$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/851de8d9-2750-3806-9435-cfbb2f36af2c.roa File: 851de8d9-2750-3806-9435-cfbb2f36af2c.roa (raw, json) Hash identifier: F3v5IVrpA/uEcoBwrE/yv4ToOHrpaDUrh2rh5Sqo0ns= Subject key identifier: 6A:CA:A7:2F:AC:6A:5F:7A:F9:E4:A5:1E:66:06:9A:7D:F2:92:16:9F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DBFD07975E115421EF1407880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/851de8d9-2750-3806-9435-cfbb2f36af2c.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 401783 IP address blocks: 209.101.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:79:75:e1:15:42:1e:f1:40:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=0d517dc8-5f84-4183-9764-aa7fa27aa3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b9:b8:5c:79:ac:fc:dc:4f:c2:f1:2f:2e:7b: c0:3e:04:6d:53:b4:fa:8d:39:5c:19:cf:db:b3:f2: 43:6a:ba:f2:99:8c:35:07:91:53:f8:14:a1:d2:65: d2:61:a1:92:dd:89:2f:a9:ef:f9:b8:f8:ac:37:f7: db:9a:bc:64:4a:e4:8e:03:84:64:b1:95:ac:2e:26: 13:5c:83:0f:eb:a6:7b:04:bb:22:15:40:e7:93:87: d5:87:ec:27:2d:61:3c:35:cf:1f:62:17:07:fc:f2: a5:e4:85:2b:f7:82:94:06:3e:32:38:1a:04:41:4e: 8a:1c:0a:c9:46:89:78:12:f3:c8:c5:83:82:3d:d5: c0:31:a6:e6:a1:98:6d:3e:fd:97:26:57:93:4d:69: e4:28:20:3e:08:91:21:5b:32:d5:14:c4:f2:ac:f1: ad:65:62:28:4d:87:e8:a4:d9:66:f9:e3:17:98:04: 08:38:05:1d:6a:99:3a:d3:3a:62:f9:4a:8d:9f:3f: e7:ca:0b:58:b6:70:4a:d1:46:6f:a7:7f:52:7b:58: 58:78:b0:81:fa:43:e5:fd:7f:b1:01:e0:33:be:2c: cc:1a:98:4f:b8:a6:42:42:03:26:c2:5c:18:a9:35: b1:80:19:25:fd:36:93:01:74:9e:4f:77:d8:db:33: dd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CA:A7:2F:AC:6A:5F:7A:F9:E4:A5:1E:66:06:9A:7D:F2:92:16:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/851de8d9-2750-3806-9435-cfbb2f36af2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6f:9c:d0:75:03:a2:7d:03:ef:4e:9b:a4:93:11:f5:c5:4f: 17:5e:90:0a:cc:9c:6d:3d:70:94:e9:82:8f:75:e2:3f:a4:c7: 8b:ef:28:5a:75:a2:04:42:b2:ed:60:2c:ec:25:c8:72:10:cf: d2:18:3e:a1:30:b0:44:b4:8a:38:4c:52:82:09:e6:ca:41:a8: ee:04:d2:d2:ca:d1:c9:67:02:f0:cc:85:81:7e:08:7f:ed:79: e5:52:87:fd:3c:4d:08:b1:d8:9e:b3:70:c7:6d:84:f9:6d:a5: 4a:a2:fc:32:bc:71:af:bc:5a:77:6d:48:fe:3e:68:5a:54:12: 82:02:e8:5a:ce:c7:02:8b:56:94:3f:df:cc:08:e2:93:e2:2e: 75:fd:45:3d:5a:cd:82:99:83:f7:e8:a4:ee:2c:a3:3f:98:9f: 36:55:8c:36:eb:e6:61:45:a5:02:7f:56:22:3a:d3:f3:49:17: 7a:d1:2c:82:3b:c0:05:fa:db:ac:81:fb:f6:10:c8:9f:a5:90: 0c:6c:d7:3f:24:83:5f:e1:e4:38:39:5e:16:0a:19:65:37:b2: d7:57:54:67:1f:b5:02:6d:c5:ab:87:80:7c:f8:9f:18:d8:da: 65:3c:a5:37:a1:e6:7c:dc:8c:d1:bc:b1:92:3f:cc:e1:2b:2c: 3a:fc:d7:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0Hl14RVCHvFAeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk MGQ1MTdkYzgtNWY4NC00MTgzLTk3NjQtYWE3ZmEyN2FhM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrm4XHms/NxPwvEvLnvAPgRtU7T6jTlcGc/b s/JDarrymYw1B5FT+BSh0mXSYaGS3Ykvqe/5uPisN/fbmrxkSuSOA4RksZWsLiYT XIMP66Z7BLsiFUDnk4fVh+wnLWE8Nc8fYhcH/PKl5IUr94KUBj4yOBoEQU6KHArJ Rol4EvPIxYOCPdXAMabmoZhtPv2XJleTTWnkKCA+CJEhWzLVFMTyrPGtZWIoTYfo pNlm+eMXmAQIOAUdapk60zpi+UqNnz/nygtYtnBK0UZvp39Se1hYeLCB+kPl/X+x AeAzvizMGphPuKZCQgMmwlwYqTWxgBkl/TaTAXSeT3fY2zPdgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrKpy+sal96+eSlHmYGmn3ykhafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODUxZGU4ZDktMjc1MC0z ODA2LTk0MzUtY2ZiYjJmMzZhZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhvnNB1A6J9A+9Om6STEfXFTxdekArMnG09cJTpgo914j+kx4vvKFp1 ogRCsu1gLOwlyHIQz9IYPqEwsES0ijhMUoIJ5spBqO4E0tLK0clnAvDMhYF+CH/t eeVSh/08TQix2J6zcMdthPltpUqi/DK8ca+8WndtSP4+aFpUEoIC6FrOxwKLVpQ/ 38wI4pPiLnX9RT1azYKZg/fopO4soz+YnzZVjDbr5mFFpQJ/ViI60/NJF3rRLII7 wAX626yB+/YQyJ+lkAxs1z8kg1/h5Dg5XhYKGWU3stdXVGcftQJtxauHgHz4nxjY 2mU8pTeh5nzcjNG8sZI/zOErLDr81+I= -----END CERTIFICATE-----Generated at Wed May 13 14:19:44 2026 by rpki-client