$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa File: cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa (raw, json) Hash identifier: fWJcsbovBO+838zD+5eAzu2osHXZm8S/0A2/2/TGqw8= Subject key identifier: 04:71:E8:D3:32:AE:F9:C9:70:8C:A5:63:98:83:77:32:B2:48:D1:4A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DBFD052AA97159851FDA64B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 401783 IP address blocks: 209.101.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:52:aa:97:15:98:51:fd:a6:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=53a0b35c-16bc-4fcb-b830-07dfc96758b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:db:50:f7:2c:45:84:ed:8c:b3:c6:67:21:be: 54:91:81:2f:a6:50:1e:fa:80:aa:1e:a6:6a:ca:ed: ab:73:23:ee:f9:5d:5e:c5:1c:cf:c3:68:f7:9f:c9: 7d:da:64:c2:2d:17:fa:a8:d4:bb:f8:fc:2e:f7:b1: ed:4d:f1:b6:e0:a6:21:10:39:c5:83:40:0e:a2:27: c4:20:ba:2b:38:34:b8:2e:76:ca:df:72:9f:6d:a5: bf:e7:25:ca:5f:83:63:16:ac:fe:e6:b7:5f:bc:97: 9a:e0:ae:b4:91:c2:f3:d9:bb:1a:25:7f:bf:3b:8d: 9d:bb:16:e7:fc:a2:80:8d:cc:1b:2a:a0:00:8d:73: fb:c4:41:d6:e0:a5:a0:c5:87:ca:89:b5:c2:0e:98: a8:89:4a:0a:49:a8:62:8e:85:25:64:4f:7a:01:a2: 2d:96:a1:28:9e:e6:97:cb:3f:ba:f8:ff:22:c0:dd: d9:75:4d:a3:32:b2:21:d3:04:e5:46:29:ef:b5:74: d9:ba:90:98:b7:95:b2:b9:81:8c:40:b1:a4:ec:48: 8d:0e:ea:57:49:94:33:d7:e4:e6:c9:c5:fb:63:6e: d1:ce:70:a3:ae:fb:64:be:49:ea:0b:67:09:9e:af: 51:d1:e8:75:0a:6c:e5:5a:fb:e4:e5:7f:c6:ea:27: 6f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:71:E8:D3:32:AE:F9:C9:70:8C:A5:63:98:83:77:32:B2:48:D1:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:ad:c8:cf:da:c4:c2:9d:f7:4b:54:01:fc:31:df:2f:08:6d: e8:a9:5a:32:02:54:03:ab:33:5a:5e:94:cd:f3:8f:2b:b0:87: 58:99:18:ea:c1:93:de:33:3d:fd:28:d5:63:c4:7d:14:df:7c: 12:22:55:94:58:4b:16:1c:8e:69:c8:f6:6c:fa:9e:57:c4:70: 87:66:ca:b4:0a:91:e8:f6:60:b5:17:79:8e:2e:d7:e1:76:2d: 89:d1:5e:f8:a1:af:e2:63:16:1a:50:e9:0a:13:06:cb:af:63: 16:7c:5a:74:a2:c2:92:a0:8e:f2:dc:48:85:94:c8:27:c8:e3: 33:8e:aa:e8:5e:bc:fa:3e:69:2c:8b:f2:78:87:e6:68:93:3d: dd:c7:3c:23:cd:04:08:5e:2b:85:8d:b7:2a:bf:4f:92:d2:93: fd:42:8d:57:83:61:4f:0a:2a:43:b4:2c:5c:54:ce:ab:1f:4d: 4d:6f:57:a1:68:04:d5:a4:ca:2a:4e:5b:18:2c:39:d8:6e:e1: 7e:9c:c3:c8:88:54:31:03:df:92:1a:ae:18:75:f4:5f:5d:c2: 93:18:ae:a4:a9:16:7b:cf:6b:fe:3f:7b:6c:6c:71:61:19:8c: a9:80:f4:2d:d0:86:55:b1:81:7d:03:83:aa:99:df:32:ab:66: 98:13:41:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0FKqlxWYUf2mS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk NTNhMGIzNWMtMTZiYy00ZmNiLWI4MzAtMDdkZmM5Njc1OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ttQ9yxFhO2Ms8ZnIb5UkYEvplAe+oCqHqZq yu2rcyPu+V1exRzPw2j3n8l92mTCLRf6qNS7+Pwu97HtTfG24KYhEDnFg0AOoifE ILorODS4LnbK33KfbaW/5yXKX4NjFqz+5rdfvJea4K60kcLz2bsaJX+/O42duxbn /KKAjcwbKqAAjXP7xEHW4KWgxYfKibXCDpioiUoKSahijoUlZE96AaItlqEonuaX yz+6+P8iwN3ZdU2jMrIh0wTlRinvtXTZupCYt5WyuYGMQLGk7EiNDupXSZQz1+Tm ycX7Y27RznCjrvtkvknqC2cJnq9R0eh1CmzlWvvk5X/G6idvXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARx6NMyrvnJcIylY5iDdzKySNFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2YzYThmZTgtNzgxMC0z ZjFjLWI5N2ItYTVhNmM1ZmEwMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKytyM/axMKd90tUAfwx3y8IbeipWjICVAOrM1pelM3zjyuwh1iZGOrB k94zPf0o1WPEfRTffBIiVZRYSxYcjmnI9mz6nlfEcIdmyrQKkej2YLUXeY4u1+F2 LYnRXvihr+JjFhpQ6QoTBsuvYxZ8WnSiwpKgjvLcSIWUyCfI4zOOquhevPo+aSyL 8niH5miTPd3HPCPNBAheK4WNtyq/T5LSk/1CjVeDYU8KKkO0LFxUzqsfTU1vV6Fo BNWkyipOWxgsOdhu4X6cw8iIVDED35Iarhh19F9dwpMYrqSpFnvPa/4/e2xscWEZ jKmA9C3QhlWxgX0Dg6qZ3zKrZpgTQU8= -----END CERTIFICATE-----Generated at Wed May 13 11:15:20 2026 by rpki-client