$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e7f22ce0-8672-3821-b7fd-05e58fa6db72.roa File: e7f22ce0-8672-3821-b7fd-05e58fa6db72.roa (raw, json) Hash identifier: VYRvjlzs1RmIDtjlbboTKqYtCFeZZWA9TL+ZBUJ2MfY= Subject key identifier: 5B:CD:06:17:DA:95:87:16:6E:B1:50:5B:EE:A3:C2:F7:FD:3A:AC:E6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0EA7EC98CEFDE2ED8286DF00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e7f22ce0-8672-3821-b7fd-05e58fa6db72.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 9304 IP address blocks: 209.101.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:ec:98:ce:fd:e2:ed:82:86:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=bc266413-4b2c-4c01-b6e5-79a1e9ea03af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:74:ad:70:35:a2:95:b1:6d:a0:fb:7a:d2: ce:93:53:7f:01:08:26:fb:d0:2e:b1:1e:32:bc:9c: 7d:72:a2:91:4e:e2:7d:2b:25:7c:47:32:2c:a7:dc: 6d:4f:b3:eb:12:cc:91:cf:fd:4f:9e:dd:78:01:84: 4a:a7:c9:5f:12:76:fc:e2:26:b4:14:c1:98:d3:32: 03:ad:21:90:0b:6c:db:10:fa:7a:65:41:eb:b4:a9: d5:f9:ba:bf:1d:9c:27:72:1e:d8:e0:dc:84:eb:b4: 37:fb:94:6d:ca:5f:53:23:15:65:62:1f:9d:13:5a: 4c:9b:c1:c3:07:80:b6:4b:14:50:29:9a:eb:b7:57: 37:f3:fe:85:35:25:c7:a7:f4:d9:f1:b4:96:1b:6b: 7c:93:f4:39:08:b3:2b:ee:f9:3b:bd:20:d4:47:af: 5e:88:d4:d9:2f:69:91:2b:29:87:6c:38:77:a5:a6: 6e:bd:2a:d6:44:70:34:20:ba:ff:75:7f:f7:95:c0: ef:a6:99:f6:c4:66:91:bd:4b:1d:44:90:55:8f:8a: 40:3c:58:8b:91:dc:74:a9:87:93:63:27:ae:7d:68: 41:52:d7:d3:a3:b9:d1:59:cb:6a:4d:76:51:e3:6f: a3:dd:7f:d6:f4:9e:0d:fb:fa:3f:b3:40:f5:b2:37: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CD:06:17:DA:95:87:16:6E:B1:50:5B:EE:A3:C2:F7:FD:3A:AC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e7f22ce0-8672-3821-b7fd-05e58fa6db72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:d0:1d:53:31:d6:eb:d3:01:40:19:35:de:a1:4e:9a:97:ee: 11:48:6e:a5:e9:f2:6a:97:b6:16:47:3d:da:11:b2:f8:49:a6: 02:51:4c:db:ec:ca:4d:1b:36:4e:74:d2:ec:17:51:25:32:88: ba:10:27:d5:0a:29:c6:4e:4d:27:c4:c4:5b:5e:3d:26:fa:cc: de:8e:ee:26:88:64:d8:8b:b5:c4:83:4f:c1:a2:25:45:ce:16: 7d:a1:d7:05:ce:e9:63:0a:41:f7:56:61:ef:35:5e:e2:52:35: 3a:af:54:3c:f1:97:4d:6b:4e:f9:21:69:65:22:8e:e1:2d:e0: a4:2e:9b:d7:00:ee:f8:90:94:00:88:df:5f:33:52:b3:f9:9a: 48:6f:72:08:33:21:bd:ca:55:cb:98:53:32:40:80:86:75:09: ab:de:0f:87:81:b6:dc:af:ea:5b:9d:06:01:d5:97:b4:ba:91: 79:50:8f:ff:d3:ad:ed:6a:0c:17:a0:9a:74:9a:c8:e0:95:d4: 70:f4:33:22:7c:d6:b7:41:63:b3:c2:ec:fd:8a:72:42:5b:55: 03:c7:1a:5d:86:db:00:4b:23:83:a2:a0:62:64:9a:3e:75:e8: cc:ab:5a:d6:40:94:dd:03:5f:90:12:cc:d1:5f:c0:e5:80:6c: e4:52:52:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+yYzv3i7YKG3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk YmMyNjY0MTMtNGIyYy00YzAxLWI2ZTUtNzlhMWU5ZWEwM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn50rXA1opWxbaD7etLOk1N/AQgm+9AusR4y vJx9cqKRTuJ9KyV8RzIsp9xtT7PrEsyRz/1Pnt14AYRKp8lfEnb84ia0FMGY0zID rSGQC2zbEPp6ZUHrtKnV+bq/HZwnch7Y4NyE67Q3+5Rtyl9TIxVlYh+dE1pMm8HD B4C2SxRQKZrrt1c38/6FNSXHp/TZ8bSWG2t8k/Q5CLMr7vk7vSDUR69eiNTZL2mR KymHbDh3paZuvSrWRHA0ILr/dX/3lcDvppn2xGaRvUsdRJBVj4pAPFiLkdx0qYeT YyeufWhBUtfTo7nRWctqTXZR42+j3X/W9J4N+/o/s0D1sjfttQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvNBhfalYcWbrFQW+6jwvf9OqzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTdmMjJjZTAtODY3Mi0z ODIxLWI3ZmQtMDVlNThmYTZkYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPQHVMx1uvTAUAZNd6hTpqX7hFIbqXp8mqXthZHPdoRsvhJpgJRTNvs yk0bNk500uwXUSUyiLoQJ9UKKcZOTSfExFtePSb6zN6O7iaIZNiLtcSDT8GiJUXO Fn2h1wXO6WMKQfdWYe81XuJSNTqvVDzxl01rTvkhaWUijuEt4KQum9cA7viQlACI 318zUrP5mkhvcggzIb3KVcuYUzJAgIZ1CaveD4eBttyv6ludBgHVl7S6kXlQj//T re1qDBegmnSayOCV1HD0MyJ81rdBY7PC7P2KckJbVQPHGl2G2wBLI4OioGJkmj51 6MyrWtZAlN0DX5ASzNFfwOWAbORSUoQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:29:55 2026 by rpki-client