$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa File: 854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa (raw, json) Hash identifier: THO0OTqA2P7Vr4oUY89Vt9zhdVOORhanHpYH5sZ6TJA= Subject key identifier: 1F:5E:EC:52:E8:71:F4:4A:77:E7:2B:B0:8E:D9:D3:A6:50:AB:7C:04 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D386A27A5C6AD590BE04C0900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 397630 IP address blocks: 209.101.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:27:a5:c6:ad:59:0b:e0:4c:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=a4d0cf57-4602-4f65-8fa4-cc37847890b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:71:11:da:0a:c9:89:8a:12:52:31:7a:4f: 4a:35:eb:28:c8:f2:7f:1b:56:16:3b:96:5b:af:c3: 9d:08:91:aa:67:7a:42:21:87:f1:0c:13:99:6e:77: db:d1:84:92:1b:50:82:2b:26:04:30:74:65:67:23: c6:a7:35:80:26:a1:7f:0f:f0:ac:59:47:a4:50:0a: 0a:ad:7f:d9:7b:ff:ab:05:ed:26:88:bd:f8:22:53: e1:f9:d6:0b:11:5a:ae:a1:88:c1:06:8e:e7:e3:f2: 7d:a1:2e:34:b3:2a:2f:aa:4e:33:4d:d7:b5:d9:b7: f0:44:e5:34:54:8e:5d:3b:ac:5f:dc:16:6e:25:c4: d6:74:c3:a0:62:34:a7:a7:bb:ac:37:d4:cd:47:fe: e6:aa:f4:6d:88:f1:20:6e:e6:e2:de:37:b2:8e:4c: 31:68:43:94:d2:8a:1e:8c:a6:eb:75:54:6d:23:35: 3d:dd:d6:e1:9a:eb:a7:65:29:8c:c9:1d:0a:5d:77: 47:29:69:4d:a1:b5:b2:e6:1d:5b:81:54:e5:fd:f1: 1b:2b:41:34:ec:04:91:58:0c:ca:40:13:2d:07:07: ec:fa:b0:80:63:39:32:2f:3d:60:c4:d2:fb:6c:b0: f7:82:05:05:f2:6f:25:cc:94:6f:25:78:1f:d2:30: ab:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5E:EC:52:E8:71:F4:4A:77:E7:2B:B0:8E:D9:D3:A6:50:AB:7C:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:7c:be:4b:f9:bf:4e:2d:ab:b0:73:0b:92:f0:c4:2b:56:c7: ba:c5:a0:77:bf:7d:fc:4b:58:9d:8a:95:41:d9:1d:91:32:eb: 11:56:30:05:dd:4c:c0:c3:31:dc:f1:85:26:03:99:50:1d:c4: c5:66:02:74:6a:e5:d5:e8:a4:3e:d4:e7:47:3d:85:79:81:16: f3:68:07:8c:d4:8a:d2:66:66:03:a0:85:ab:e7:15:5e:70:bc: 39:9d:bd:a1:04:94:94:da:55:04:dd:2b:e5:5f:17:4e:4b:7b: c3:b0:71:76:b0:14:55:df:73:f7:c6:3f:fc:ad:d2:78:d2:b8: 0a:a4:c1:02:b3:4a:c5:18:ac:bb:39:25:f1:e0:7f:37:62:8c: 90:ed:c1:fe:ac:61:19:76:1d:14:0c:3f:91:82:05:5e:7f:10: 91:c0:59:0d:1a:85:8b:24:cb:09:57:33:36:38:b7:2e:f4:ec: 36:9c:0d:06:0b:3f:06:66:fa:2a:98:d5:f2:e2:ae:07:91:ae: db:55:c9:ff:e2:0f:ea:fc:c4:12:31:de:ea:c5:d6:4c:47:bd: 4c:95:0c:f3:7f:22:44:2a:82:7b:31:97:03:1b:bd:80:a0:80: 7d:3d:e5:e1:a4:a9:eb:b9:f4:f8:49:ed:8c:2d:73:bf:89:c2: b8:f8:66:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04aielxq1ZC+BMCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YTRkMGNmNTctNDYwMi00ZjY1LThmYTQtY2MzNzg0Nzg5MGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIVxEdoKyYmKElIxek9KNesoyPJ/G1YWO5Zb r8OdCJGqZ3pCIYfxDBOZbnfb0YSSG1CCKyYEMHRlZyPGpzWAJqF/D/CsWUekUAoK rX/Ze/+rBe0miL34IlPh+dYLEVquoYjBBo7n4/J9oS40syovqk4zTde12bfwROU0 VI5dO6xf3BZuJcTWdMOgYjSnp7usN9TNR/7mqvRtiPEgbubi3jeyjkwxaEOU0ooe jKbrdVRtIzU93dbhmuunZSmMyR0KXXdHKWlNobWy5h1bgVTl/fEbK0E07ASRWAzK QBMtBwfs+rCAYzkyLz1gxNL7bLD3ggUF8m8lzJRvJXgf0jCrWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9e7FLocfRKd+crsI7Z06ZQq3wEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODU0ZmNhODUtYzVlYi0z YjRhLWFlZTYtOTJiOTRjODNlOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKx8vkv5v04tq7BzC5LwxCtWx7rFoHe/ffxLWJ2KlUHZHZEy6xFWMAXd TMDDMdzxhSYDmVAdxMVmAnRq5dXopD7U50c9hXmBFvNoB4zUitJmZgOghavnFV5w vDmdvaEElJTaVQTdK+VfF05Le8OwcXawFFXfc/fGP/yt0njSuAqkwQKzSsUYrLs5 JfHgfzdijJDtwf6sYRl2HRQMP5GCBV5/EJHAWQ0ahYskywlXMzY4ty707DacDQYL PwZm+iqY1fLirgeRrttVyf/iD+r8xBIx3urF1kxHvUyVDPN/IkQqgnsxlwMbvYCg gH095eGkqeu59PhJ7Ywtc7+Jwrj4Zss= -----END CERTIFICATE-----Generated at Thu Mar 26 06:03:52 2026 by rpki-client