$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83f7c7-e02f-3a43-95f8-701145221be8.roa File: dd83f7c7-e02f-3a43-95f8-701145221be8.roa (raw, json) Hash identifier: t7fSTBHhrdC4SKJPFBD5beqrS0sMYEurGKMY/eoVenI= Subject key identifier: F5:7A:A6:EF:72:29:52:3F:9C:B0:DB:89:F6:F2:BB:74:AE:4B:0C:65 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D300A4649CD614FAE1202D780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83f7c7-e02f-3a43-95f8-701145221be8.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 834 IP address blocks: 209.101.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:46:49:cd:61:4f:ae:12:02:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=3e870c3d-c882-492f-89ea-8faa0dcff2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:d3:0c:62:68:29:6f:c0:7c:86:c8:3c:e7: 14:b8:9b:d7:6a:e1:21:4d:90:76:a4:95:6a:38:bd: f9:74:25:8d:09:c5:cd:52:fe:38:b3:6d:31:42:e7: fe:30:2f:c7:ad:d9:dd:c9:fb:80:0f:b6:96:5c:d4: d9:09:27:30:9d:6c:20:70:ab:54:3d:83:5b:a5:c7: c8:cf:79:53:a3:55:e5:a2:d2:ee:df:67:40:79:19: d8:86:c7:ce:78:b6:bb:43:92:a8:12:08:39:27:d1: 1e:b0:3f:9f:15:e5:68:21:37:43:fc:79:ed:50:69: 81:cd:9f:ac:4e:5c:e1:32:63:57:8f:a1:e9:a9:44: 19:63:d2:3c:de:03:87:36:3e:8d:25:f0:cd:01:12: 37:dc:62:3d:ad:a2:d9:c0:5b:dc:ad:07:25:1b:41: da:f6:29:81:50:a6:8a:d6:1e:b5:cf:73:25:dd:a0: c9:5c:92:bf:eb:17:14:bb:72:09:6e:c1:f7:f6:4f: d9:07:89:8a:23:bd:27:0c:a3:66:21:96:44:12:60: d5:84:38:92:6b:91:37:9d:17:8e:72:66:0c:06:10: 56:4a:65:45:c9:fa:cb:c7:ad:4f:81:11:a6:02:95: 84:4f:72:35:38:9c:5f:a8:95:47:f2:8a:ad:95:db: 85:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7A:A6:EF:72:29:52:3F:9C:B0:DB:89:F6:F2:BB:74:AE:4B:0C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83f7c7-e02f-3a43-95f8-701145221be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:98:77:dc:17:ff:42:18:93:1b:8a:fa:01:3d:2e:44:4f:25: ee:a0:44:9a:ea:16:88:ca:14:35:ee:f2:ec:64:18:cf:95:7a: fe:c7:3a:29:63:a6:33:3f:47:11:52:4c:2e:7a:4e:01:fd:d6: e7:7e:69:29:8e:a1:af:13:fe:94:ca:5a:a7:a0:0b:cb:6a:f7: 10:6a:1b:a3:04:21:e1:0b:c9:b4:0b:95:4f:a2:d9:e8:d8:aa: e1:7f:b4:c6:aa:fe:ec:dc:31:5c:68:57:ec:b1:02:13:3b:65: 45:f1:19:ed:4b:fb:0d:c4:c4:ff:23:8e:3f:c4:0c:48:db:93: 2e:ca:fe:a4:c8:2c:0c:ad:12:2d:ba:e3:ce:bf:f8:25:83:15: 7f:b7:6e:93:33:51:63:07:6e:39:a1:f3:75:fe:c6:f1:b1:e2: ea:92:c6:43:21:7f:23:7f:6e:c0:f3:1b:d3:af:e8:62:b7:53: 14:cd:d6:d8:53:15:a2:9a:87:cf:9d:5f:00:8a:d1:4f:b7:98: f4:35:12:d6:e5:21:2b:1f:ce:d2:02:91:58:ad:c3:e5:db:f9: 80:4a:00:cf:c9:8f:d4:00:c9:e7:c5:12:13:82:66:15:8a:7a: 8b:e1:7f:a4:ec:60:e1:ba:b5:4b:30:f0:b4:b3:a4:ef:03:53: 0a:04:37:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkZJzWFPrhIC14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk M2U4NzBjM2QtYzg4Mi00OTJmLTg5ZWEtOGZhYTBkY2ZmMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAnTDGJoKW/AfIbIPOcUuJvXauEhTZB2pJVq OL35dCWNCcXNUv44s20xQuf+MC/HrdndyfuAD7aWXNTZCScwnWwgcKtUPYNbpcfI z3lTo1XlotLu32dAeRnYhsfOeLa7Q5KoEgg5J9EesD+fFeVoITdD/HntUGmBzZ+s TlzhMmNXj6HpqUQZY9I83gOHNj6NJfDNARI33GI9raLZwFvcrQclG0Ha9imBUKaK 1h61z3Ml3aDJXJK/6xcUu3IJbsH39k/ZB4mKI70nDKNmIZZEEmDVhDiSa5E3nReO cmYMBhBWSmVFyfrLx61PgRGmApWET3I1OJxfqJVH8oqtlduFNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPV6pu9yKVI/nLDbifbyu3SuSwxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGQ4M2Y3YzctZTAyZi0z YTQzLTk1ZjgtNzAxMTQ1MjIxYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESYd9wX/0IYkxuK+gE9LkRPJe6gRJrqFojKFDXu8uxkGM+Vev7HOilj pjM/RxFSTC56TgH91ud+aSmOoa8T/pTKWqegC8tq9xBqG6MEIeELybQLlU+i2ejY quF/tMaq/uzcMVxoV+yxAhM7ZUXxGe1L+w3ExP8jjj/EDEjbky7K/qTILAytEi26 486/+CWDFX+3bpMzUWMHbjmh83X+xvGx4uqSxkMhfyN/bsDzG9Ov6GK3UxTN1thT FaKah8+dXwCK0U+3mPQ1EtblISsfztICkVitw+Xb+YBKAM/Jj9QAyefFEhOCZhWK eovhf6TsYOG6tUsw8LSzpO8DUwoEN3U= -----END CERTIFICATE-----Generated at Thu Mar 26 16:11:23 2026 by rpki-client