$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36e3e4e6-480f-38aa-b256-4c1a6e117c83.roa File: 36e3e4e6-480f-38aa-b256-4c1a6e117c83.roa (raw, json) Hash identifier: KpkEPMr8LVpwmG134HgXRYd6brQJlhe29QH2CIDEppw= Subject key identifier: 2A:83:32:08:48:E1:AC:F1:F6:68:71:7A:73:8E:16:74:B2:AD:38:08 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CDF32313D75536ED031789240 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36e3e4e6-480f-38aa-b256-4c1a6e117c83.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 401783 IP address blocks: 209.101.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:31:3d:75:53:6e:d0:31:78:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=ae69293c-1524-4980-bd13-2daf81472930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:d3:32:cd:86:f7:27:8e:2d:c9:e6:41:0a: 93:13:d7:4a:c9:80:4d:4b:ef:48:64:6c:6b:50:43: 19:a8:3d:b0:13:f6:b9:d6:55:e8:a5:d4:60:6a:5c: 9a:9d:d0:d8:1b:12:16:43:c2:67:83:99:3d:42:ab: 0c:17:8a:b9:28:9a:4d:1f:74:d7:ce:68:ec:88:72: 90:a5:63:aa:a4:a2:65:c7:55:db:27:27:79:ad:b0: 28:6c:f0:76:3e:48:95:6b:4a:01:3d:ca:fc:ca:fd: f0:19:5e:33:7e:b8:2f:a1:56:b3:6c:eb:ed:d6:91: 14:88:3e:07:4f:ac:8e:51:4e:bc:ea:52:e5:fe:3e: c1:a1:c1:56:c1:5b:62:2a:27:da:5d:9b:96:a5:75: ad:fb:82:03:25:9f:33:2f:76:df:f9:cf:48:86:5b: 2c:65:9a:3a:2e:ce:2c:07:e7:a6:98:0d:62:11:0e: d8:db:b7:8d:92:0d:32:04:54:1d:cc:a1:9f:d5:12: 81:dc:1e:a1:20:90:28:19:aa:9e:94:c5:32:b6:f8: 80:2e:86:a6:89:83:07:eb:3c:71:c1:2c:fc:23:7a: 54:c1:19:e3:31:af:c0:6d:94:af:6a:95:68:89:b0: d0:05:57:ca:7c:8d:9f:20:0a:9f:42:cf:c9:41:66: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:83:32:08:48:E1:AC:F1:F6:68:71:7A:73:8E:16:74:B2:AD:38:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36e3e4e6-480f-38aa-b256-4c1a6e117c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0e:58:a6:79:ce:f1:0e:82:c6:8e:70:ef:0d:57:22:f0:41: 7b:6f:36:85:80:b5:fa:b3:db:ef:85:9e:b0:16:01:23:07:b1: 1c:b2:e0:05:de:64:e4:cf:a3:ad:4f:79:b2:e2:9d:3b:e5:c2: f8:88:8c:7b:d0:16:c0:ba:d5:db:97:0c:e7:7c:93:63:7c:8e: 89:73:6b:57:3a:c6:3a:13:05:81:62:76:ba:fc:53:85:76:33: d2:53:14:ad:3e:5e:b3:80:9c:11:6c:e7:3f:3a:12:47:20:e9: d8:63:6f:72:21:23:f5:62:44:3d:36:e5:12:a4:c8:0f:84:3b: 5e:55:b7:55:02:07:c3:87:fd:e9:e3:db:fb:3e:8a:fd:22:91: 44:d9:04:f6:14:1d:f0:ee:d5:59:73:84:96:e2:79:b0:2b:af: 49:4f:af:a9:71:f5:eb:e1:a5:05:4c:db:75:55:9a:48:e3:f4: de:e1:08:b3:b3:f0:83:4c:64:53:28:2f:b1:c8:9d:0d:56:70: 71:32:e5:4c:eb:ee:11:c1:f2:85:de:b6:ea:1a:69:e5:fc:d4: 39:35:ee:46:63:41:3e:7a:ff:41:1f:00:62:7b:60:ed:49:e3: a4:1e:d8:dd:b4:a1:7b:1c:72:c4:ac:af:5c:de:b4:43:04:ff: 10:03:59:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMjE9dVNu0DF4kkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk YWU2OTI5M2MtMTUyNC00OTgwLWJkMTMtMmRhZjgxNDcyOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMTTMs2G9yeOLcnmQQqTE9dKyYBNS+9IZGxr UEMZqD2wE/a51lXopdRgalyandDYGxIWQ8Jng5k9QqsMF4q5KJpNH3TXzmjsiHKQ pWOqpKJlx1XbJyd5rbAobPB2PkiVa0oBPcr8yv3wGV4zfrgvoVazbOvt1pEUiD4H T6yOUU686lLl/j7BocFWwVtiKifaXZuWpXWt+4IDJZ8zL3bf+c9IhlssZZo6Ls4s B+emmA1iEQ7Y27eNkg0yBFQdzKGf1RKB3B6hIJAoGaqelMUytviALoamiYMH6zxx wSz8I3pUwRnjMa/AbZSvapVoibDQBVfKfI2fIAqfQs/JQWYf6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqDMghI4azx9mhxenOOFnSyrTgIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzZlM2U0ZTYtNDgwZi0z OGFhLWIyNTYtNGMxYTZlMTE3YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0OWKZ5zvEOgsaOcO8NVyLwQXtvNoWAtfqz2++FnrAWASMHsRyy4AXe ZOTPo61PebLinTvlwviIjHvQFsC61duXDOd8k2N8jolza1c6xjoTBYFidrr8U4V2 M9JTFK0+XrOAnBFs5z86Ekcg6dhjb3IhI/ViRD025RKkyA+EO15Vt1UCB8OH/enj 2/s+iv0ikUTZBPYUHfDu1VlzhJbiebArr0lPr6lx9evhpQVM23VVmkjj9N7hCLOz 8INMZFMoL7HInQ1WcHEy5Uzr7hHB8oXetuoaaeX81Dk17kZjQT56/0EfAGJ7YO1J 46Qe2N20oXsccsSsr1zetEME/xADWRY= -----END CERTIFICATE-----Generated at Sun Mar 1 21:00:37 2026 by rpki-client