$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b355827e-6754-328b-82c3-a9c33e7ee766.roa File: b355827e-6754-328b-82c3-a9c33e7ee766.roa (raw, json) Hash identifier: nevQEcGGiO1f+8zz6oysfZQdKXKmu4JuASQ+jt9HzU4= Subject key identifier: 9F:31:D0:57:CA:B2:4F:F9:60:F5:81:D7:4C:3A:55:68:BB:5E:F2:3E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DBFD0B0B6E35257EBE40151C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b355827e-6754-328b-82c3-a9c33e7ee766.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 401783 IP address blocks: 209.101.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:b0:b6:e3:52:57:eb:e4:01:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=ba1e2817-1a75-4da4-a6da-567dc7a0963a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:16:11:21:72:7d:84:cd:75:95:fb:bf:94:5d: 9e:e0:f8:29:5b:a4:f9:4e:78:85:6f:81:22:d9:e5: 58:2a:eb:bd:ba:48:58:5b:35:20:54:7d:4a:e7:43: 1c:f4:6b:b1:ea:f9:ba:b7:08:96:d8:59:94:a1:67: 19:30:95:d4:c0:3b:07:3c:42:61:b5:96:44:0f:c3: 8b:05:b6:ec:95:5a:d3:5c:fe:d7:0e:81:fc:98:ab: 49:04:56:54:ec:64:5a:dd:19:7a:76:ee:eb:51:3e: 5d:e0:d8:27:90:91:74:37:cc:9c:47:ff:b4:f6:24: 64:5a:cd:27:4b:17:45:73:0c:5c:4c:2a:d5:15:ae: 4b:9e:43:8e:18:bd:bc:fb:f0:49:5a:ce:cc:7b:ee: 08:a5:ab:88:b9:ab:4c:1d:79:00:19:5f:d9:7f:83: 54:f2:e1:82:2c:e5:b0:ee:78:99:6a:bc:8c:f8:6a: 8c:d8:89:f9:f9:3b:e4:69:30:01:42:df:3c:f8:df: 57:fa:d2:b7:80:8d:dd:7e:1f:66:49:08:1b:3c:82: e2:c4:61:72:b1:b5:8d:3f:45:4b:88:86:18:40:c2: 5e:7f:13:7d:44:99:35:66:ac:3d:12:58:5f:fa:82: d3:5a:97:22:38:13:23:df:71:25:6b:6f:94:78:ce: 45:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:31:D0:57:CA:B2:4F:F9:60:F5:81:D7:4C:3A:55:68:BB:5E:F2:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b355827e-6754-328b-82c3-a9c33e7ee766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f5:ca:c4:1e:12:2e:25:f1:37:01:d1:dd:97:a0:6e:05:2e: ca:e5:44:30:f5:81:9b:bd:31:c8:1b:f3:8b:17:ce:52:b4:e0: 60:a9:55:c3:a2:b9:03:c5:a2:ce:d7:b1:7d:82:b8:47:4f:d8: 83:e4:bf:17:13:8b:64:53:90:bd:5e:65:b3:23:03:03:23:0e: b1:db:8b:45:2d:64:6a:d7:d6:ac:5b:65:02:33:7d:4f:39:34: 99:d4:1e:be:3f:0d:9a:fd:bf:5f:2f:0e:82:91:a5:7c:48:8c: ae:07:79:4d:db:e9:9e:d5:0d:f8:6c:c2:8e:7a:00:ed:38:5b: d7:99:05:cf:0f:1b:5d:fa:83:d1:0f:67:aa:8b:12:36:0c:1c: 79:21:5b:65:50:fa:73:ec:2c:9e:85:59:dd:68:8a:f8:8b:3e: c3:3f:e0:f0:17:62:3c:36:e0:71:c5:d3:8b:8b:a9:48:f4:33: 96:29:79:08:db:86:54:05:db:ea:64:31:7a:71:f3:7c:db:92: 0c:1f:24:2d:1b:e2:78:88:1c:82:a5:0a:70:62:18:1e:c5:97: 50:60:ea:ef:8c:00:82:49:8b:c9:1f:66:6c:a3:d7:0a:ec:09: 7e:1d:fa:b3:57:3e:80:bf:18:f7:69:1f:83:f5:a5:f9:cc:00: df:fa:5b:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0LC241JX6+QBUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk YmExZTI4MTctMWE3NS00ZGE0LWE2ZGEtNTY3ZGM3YTA5NjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxYRIXJ9hM11lfu/lF2e4PgpW6T5TniFb4Ei 2eVYKuu9ukhYWzUgVH1K50Mc9Gux6vm6twiW2FmUoWcZMJXUwDsHPEJhtZZED8OL BbbslVrTXP7XDoH8mKtJBFZU7GRa3Rl6du7rUT5d4NgnkJF0N8ycR/+09iRkWs0n SxdFcwxcTCrVFa5LnkOOGL28+/BJWs7Me+4IpauIuatMHXkAGV/Zf4NU8uGCLOWw 7niZaryM+GqM2In5+TvkaTABQt88+N9X+tK3gI3dfh9mSQgbPILixGFysbWNP0VL iIYYQMJefxN9RJk1Zqw9Elhf+oLTWpciOBMj33Ela2+UeM5FGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8x0FfKsk/5YPWB10w6VWi7XvI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjM1NTgyN2UtNjc1NC0z MjhiLTgyYzMtYTljMzNlN2VlNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf1ysQeEi4l8TcB0d2XoG4FLsrlRDD1gZu9Mcgb84sXzlK04GCpVcOi uQPFos7XsX2CuEdP2IPkvxcTi2RTkL1eZbMjAwMjDrHbi0UtZGrX1qxbZQIzfU85 NJnUHr4/DZr9v18vDoKRpXxIjK4HeU3b6Z7VDfhswo56AO04W9eZBc8PG136g9EP Z6qLEjYMHHkhW2VQ+nPsLJ6FWd1oiviLPsM/4PAXYjw24HHF04uLqUj0M5YpeQjb hlQF2+pkMXpx83zbkgwfJC0b4niIHIKlCnBiGB7Fl1Bg6u+MAIJJi8kfZmyj1wrs CX4d+rNXPoC/GPdpH4P1pfnMAN/6W1s= -----END CERTIFICATE-----Generated at Wed May 13 14:30:50 2026 by rpki-client