$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa File: 22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa (raw, json) Hash identifier: NV0JQnfd7N1nCqJ05+WmAHIR1T/teIK26INGuivZT4Q= Subject key identifier: 8C:28:C7:F2:99:52:8E:02:B4:E8:B6:B0:EB:C8:85:A0:5D:DD:5F:86 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CDF329D3253618744A2198340 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 401783 IP address blocks: 209.101.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:9d:32:53:61:87:44:a2:19:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=c43ca98c-ee92-4433-86cd-9681148bc333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:9a:5c:b3:5f:33:5c:d4:b8:bf:82:e2:23: 58:0e:08:62:ad:1b:b2:5d:7f:10:78:1e:e4:5b:5f: 45:78:9e:77:a3:6f:61:e4:ab:cd:28:3d:75:95:75: ea:b5:78:8e:4d:6d:13:17:64:79:67:8c:de:9a:d2: 90:b3:15:6d:a8:21:34:5c:23:32:d7:fa:ba:ee:10: 41:ae:1a:10:56:33:f8:64:c5:14:ab:65:b9:29:39: f8:49:0a:61:ea:90:12:ae:fa:79:16:8e:51:03:4d: 39:ee:e2:61:d1:7d:2a:17:ea:8f:20:a9:f3:58:f4: b7:9c:0b:6e:d1:72:d2:55:bf:88:22:78:c6:2f:75: 7a:ad:fa:e8:53:07:b0:d2:ab:27:45:14:f7:b2:05: 11:5c:00:e5:9b:85:1a:06:63:e3:d2:89:22:8f:85: f8:66:bc:9e:94:78:b4:9d:30:79:f2:60:d9:f5:f6: 20:92:c7:70:70:82:d2:9d:09:eb:1c:d9:0a:c1:8b: 4f:f1:55:d5:da:75:af:ee:19:c4:38:ca:6b:04:78: 33:6f:5a:02:17:18:96:7d:cc:43:e0:ea:85:bb:ba: 06:eb:72:e6:ed:39:16:39:c1:97:83:ef:52:09:78: aa:f1:19:b4:d5:8d:90:6e:b4:95:59:ab:ec:d0:0e: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:28:C7:F2:99:52:8E:02:B4:E8:B6:B0:EB:C8:85:A0:5D:DD:5F:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22b0bfa0-bcae-31c4-ac3c-9a142a683927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bb:08:2f:52:27:51:46:b6:d1:76:aa:67:a2:88:7a:ff:db: f7:a9:d4:58:fe:a4:bb:67:1f:28:d2:f2:3f:59:a4:6c:33:f9: 0d:fa:17:df:7e:13:3d:9a:e9:ea:fd:ca:5c:05:17:72:23:15: 78:a4:4a:e6:ae:29:b0:81:da:08:47:fd:19:b7:d8:98:a0:b1: 02:60:15:19:41:bd:0d:ff:86:03:df:c8:8f:e0:ed:97:64:49: 34:c0:a0:cf:e7:a0:46:52:02:45:66:85:fb:43:50:4c:7e:04: 79:6f:69:03:f0:62:a4:18:97:6d:ce:8d:c1:e4:24:8e:d5:51: 69:69:7b:34:66:90:9d:46:b1:bb:c5:25:ae:fb:af:18:b2:cb: 3b:f6:ed:60:3b:92:9c:24:7f:8e:6d:f1:c5:49:a4:c2:45:ed: 5c:34:1a:85:d4:2a:95:88:4e:90:40:68:dc:68:17:de:67:45: f6:1e:73:c2:2b:39:31:67:2c:43:88:2e:41:53:c3:ed:03:09: 4c:b2:ae:4a:d7:90:2d:31:2b:8b:3e:da:40:ad:a8:f3:e8:e0: 44:ba:fc:8a:44:07:8e:91:91:59:e7:b1:86:de:ab:d2:2f:ef: d3:39:38:84:96:e8:8e:d3:32:59:ed:79:d7:78:1a:0f:de:f4: 23:a7:63:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMp0yU2GHRKIZg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk YzQzY2E5OGMtZWU5Mi00NDMzLTg2Y2QtOTY4MTE0OGJjMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoyaXLNfM1zUuL+C4iNYDghirRuyXX8QeB7k W19FeJ53o29h5KvNKD11lXXqtXiOTW0TF2R5Z4zemtKQsxVtqCE0XCMy1/q67hBB rhoQVjP4ZMUUq2W5KTn4SQph6pASrvp5Fo5RA0057uJh0X0qF+qPIKnzWPS3nAtu 0XLSVb+IInjGL3V6rfroUwew0qsnRRT3sgURXADlm4UaBmPj0okij4X4ZryelHi0 nTB58mDZ9fYgksdwcILSnQnrHNkKwYtP8VXV2nWv7hnEOMprBHgzb1oCFxiWfcxD 4OqFu7oG63Lm7TkWOcGXg+9SCXiq8Rm01Y2QbrSVWavs0A7vGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwox/KZUo4CtOi2sOvIhaBd3V+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjJiMGJmYTAtYmNhZS0z MWM0LWFjM2MtOWExNDJhNjgzOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+7CC9SJ1FGttF2qmeiiHr/2/ep1Fj+pLtnHyjS8j9ZpGwz+Q36F99+ Ez2a6er9ylwFF3IjFXikSuauKbCB2ghH/Rm32JigsQJgFRlBvQ3/hgPfyI/g7Zdk STTAoM/noEZSAkVmhftDUEx+BHlvaQPwYqQYl23OjcHkJI7VUWlpezRmkJ1GsbvF Ja77rxiyyzv27WA7kpwkf45t8cVJpMJF7Vw0GoXUKpWITpBAaNxoF95nRfYec8Ir OTFnLEOILkFTw+0DCUyyrkrXkC0xK4s+2kCtqPPo4ES6/IpEB46RkVnnsYbeq9Iv 79M5OISW6I7TMlntedd4Gg/e9COnY/c= -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:21 2026 by rpki-client