$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb2034cf-1c88-3c0f-a10b-38102a828254.roa File: cb2034cf-1c88-3c0f-a10b-38102a828254.roa (raw, json) Hash identifier: P/B3rbEDkK+K3i6GEaLnzGtYzTVfoMAZzkYnTtL8v9s= Subject key identifier: 36:B1:FD:07:8F:7E:CF:F0:A9:10:28:5D:83:C9:4C:7A:A7:C3:D1:67 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DAD92BA805F3DD79FA2C06700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb2034cf-1c88-3c0f-a10b-38102a828254.roa Signing time: Thu 30 Apr 2026 12:12:04 +0000 ROA not before: Thu 30 Apr 2026 12:12:04 +0000 ROA not after: Wed 29 Jul 2026 12:12:04 +0000 asID: 399955 IP address blocks: 209.101.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:92:ba:80:5f:3d:d7:9f:a2:c0:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 30 12:12:04 2026 GMT Not After : Jul 29 12:12:04 2026 GMT Subject: CN=ffdaae42-feed-4630-b40b-da31536ca431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:27:d0:e6:d9:bc:e5:a6:ec:f7:e5:7d:79:e0: 8e:7f:5d:c9:86:f0:3f:46:9c:c1:0a:2e:08:1d:23: 4b:2d:85:f7:10:e5:7e:34:59:5e:32:9b:f1:46:3b: 4e:4b:d4:86:3c:0e:b0:65:d8:59:52:ea:88:bb:a0: b0:a0:e9:e0:ac:0b:ff:15:ae:a8:22:b2:ae:41:f9: 51:d9:2b:de:f2:3c:72:e3:c2:9a:fd:d8:20:76:af: f4:49:83:4a:43:ec:40:16:49:c7:c3:d0:c2:89:7a: c1:76:e0:b8:45:6f:ec:ff:02:bf:3e:58:34:64:6a: 5d:4a:b8:5a:a3:ff:62:f4:94:4f:21:a7:4f:88:20: 33:d8:6d:e1:21:a7:e5:a1:53:e9:fe:25:4e:5f:e7: 86:bb:5f:71:63:c4:eb:be:66:62:4f:d7:39:1a:29: 81:95:9a:73:c8:46:7d:5e:0f:b4:bc:3b:50:a3:3a: 01:e1:24:75:20:74:28:b2:5c:83:54:1b:eb:68:72: cd:65:08:3d:ef:76:fd:cb:c1:a7:69:8f:18:21:71: be:e7:89:04:91:6e:4b:f3:1f:85:b8:f9:ea:54:bb: 05:2a:11:52:dd:2f:9e:ed:9f:39:d4:29:79:08:93: 1a:fe:e1:e4:36:b9:fd:44:81:e5:db:a3:bb:9a:53: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B1:FD:07:8F:7E:CF:F0:A9:10:28:5D:83:C9:4C:7A:A7:C3:D1:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb2034cf-1c88-3c0f-a10b-38102a828254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d1:2a:f2:20:57:b6:a7:4c:af:ef:bb:ac:16:74:b4:5b:f8: 8a:bc:19:18:97:c7:9a:85:8b:d8:ed:da:68:10:00:ec:02:e5: 09:20:24:77:5a:4b:66:fb:9e:89:17:83:d2:a6:df:ae:fb:81: 79:b3:d6:c9:cb:e9:13:3c:6a:c4:e8:49:8b:30:e8:f1:f2:00: ca:6e:89:ce:8c:62:c3:79:5a:87:ee:0b:c0:8d:1b:57:b4:60: ad:cf:cb:45:d1:49:61:82:e4:4f:36:91:8c:32:fd:20:ae:79: c5:dc:b2:43:c3:1c:2c:c2:59:77:7c:d1:2e:2d:45:3e:32:65: 89:c0:64:2c:71:19:e8:d8:79:85:ca:d7:65:a1:5c:49:45:97: 37:95:34:40:94:5a:fc:b2:e0:b4:ff:9b:e6:2a:b1:b0:38:bc: bb:0f:98:da:0e:a5:a8:47:3b:18:d5:d3:71:c6:b1:01:e5:fb: e9:c1:47:45:9e:f3:39:21:46:84:f0:75:ae:19:13:ad:7c:7c: 9e:29:ca:94:18:0a:4e:a6:e5:39:09:f6:90:6e:7f:5a:26:a6: d2:01:dd:62:05:0f:44:a5:6f:08:46:be:d9:a8:6b:4e:11:ba: a1:ec:6c:02:f5:b5:f5:47:cd:d1:67:9b:7b:55:80:39:4b:80: 5c:c8:19:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tkrqAXz3Xn6LAZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQzMDEyMTIwNFoXDTI2MDcyOTEyMTIwNFowLzEtMCsGA1UEAxMk ZmZkYWFlNDItZmVlZC00NjMwLWI0MGItZGEzMTUzNmNhNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSfQ5tm85abs9+V9eeCOf13JhvA/RpzBCi4I HSNLLYX3EOV+NFleMpvxRjtOS9SGPA6wZdhZUuqIu6CwoOngrAv/Fa6oIrKuQflR 2Sve8jxy48Ka/dggdq/0SYNKQ+xAFknHw9DCiXrBduC4RW/s/wK/Plg0ZGpdSrha o/9i9JRPIadPiCAz2G3hIafloVPp/iVOX+eGu19xY8TrvmZiT9c5GimBlZpzyEZ9 Xg+0vDtQozoB4SR1IHQoslyDVBvraHLNZQg973b9y8GnaY8YIXG+54kEkW5L8x+F uPnqVLsFKhFS3S+e7Z851Cl5CJMa/uHkNrn9RIHl26O7mlPWDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDax/QePfs/wqRAoXYPJTHqnw9FnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2IyMDM0Y2YtMWM4OC0z YzBmLWExMGItMzgxMDJhODI4MjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTRKvIgV7anTK/vu6wWdLRb+Iq8GRiXx5qFi9jt2mgQAOwC5QkgJHda S2b7nokXg9Km3677gXmz1snL6RM8asToSYsw6PHyAMpuic6MYsN5WofuC8CNG1e0 YK3Py0XRSWGC5E82kYwy/SCuecXcskPDHCzCWXd80S4tRT4yZYnAZCxxGejYeYXK 12WhXElFlzeVNECUWvyy4LT/m+YqsbA4vLsPmNoOpahHOxjV03HGsQHl++nBR0We 8zkhRoTwda4ZE618fJ4pypQYCk6m5TkJ9pBuf1omptIB3WIFD0SlbwhGvtmoa04R uqHsbAL1tfVHzdFnm3tVgDlLgFzIGX4= -----END CERTIFICATE-----Generated at Wed May 13 13:48:42 2026 by rpki-client