$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/85c5d8be-0093-3151-9a85-849c44325ecd.roa File: 85c5d8be-0093-3151-9a85-849c44325ecd.roa (raw, json) Hash identifier: Ho28k1XZwLLL0WdkYQEplyuHYRf8skzO8SRGlyscBhY= Subject key identifier: 46:2E:41:F8:33:79:80:0C:B2:4B:1B:16:E7:C4:3A:8C:19:30:AE:21 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DAD975C2EB406EA4B6DE0C300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/85c5d8be-0093-3151-9a85-849c44325ecd.roa Signing time: Thu 30 Apr 2026 12:21:23 +0000 ROA not before: Thu 30 Apr 2026 12:21:23 +0000 ROA not after: Wed 29 Jul 2026 12:21:23 +0000 asID: 6079 IP address blocks: 209.101.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:97:5c:2e:b4:06:ea:4b:6d:e0:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 30 12:21:23 2026 GMT Not After : Jul 29 12:21:23 2026 GMT Subject: CN=1b0be63d-ef9e-453d-8727-eedf6780d4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:37:35:d4:03:e6:bf:63:f7:cf:4b:4e:f6:b9: 81:04:94:cc:c9:8f:b4:90:81:ba:f4:4b:95:47:9a: f2:18:b8:72:82:d8:bb:76:1b:9a:eb:18:81:22:0d: ed:ed:8c:85:ba:3c:31:f4:a7:d4:40:20:15:eb:2a: 94:40:df:dc:cb:72:3f:75:53:f8:e6:84:0a:d9:de: d5:d2:a1:40:8d:d8:b0:4a:27:bb:dc:d6:6b:e0:4b: 79:dc:3b:2d:da:5c:ad:32:41:ae:09:c5:1a:29:3f: 85:ed:b4:78:9d:62:47:1e:7f:71:52:79:49:03:61: f6:7c:bb:3f:8f:d9:4a:fd:ab:98:0f:ba:cf:09:36: 00:09:74:60:34:0b:a1:6a:38:db:a5:57:93:50:da: 5b:65:16:96:97:d9:e1:69:dd:7e:43:e0:e1:6d:00: ee:15:c0:9d:93:35:a9:dd:8c:a6:04:49:33:04:0d: af:fa:24:9b:bd:32:d2:f1:d1:f9:91:1e:65:41:92: 2e:39:1e:2a:5e:44:d6:de:6f:a2:50:9d:23:55:94: 85:19:f0:c7:e5:11:ed:49:9a:5e:6f:9b:f5:41:3b: f9:ab:ca:12:80:47:4c:d0:d6:7b:1e:ad:84:55:67: ea:bd:17:a4:db:2c:27:31:f6:b3:31:b6:7c:1b:68: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2E:41:F8:33:79:80:0C:B2:4B:1B:16:E7:C4:3A:8C:19:30:AE:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/85c5d8be-0093-3151-9a85-849c44325ecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:13:3e:2e:b0:bd:29:71:35:9c:01:25:5f:e8:90:f6:4c:09: f4:85:03:de:98:b8:67:4f:e2:4c:03:df:cf:8f:40:4f:79:6a: cc:7e:6a:0b:55:25:0e:b0:56:d1:6b:82:08:9a:78:75:3e:cf: a0:01:25:e7:71:ea:ec:97:c3:8d:7a:d5:35:d4:f3:51:dd:e1: 2f:b2:e0:9f:cc:da:13:a4:fd:9c:4c:8f:80:c6:4c:49:87:ae: 0c:db:14:ae:01:90:8b:0d:02:25:4d:4a:78:16:de:54:3f:85: 1f:ad:db:a0:5e:63:0c:04:21:16:1f:a7:e7:d2:16:ce:80:e9: a4:08:36:ee:78:01:44:39:1f:f2:a2:16:a2:29:2b:6c:7e:1d: 0b:19:f6:2f:be:53:56:f1:b3:6e:4b:1e:5d:8d:9c:50:aa:bd: 52:d1:0d:53:2c:e6:f1:f1:77:f2:8c:0a:72:5a:b5:81:83:9e: 9e:13:83:ab:c1:22:83:c5:22:b4:f9:01:65:e9:f6:dc:15:e8: ee:6b:05:aa:ca:1c:c0:0f:b3:4c:57:4b:52:62:32:c8:8f:b5: 91:2e:b7:81:ea:af:64:ef:9d:1a:4c:60:67:dd:98:b1:37:e3: fe:0d:1c:2c:ca:d6:e0:59:49:01:a8:d4:c3:21:eb:12:0e:e7: 43:a2:27:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tl1wutAbqS23gwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQzMDEyMjEyM1oXDTI2MDcyOTEyMjEyM1owLzEtMCsGA1UEAxMk MWIwYmU2M2QtZWY5ZS00NTNkLTg3MjctZWVkZjY3ODBkNGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Tc11APmv2P3z0tO9rmBBJTMyY+0kIG69EuV R5ryGLhygti7dhua6xiBIg3t7YyFujwx9KfUQCAV6yqUQN/cy3I/dVP45oQK2d7V 0qFAjdiwSie73NZr4Et53Dst2lytMkGuCcUaKT+F7bR4nWJHHn9xUnlJA2H2fLs/ j9lK/auYD7rPCTYACXRgNAuhajjbpVeTUNpbZRaWl9nhad1+Q+DhbQDuFcCdkzWp 3YymBEkzBA2v+iSbvTLS8dH5kR5lQZIuOR4qXkTW3m+iUJ0jVZSFGfDH5RHtSZpe b5v1QTv5q8oSgEdM0NZ7Hq2EVWfqvRek2ywnMfazMbZ8G2j87QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYuQfgzeYAMsksbFufEOowZMK4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODVjNWQ4YmUtMDA5My0z MTUxLTlhODUtODQ5YzQ0MzI1ZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4TPi6wvSlxNZwBJV/okPZMCfSFA96YuGdP4kwD38+PQE95asx+agtV JQ6wVtFrggiaeHU+z6ABJedx6uyXw4161TXU81Hd4S+y4J/M2hOk/ZxMj4DGTEmH rgzbFK4BkIsNAiVNSngW3lQ/hR+t26BeYwwEIRYfp+fSFs6A6aQINu54AUQ5H/Ki FqIpK2x+HQsZ9i++U1bxs25LHl2NnFCqvVLRDVMs5vHxd/KMCnJatYGDnp4Tg6vB IoPFIrT5AWXp9twV6O5rBarKHMAPs0xXS1JiMsiPtZEut4Hqr2TvnRpMYGfdmLE3 4/4NHCzK1uBZSQGo1MMh6xIO50OiJ3M= -----END CERTIFICATE-----Generated at Wed May 13 13:34:02 2026 by rpki-client