:bd:c9:45:6f:2b:18:e2:61:32: 8e:6d:df:d7:75:ea:b0:be:25:a5:85:7f:24:e9:8c:de:d3:98: da:5d:6a:1e:42:83:64:66:25:96:be:9b:fb:af:46:e3:7c:8b: 27:5f:b5:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tktE+iYl5410LxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQzMDEyMTIxNFoXDTI2MDcyOTEyMTIxNFowLzEtMCsGA1UEAxMk ZjU3OWUxZGQtOWJiMS00ZmRiLWJhMWItODRjYjAzMTc5OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK9NyawpMq2kZRpRedrJpO0sdtbYXQdU3+/0 urE3wAGWTcNeXqR7+2iYE+JZxEySbd9GraBpI+bRKIEKUu0YzD9zEYeu1ScoE2Cq seDcrgDhHo3w1dK9u9rxRygNoan4/GPZqHtZFMyXm6Ywr7naAJbrQlC7fWFjZnQi J1+wbSPDLLm4PgxYNE32Aggo6E2+MM/fZX8L4z0TEILPmyaF0fT0Na8QRr0qKYiU NuEa5BFOEbP4HJo4/TjyvnOebEUyCZYXE9hm7BF2PUNRDNx6dShy+WZvB7r94207 wxUTIUDSPh24WiX0Be1nDU872cFQjEkUDSm8fgnAyq4aMkC4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOwfdR2vqzG34wftmbKU9fZyECaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2U5MTEzOWEtMTg5OS0z MjFhLWE5ZDgtZTA2YjVkNTI5ZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtmEPuNuVmYFLIV0WG3zWwxkqRDa+py3NK6UHi4mVBYv1R6fjb5lGx6 7apGg8kiCbh6hpVx4dlv+aECR3+sEbO5Wsghke1JNfxBMJ2CV+N3NT5vKRq/YGiF 7pEHi71otgO4Y4/lR4XDhui32fsCT9ylmT3vFPzGbJKDZHu0KFCEz4UR5SNGHjV4 Nq3/VfjU2qEujFLvqmv75TqhCK+ybIEucw4N+NK3QMmq52ET5fiQ6p7CyqefSyJi DMQE8yJNAGR/4yYlW8GvZzrKl0XUzr3JRW8rGOJhMo5t39d16rC+JaWFfyTpjN7T mNpdah5Cg2RmJZa+m/uvRuN8iydftVM= -----END CERTIFICATE-----Generated at Tue May 12 21:41:57 2026 by rpki-client