$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa File: d839064a-caaf-3526-8919-06009f7be8de.roa (raw, json) Hash identifier: bJrDsfsssvpllTuU2h1qT+9qiaE1z3CR83kKAAlrIJ4= Subject key identifier: A6:F6:8E:B9:A7:1B:2A:3A:61:CE:3E:0B:86:DF:A5:88:20:8D:7F:21 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D237A57254232B71756157600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 212238 IP address blocks: 209.101.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:57:25:42:32:b7:17:56:15:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=2d3240d9-6dae-4c45-b3ed-a34e8535bab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:61:45:d2:be:b8:1b:06:ba:86:1e:04:6f: 58:9a:79:46:22:00:b0:9c:ab:0b:bb:40:df:03:07: 47:06:48:f2:a9:ae:02:97:de:e1:4c:9a:7e:79:73: 61:03:27:81:b6:3e:d6:96:3b:65:3a:61:f7:e2:3d: 20:73:37:7c:c1:2a:26:44:5c:12:49:24:86:45:75: 00:77:b1:57:d7:7f:1f:74:2a:42:df:bb:dd:53:a8: 9f:8a:d0:33:76:54:00:d6:a5:69:87:0e:d9:aa:fd: 73:fe:a1:95:03:ad:a8:6b:97:5b:10:87:ad:fc:56: 55:8e:60:e5:9d:73:c9:43:16:8a:b3:e4:46:20:fd: bc:cc:57:fc:81:24:05:2a:5b:5a:7d:f1:e8:5b:e5: d8:f1:ca:f9:75:2a:bd:6c:18:44:6f:b2:99:53:13: 3e:fe:4e:a7:5d:18:e7:da:d2:98:7a:1e:c5:df:57: 17:f4:08:0e:8e:19:02:34:25:c0:2d:ff:83:81:92: 2c:c2:72:ff:19:2f:5d:32:a6:7d:bc:2f:ce:f5:ee: 8b:71:3f:10:41:7e:60:1f:82:36:9f:d9:6a:b5:06: 89:73:80:2d:48:c8:ad:92:cb:ad:15:1f:13:00:fd: cf:82:b3:c0:00:48:c2:f9:0d:66:00:7f:d0:55:d6: 14:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F6:8E:B9:A7:1B:2A:3A:61:CE:3E:0B:86:DF:A5:88:20:8D:7F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:81:6e:f5:06:0e:8e:d9:c9:03:59:fb:67:8d:ab:ca:a8:86: 5d:da:4a:16:3f:19:6b:52:77:91:63:9b:6f:5d:52:ce:aa:df: ae:1b:cc:48:87:df:87:2e:3b:3f:f1:3c:8d:47:f7:5b:6a:b1: 8a:0f:0b:7e:c7:4c:35:23:b7:e0:d5:f9:0b:ce:59:d5:3e:55: b7:a5:18:f7:a9:65:a1:29:9b:72:4d:15:a0:30:e5:07:d2:6a: 6e:fe:5c:e6:da:f2:8a:74:fd:d3:50:24:c9:33:1b:6c:27:b8: 63:d3:c6:9a:f5:66:9d:3e:f4:55:9f:88:c0:0b:f7:c0:be:57: 44:ec:74:a3:8f:b4:d4:63:d0:4a:c6:89:51:cf:77:19:f4:99: 58:02:fe:46:ca:89:5e:9c:02:5e:e3:75:b1:c6:eb:e9:02:dd: ad:89:44:46:c5:e2:53:fd:02:69:cb:80:fe:bd:52:f0:28:9b: a8:5e:9e:ca:6a:e1:08:20:81:77:5a:11:56:08:7f:94:cf:9e: fd:dc:56:d3:cd:e8:e8:cc:ef:86:0d:9c:d1:51:6e:f0:79:8c: f2:c3:b7:cd:36:fa:d9:e2:b7:68:4e:ad:5e:5f:57:f8:b5:eb: e9:c0:4f:73:4e:19:57:d1:f4:26:9d:f6:66:2f:54:e8:8d:bf: 82:52:11:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelclQjK3F1YVdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MmQzMjQwZDktNmRhZS00YzQ1LWIzZWQtYTM0ZTg1MzViYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE1hRdK+uBsGuoYeBG9YmnlGIgCwnKsLu0Df AwdHBkjyqa4Cl97hTJp+eXNhAyeBtj7WljtlOmH34j0gczd8wSomRFwSSSSGRXUA d7FX138fdCpC37vdU6ifitAzdlQA1qVphw7Zqv1z/qGVA62oa5dbEIet/FZVjmDl nXPJQxaKs+RGIP28zFf8gSQFKltaffHoW+XY8cr5dSq9bBhEb7KZUxM+/k6nXRjn 2tKYeh7F31cX9AgOjhkCNCXALf+DgZIswnL/GS9dMqZ9vC/O9e6LcT8QQX5gH4I2 n9lqtQaJc4AtSMitksutFR8TAP3PgrPAAEjC+Q1mAH/QVdYUyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb2jrmnGyo6Yc4+C4bfpYggjX8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDgzOTA2NGEtY2FhZi0z NTI2LTg5MTktMDYwMDlmN2JlOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMeBbvUGDo7ZyQNZ+2eNq8qohl3aShY/GWtSd5Fjm29dUs6q364bzEiH 34cuOz/xPI1H91tqsYoPC37HTDUjt+DV+QvOWdU+VbelGPepZaEpm3JNFaAw5QfS am7+XOba8op0/dNQJMkzG2wnuGPTxpr1Zp0+9FWfiMAL98C+V0TsdKOPtNRj0ErG iVHPdxn0mVgC/kbKiV6cAl7jdbHG6+kC3a2JREbF4lP9AmnLgP69UvAom6henspq 4QgggXdaEVYIf5TPnv3cVtPN6OjM74YNnNFRbvB5jPLDt802+tnit2hOrV5fV/i1 6+nAT3NOGVfR9Cad9mYvVOiNv4JSEfs= -----END CERTIFICATE-----Generated at Thu Mar 26 22:13:47 2026 by rpki-client