$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/20201439-07dd-344e-8b2d-3694e8efcd6f.roa File: 20201439-07dd-344e-8b2d-3694e8efcd6f.roa (raw, json) Hash identifier: 41n3Gy2UmESXVwYJ37fn2QYANep6bxsfuiHA+l0lbSA= Subject key identifier: B4:EB:3A:AB:39:D0:DA:EC:80:85:33:02:B4:FB:80:FE:20:78:AF:B5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D04E22E236AC7EC7976EA7C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/20201439-07dd-344e-8b2d-3694e8efcd6f.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 3356 IP address blocks: 216.175.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:2e:23:6a:c7:ec:79:76:ea:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=dc70c2cd-2991-4748-b1ae-d9a9bc40cb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:05:ea:73:f9:22:eb:74:5a:21:e5:31:85:93: c7:5d:aa:bc:1f:5f:8e:68:0b:e5:7a:c5:43:f5:90: 5b:94:97:a2:30:f2:87:e9:a4:87:1d:86:3b:cf:69: e2:c2:ae:38:9b:72:2b:3c:02:e7:90:9c:c4:a9:2c: 50:7f:09:85:2b:38:e1:75:23:4a:9d:ad:44:db:e8: 13:93:f1:70:8f:f0:3a:8f:61:02:66:db:48:f4:7e: 3c:df:1c:19:3f:3a:a3:b0:14:2a:90:47:d4:fd:4c: 74:3c:43:12:11:34:c1:f3:31:42:8b:b9:09:04:ee: 8a:37:f3:7f:4d:e6:4d:5d:38:b4:47:81:0b:59:29: e7:ea:38:09:9b:24:ec:d4:c3:be:48:46:52:08:d7: e1:04:7d:2c:fb:fe:b3:da:af:60:16:02:ab:c0:f1: 29:b4:0f:8b:eb:5b:06:ce:b0:79:67:94:e9:40:ad: 4a:90:26:8c:33:76:11:2e:80:cb:db:2b:5a:e9:2e: 83:f6:dd:ed:3e:30:32:8b:7f:e3:7e:19:50:b9:f5: 89:be:f2:40:51:40:00:12:e6:e1:2f:4e:ff:16:e6: 70:b7:f5:a6:62:c8:29:98:97:0d:79:e5:c1:50:e4: 11:3e:43:8a:d4:b2:d2:a0:1f:b5:de:fc:d6:40:63: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EB:3A:AB:39:D0:DA:EC:80:85:33:02:B4:FB:80:FE:20:78:AF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/20201439-07dd-344e-8b2d-3694e8efcd6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.175.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:29:55:8b:55:d2:2c:9a:8d:3e:cb:28:d5:3b:d0:67:14:08: 2d:a1:8e:0a:f8:4f:08:8a:fb:2e:14:d4:6d:09:fd:a4:b2:ec: d0:7c:9a:e0:2a:62:bd:c7:b1:80:71:57:cf:10:ce:12:90:a7: 9b:a0:8c:8c:cf:8c:a0:a6:52:e5:65:38:7b:8e:19:c3:cb:57: f7:d6:5e:d1:f2:17:1d:c4:00:30:f9:84:56:a5:0d:54:eb:89: 02:05:05:82:a9:0e:84:8b:f6:94:b0:c5:1d:48:f1:7e:61:3e: c6:de:71:3e:ce:23:ff:61:dd:75:9f:bd:b3:e4:d2:cc:67:f9: 80:f7:29:ca:22:4e:88:1c:98:47:d0:f3:06:50:d3:28:13:c9: 43:a7:35:c8:7f:8a:e8:45:2b:72:1c:c0:60:2f:67:8a:25:5e: 7b:fd:c0:15:81:04:49:59:e4:f2:fc:f0:ca:20:a3:6c:80:ab: c0:1f:c8:96:09:43:b4:55:e3:73:cd:43:29:16:79:e3:7d:e0: f7:45:99:e1:e3:f9:07:5a:e6:f0:ae:52:ea:96:74:62:0f:09: af:96:15:25:31:b5:38:3e:12:91:7d:e2:6b:0f:0f:5f:bc:b6: 97:ac:b8:3f:85:5b:e5:bf:11:18:b5:b9:99:01:04:74:3d:87: 34:2d:89:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4i4jasfseXbqfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZGM3MGMyY2QtMjk5MS00NzQ4LWIxYWUtZDlhOWJjNDBjYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAXqc/ki63RaIeUxhZPHXaq8H1+OaAvlesVD 9ZBblJeiMPKH6aSHHYY7z2niwq44m3IrPALnkJzEqSxQfwmFKzjhdSNKna1E2+gT k/Fwj/A6j2ECZttI9H483xwZPzqjsBQqkEfU/Ux0PEMSETTB8zFCi7kJBO6KN/N/ TeZNXTi0R4ELWSnn6jgJmyTs1MO+SEZSCNfhBH0s+/6z2q9gFgKrwPEptA+L61sG zrB5Z5TpQK1KkCaMM3YRLoDL2yta6S6D9t3tPjAyi3/jfhlQufWJvvJAUUAAEubh L07/FuZwt/WmYsgpmJcNeeXBUOQRPkOK1LLSoB+13vzWQGNlAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTrOqs50NrsgIUzArT7gP4geK+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjAyMDE0MzktMDdkZC0z NDRlLThiMmQtMzY5NGU4ZWZjZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2K/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYpVYtV0iyajT7LKNU70GcUCC2hjgr4TwiK+y4U1G0J/aSy7NB8muAq Yr3HsYBxV88QzhKQp5ugjIzPjKCmUuVlOHuOGcPLV/fWXtHyFx3EADD5hFalDVTr iQIFBYKpDoSL9pSwxR1I8X5hPsbecT7OI/9h3XWfvbPk0sxn+YD3KcoiTogcmEfQ 8wZQ0ygTyUOnNch/iuhFK3IcwGAvZ4olXnv9wBWBBElZ5PL88Mogo2yAq8AfyJYJ Q7RV43PNQykWeeN94PdFmeHj+Qda5vCuUuqWdGIPCa+WFSUxtTg+EpF94msPD1+8 tpesuD+FW+W/ERi1uZkBBHQ9hzQtiW4= -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:30 2026 by rpki-client