$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1b586ac6-72ef-330e-8ea3-32eeea946282.roa File: 1b586ac6-72ef-330e-8ea3-32eeea946282.roa (raw, json) Hash identifier: NcsO8bYprApRenPyUeFr5nXADk7ukzSA5LgUgI6SnNg= Subject key identifier: D1:3E:4D:8A:CE:87:A2:2C:6C:E1:87:81:B4:F3:6F:8A:C1:B1:7B:4C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CDF32B597DD9098A175D5FC80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1b586ac6-72ef-330e-8ea3-32eeea946282.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 401783 IP address blocks: 209.101.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:b5:97:dd:90:98:a1:75:d5:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=3a494596-b18e-4cfe-9fb4-048104228714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:6e:3c:03:a7:41:bd:76:a6:ea:73:a6:8e: 9d:44:d9:d0:c6:49:19:fb:23:73:3f:41:e1:86:ec: ef:0d:53:d5:8a:33:ae:96:2d:d6:eb:e9:4c:5b:8b: 96:e5:b8:3e:8b:c8:2b:d1:24:9f:81:bc:44:39:66: a3:4f:11:73:b2:ef:ca:44:54:ed:c7:95:31:b9:85: 02:52:a1:4e:3b:92:c3:38:14:67:57:b5:82:54:5b: 41:f1:be:f2:2e:43:e4:d6:da:ec:c6:8b:26:12:08: 86:3f:0d:56:5c:55:81:6c:61:d5:ff:fb:eb:4c:b5: d1:26:8c:24:a2:51:27:5a:9f:c0:83:3d:24:d3:35: 07:6a:70:f3:36:2d:9f:15:a8:32:06:db:60:37:49: f4:f9:ee:01:3c:d0:26:d4:c6:a3:40:2e:f3:d4:4f: 67:23:a8:65:da:eb:a2:72:da:87:c0:7e:1d:d8:0a: 14:c3:b9:27:54:a1:00:6c:9e:be:79:95:50:28:cd: 1c:16:d6:10:19:f3:5b:c5:6c:0e:b9:25:47:2b:b3: 09:0e:14:a6:03:97:96:59:64:a0:c7:2e:94:9e:0d: e9:ff:e6:d9:bc:c2:8b:86:4d:8e:fb:3c:9b:ee:96: 99:4b:26:4c:a7:0f:db:ce:4b:05:ec:f0:3a:9a:c3: 2b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3E:4D:8A:CE:87:A2:2C:6C:E1:87:81:B4:F3:6F:8A:C1:B1:7B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1b586ac6-72ef-330e-8ea3-32eeea946282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:2c:01:b4:dd:3a:c9:5b:36:6c:c5:d8:b9:59:08:58:23:aa: bc:ca:60:0d:b8:1e:cf:b4:15:ce:e8:ee:6a:7c:57:67:57:22: ec:27:50:93:4d:e9:44:90:36:28:36:14:17:9a:44:d7:11:30: 34:81:6a:c6:28:44:ab:f1:c2:db:0e:a8:e0:bf:d8:d1:ff:ff: dd:cc:5e:5e:0f:9b:32:39:29:46:55:6b:42:01:94:48:a7:a5: 16:5e:80:ac:c1:81:f9:ab:18:04:dc:f2:bf:e4:c5:99:f8:b8: 5c:3e:05:d8:d5:8f:e9:c0:cb:a7:f2:02:44:29:d4:ce:12:9c: 2d:08:6c:76:ed:2c:36:9d:f9:bc:37:7a:96:73:ac:96:c7:78: e6:46:ed:8f:80:ee:ad:11:15:52:a2:b7:8f:55:0c:99:5a:f0: 2d:e6:bf:ea:4f:a3:d4:a9:b4:93:97:f6:a3:da:ef:8a:2e:c1: f0:cc:60:68:fe:3c:9e:53:01:90:73:66:61:ac:5c:da:92:6b: 8a:4e:ae:75:cf:05:2e:88:cc:81:4a:fc:53:12:cf:88:b5:3f: 83:10:76:f6:c4:8f:67:85:42:f8:56:59:7d:05:db:f7:4f:03: 40:8f:5a:dd:59:59:da:4f:d3:11:4e:81:5c:40:2e:95:1f:4c: 69:74:36:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMrWX3ZCYoXXV/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk M2E0OTQ1OTYtYjE4ZS00Y2ZlLTlmYjQtMDQ4MTA0MjI4NzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA105uPAOnQb12pupzpo6dRNnQxkkZ+yNzP0Hh huzvDVPVijOuli3W6+lMW4uW5bg+i8gr0SSfgbxEOWajTxFzsu/KRFTtx5UxuYUC UqFOO5LDOBRnV7WCVFtB8b7yLkPk1trsxosmEgiGPw1WXFWBbGHV//vrTLXRJowk olEnWp/Agz0k0zUHanDzNi2fFagyBttgN0n0+e4BPNAm1MajQC7z1E9nI6hl2uui ctqHwH4d2AoUw7knVKEAbJ6+eZVQKM0cFtYQGfNbxWwOuSVHK7MJDhSmA5eWWWSg xy6Ung3p/+bZvMKLhk2O+zyb7paZSyZMpw/bzksF7PA6msMrIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE+TYrOh6IsbOGHgbTzb4rBsXtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWI1ODZhYzYtNzJlZi0z MzBlLThlYTMtMzJlZWVhOTQ2MjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIsAbTdOslbNmzF2LlZCFgjqrzKYA24Hs+0Fc7o7mp8V2dXIuwnUJNN 6USQNig2FBeaRNcRMDSBasYoRKvxwtsOqOC/2NH//93MXl4PmzI5KUZVa0IBlEin pRZegKzBgfmrGATc8r/kxZn4uFw+BdjVj+nAy6fyAkQp1M4SnC0IbHbtLDad+bw3 epZzrJbHeOZG7Y+A7q0RFVKit49VDJla8C3mv+pPo9SptJOX9qPa74ouwfDMYGj+ PJ5TAZBzZmGsXNqSa4pOrnXPBS6IzIFK/FMSz4i1P4MQdvbEj2eFQvhWWX0F2/dP A0CPWt1ZWdpP0xFOgVxALpUfTGl0Np8= -----END CERTIFICATE-----Generated at Sun Mar 1 21:08:14 2026 by rpki-client