$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdbb6210-2528-3c84-973d-f15771493c9d.roa File: cdbb6210-2528-3c84-973d-f15771493c9d.roa (raw, json) Hash identifier: 0cZ23tCGJYgt2X/faRrkh0/X0IZaySkWLx7FRYJr9BA= Subject key identifier: A1:0A:50:62:7B:3E:0F:98:61:D4:29:4B:7A:DA:83:80:0D:3A:1F:70 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D19B4F000D9C3140B01A9A500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdbb6210-2528-3c84-973d-f15771493c9d.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 154049 IP address blocks: 209.101.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:f0:00:d9:c3:14:0b:01:a9:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=ff36683c-12e8-4f14-b192-9a8fa90a9c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:f8:2a:06:16:ee:25:9b:a5:9b:ba:bb:10: 6a:3e:b7:64:6f:51:a5:93:d9:92:fb:97:f2:62:03: 73:0b:af:80:66:30:fe:d0:76:42:ec:8a:b0:c7:a1: 2e:ed:8c:27:a8:98:c7:66:a4:02:70:a7:4e:cd:0d: 86:23:2d:7d:02:64:b1:e5:46:1b:73:94:07:a1:7c: 04:e1:84:e8:b6:ae:74:28:e6:57:37:fe:4f:64:36: f5:fc:02:c5:69:b0:bc:cc:50:74:a4:7b:3b:3f:5c: 6a:76:ed:3b:d9:b9:85:33:f7:6a:80:5c:df:6b:45: 1b:fa:96:bd:78:d0:41:aa:03:a0:d2:90:47:a1:37: e3:f4:8d:ff:f4:3d:1b:f4:1a:38:18:6e:ba:98:a3: 76:56:46:47:74:af:14:1c:42:fd:4b:5f:96:df:24: f5:ab:d3:8d:28:da:33:35:eb:a2:0c:7a:0c:0f:0e: d5:a5:40:21:da:0d:01:f0:5d:20:b7:11:06:d4:bd: bb:fe:30:62:e0:13:c7:fe:0d:a9:2b:f1:16:d9:a0: b6:08:d9:fb:c9:fe:44:03:db:92:58:d8:d5:6f:0b: 72:48:b1:d3:13:3e:8f:94:30:4b:3f:52:32:5c:19: 6c:95:cc:08:f0:dc:16:ca:92:da:23:10:f5:7a:ac: 33:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0A:50:62:7B:3E:0F:98:61:D4:29:4B:7A:DA:83:80:0D:3A:1F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdbb6210-2528-3c84-973d-f15771493c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:0d:8c:a3:cd:6f:09:21:ad:16:dd:2a:41:5c:43:55:c8:ee: 3d:0f:5b:76:76:f1:90:84:95:58:bf:1f:f8:e9:00:9e:48:23: fa:fe:9a:6a:c3:3a:b2:47:fc:f9:a1:d1:60:36:d9:17:c3:d5: c5:59:5c:68:b5:a3:96:4a:7e:85:51:55:90:ec:bb:96:1b:40: d2:c3:28:85:3e:07:5c:82:85:91:67:ad:31:ea:48:34:1f:06: 40:b2:1a:a6:7a:1b:62:be:98:b4:e1:8d:e4:98:47:75:ea:8a: 63:2c:99:e6:00:4e:c6:9d:6e:38:f8:53:a3:8c:a3:2f:8f:1e: 65:46:e2:05:43:25:e4:05:c3:91:85:00:c5:10:15:58:e3:f8: 07:6c:af:56:0c:ee:6a:54:6e:e3:15:a4:52:31:7e:2c:c5:cf: 78:d2:44:7e:48:3d:9b:20:4d:0d:07:a3:aa:5c:dd:9c:5c:28: 5d:1a:1a:13:da:fb:09:2a:74:dd:ca:66:3f:7d:59:19:04:b7: fc:74:32:c1:a1:cb:4f:08:8a:61:a9:45:77:af:dc:4f:16:13: 2e:03:45:0f:3b:18:e7:75:87:7f:83:b3:12:13:11:da:aa:a2: fa:80:62:60:21:a4:2f:15:e9:a9:99:f6:6b:fc:11:52:2f:6e: cc:72:60:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtPAA2cMUCwGppQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZmYzNjY4M2MtMTJlOC00ZjE0LWIxOTItOWE4ZmE5MGE5YzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUL4KgYW7iWbpZu6uxBqPrdkb1Glk9mS+5fy YgNzC6+AZjD+0HZC7Iqwx6Eu7YwnqJjHZqQCcKdOzQ2GIy19AmSx5UYbc5QHoXwE 4YTotq50KOZXN/5PZDb1/ALFabC8zFB0pHs7P1xqdu072bmFM/dqgFzfa0Ub+pa9 eNBBqgOg0pBHoTfj9I3/9D0b9Bo4GG66mKN2VkZHdK8UHEL9S1+W3yT1q9ONKNoz NeuiDHoMDw7VpUAh2g0B8F0gtxEG1L27/jBi4BPH/g2pK/EW2aC2CNn7yf5EA9uS WNjVbwtySLHTEz6PlDBLP1IyXBlslcwI8NwWypLaIxD1eqwzLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEKUGJ7Pg+YYdQpS3rag4ANOh9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2RiYjYyMTAtMjUyOC0z Yzg0LTk3M2QtZjE1NzcxNDkzYzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUNjKPNbwkhrRbdKkFcQ1XI7j0PW3Z28ZCElVi/H/jpAJ5II/r+mmrD OrJH/Pmh0WA22RfD1cVZXGi1o5ZKfoVRVZDsu5YbQNLDKIU+B1yChZFnrTHqSDQf BkCyGqZ6G2K+mLThjeSYR3XqimMsmeYATsadbjj4U6OMoy+PHmVG4gVDJeQFw5GF AMUQFVjj+Adsr1YM7mpUbuMVpFIxfizFz3jSRH5IPZsgTQ0Ho6pc3ZxcKF0aGhPa +wkqdN3KZj99WRkEt/x0MsGhy08IimGpRXev3E8WEy4DRQ87GOd1h3+DsxITEdqq ovqAYmAhpC8V6amZ9mv8EVIvbsxyYPg= -----END CERTIFICATE-----Generated at Thu Mar 26 21:06:09 2026 by rpki-client