$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa File: 33bcd53a-1310-3cd5-91f3-46979f980f8e.roa (raw, json) Hash identifier: Do3xjs+ijNo1C/Mzf+5BRkvi1TIDSpaF/qpPLfSlRsA= Subject key identifier: B7:74:36:22:14:54:E4:B5:69:60:21:EC:BA:D3:1C:53:E8:90:25:BF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CDF322CB55C85C79842E28720 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 401783 IP address blocks: 209.101.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:2c:b5:5c:85:c7:98:42:e2:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=3aa01bc8-32eb-4818-8a27-c0fb4f54a557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:0d:50:35:89:a8:0e:41:e7:bd:3d:2f:9a: 4b:5d:e9:d1:10:8d:e1:25:6a:62:ee:1b:92:59:37: 17:cd:fc:6e:f5:f8:01:85:09:1d:04:03:b0:31:7a: 57:99:b7:7a:f4:07:ba:b9:41:15:19:93:b9:a2:d0: 74:2c:28:53:b4:24:b3:81:df:46:73:7f:6b:34:5a: 20:4a:71:63:9e:36:87:10:fd:7e:9d:29:00:6b:2e: f5:1a:c5:37:98:86:47:3d:6d:ff:ec:4c:75:7f:74: 91:43:1d:d2:b4:c4:1b:8e:17:44:cc:e5:07:0e:ec: 06:8d:08:39:54:ac:05:32:b8:aa:2d:9d:6b:a1:1d: f8:b0:f0:b4:3c:a6:49:12:54:0f:79:16:b2:66:0c: 63:be:6f:3b:1b:9a:06:bf:d9:e2:47:3c:dd:50:8b: e0:8e:8c:79:dd:06:31:79:d6:7a:0d:c8:27:47:7d: fa:58:a0:e7:bc:47:16:63:9e:e9:3f:42:6c:8d:ae: a8:3e:42:3f:a2:6a:80:72:ca:ba:21:11:9e:a4:9e: 8f:53:e4:ca:e6:a8:f8:2b:fd:aa:96:b4:fe:8a:00: 38:19:a6:59:b6:c6:96:65:72:5b:25:fb:2f:29:1e: dc:1d:05:60:a6:e8:72:09:9f:58:24:e7:5b:83:0c: 77:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:74:36:22:14:54:E4:B5:69:60:21:EC:BA:D3:1C:53:E8:90:25:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:1e:fc:1d:64:18:e8:79:9b:fc:77:aa:21:69:bd:46:02:12: 05:f8:b4:b8:ec:cb:0c:04:57:ca:27:80:90:ef:01:36:7d:a0: ac:8f:2e:31:74:fa:26:45:0c:5c:87:b8:84:87:c6:a5:47:41: 8a:80:b8:a3:d5:c6:3e:21:3b:2c:8e:5b:4c:a3:4a:7e:97:9a: 60:1f:c5:0e:5e:4d:f7:9b:5f:8a:b9:a4:9c:e9:92:38:f3:3f: 40:cc:b2:cb:65:ab:56:2a:3c:b0:ce:f5:82:5a:4a:96:4a:b3: 9b:52:56:24:50:6a:f9:75:6c:06:17:11:92:25:62:ab:1d:c7: 55:82:71:f8:47:0d:06:0f:2e:8e:44:dd:23:33:fb:65:fa:8a: 60:9d:94:96:d4:6c:1e:85:57:e5:34:c7:bb:80:8f:a4:d8:25: 18:58:58:2b:c0:2c:86:e3:98:40:bf:5a:30:1e:46:39:c3:e1: 96:37:82:a0:7a:a1:73:c2:48:8e:3d:76:87:1e:7e:97:ab:9a: 8d:0c:ec:37:1d:e0:60:bd:02:ce:54:11:39:89:2a:7d:21:dd: 7d:5a:63:b2:cf:7a:77:dc:79:2b:82:d4:66:c1:09:3c:08:f2: 44:a6:38:8f:7a:4e:ed:80:df:0b:39:bb:94:10:f1:13:61:b6: 84:a2:ca:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMiy1XIXHmELihyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk M2FhMDFiYzgtMzJlYi00ODE4LThhMjctYzBmYjRmNTRhNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzcNUDWJqA5B5709L5pLXenREI3hJWpi7huS WTcXzfxu9fgBhQkdBAOwMXpXmbd69Ae6uUEVGZO5otB0LChTtCSzgd9Gc39rNFog SnFjnjaHEP1+nSkAay71GsU3mIZHPW3/7Ex1f3SRQx3StMQbjhdEzOUHDuwGjQg5 VKwFMriqLZ1roR34sPC0PKZJElQPeRayZgxjvm87G5oGv9niRzzdUIvgjox53QYx edZ6DcgnR336WKDnvEcWY57pP0Jsja6oPkI/omqAcsq6IRGepJ6PU+TK5qj4K/2q lrT+igA4GaZZtsaWZXJbJfsvKR7cHQVgpuhyCZ9YJOdbgwx3IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd0NiIUVOS1aWAh7LrTHFPokCW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzNiY2Q1M2EtMTMxMC0z Y2Q1LTkxZjMtNDY5NzlmOTgwZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYe/B1kGOh5m/x3qiFpvUYCEgX4tLjsywwEV8ongJDvATZ9oKyPLjF0 +iZFDFyHuISHxqVHQYqAuKPVxj4hOyyOW0yjSn6XmmAfxQ5eTfebX4q5pJzpkjjz P0DMsstlq1YqPLDO9YJaSpZKs5tSViRQavl1bAYXEZIlYqsdx1WCcfhHDQYPLo5E 3SMz+2X6imCdlJbUbB6FV+U0x7uAj6TYJRhYWCvALIbjmEC/WjAeRjnD4ZY3gqB6 oXPCSI49docefpermo0M7Dcd4GC9As5UETmJKn0h3X1aY7LPenfceSuC1GbBCTwI 8kSmOI96Tu2A3ws5u5QQ8RNhtoSiykM= -----END CERTIFICATE-----Generated at Mon Mar 2 12:50:05 2026 by rpki-client