$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/373cd9f3-8e5e-30f2-9ec3-601e6b2a4654.roa File: 373cd9f3-8e5e-30f2-9ec3-601e6b2a4654.roa (raw, json) Hash identifier: Mf8YUSSwK1Gs0sod5WlC1DGs7IKHbBV4esgVodqsu6E= Subject key identifier: 49:3E:6D:14:7D:60:10:35:37:B3:D4:78:49:EA:2D:30:4E:AA:62:25 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D037CECF9C35AE371F69D0980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/373cd9f3-8e5e-30f2-9ec3-601e6b2a4654.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 834 IP address blocks: 209.101.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:ec:f9:c3:5a:e3:71:f6:9d:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=ce1c0ac3-2a17-43bb-8007-1027e2a4c0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4b:05:04:e4:7e:bf:95:78:6d:83:55:ab:50: 7d:c3:8e:bb:1f:af:7e:54:d1:46:0f:01:ec:5e:17: 56:64:a5:3a:0a:36:90:9b:23:f6:79:26:b5:44:50: 10:ce:2e:29:0f:48:2f:d5:14:02:4b:95:b6:51:b8: 48:5d:e8:ce:10:9d:d9:0f:ce:80:1d:8c:5a:e9:2f: ec:a7:90:b1:fe:7a:c4:3f:a5:a7:6f:3b:49:11:d9: 7a:dc:74:4d:c6:0f:b0:d1:5c:c3:68:53:5d:aa:fa: 45:53:1f:fe:92:03:b8:e4:bb:b5:21:78:21:e2:2d: bf:60:bf:1a:31:33:b1:2f:66:5d:1e:0a:0e:82:eb: c2:87:62:fa:5b:0f:cd:e7:7c:15:27:66:4e:ff:7d: 48:7f:c8:45:47:79:0c:41:aa:09:3d:92:fc:a6:01: 7c:bb:e1:2b:0f:d9:ab:e0:24:5a:3d:b3:06:29:8d: 61:ea:6f:34:98:75:17:0d:e6:3c:b4:6c:c8:53:fe: b9:91:92:15:72:5d:0b:db:21:7f:ee:91:c0:ef:60: 5b:37:90:8e:89:b2:5b:7d:7e:8a:15:9c:47:26:1d: 13:96:37:73:fa:9a:cc:e9:34:70:9b:ea:55:d1:46: b5:e7:0b:9e:ba:42:e1:ca:18:d9:cc:e7:39:3f:c4: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3E:6D:14:7D:60:10:35:37:B3:D4:78:49:EA:2D:30:4E:AA:62:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/373cd9f3-8e5e-30f2-9ec3-601e6b2a4654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:04:5e:75:9c:d2:39:64:fa:05:8e:7e:73:21:7b:80:dd:ea: b6:32:7e:f1:dd:43:e9:1b:74:22:f7:25:66:2a:00:9e:f2:07: da:a7:e9:63:e8:e3:19:a2:56:2d:d7:4f:ce:78:fa:d7:cc:8f: e0:9d:0a:5b:bc:ed:6d:86:11:86:f2:17:66:65:c8:8c:e4:b7: 9a:34:15:9a:68:60:a2:3d:ce:5b:6e:85:a4:ba:7a:8b:00:3a: e6:50:cf:e2:9e:87:03:32:9c:fa:a3:c0:9b:ff:81:11:f2:be: 96:f4:30:af:8e:ca:33:39:0a:a5:6f:cb:69:1e:91:13:b1:fa: 3e:f4:c1:8b:b2:42:5c:91:0f:3c:4e:37:d0:3b:fc:77:96:67: 1e:55:4a:9b:a9:fe:c4:b2:c8:10:6e:8d:63:9c:2f:06:60:55: 1c:83:bd:a1:1b:6d:16:6b:bb:c1:2f:ac:30:8a:39:ec:9e:c7: e5:6d:7a:31:de:24:47:4e:10:e9:b3:42:2f:83:43:0d:6e:9e: 0f:50:98:e5:57:ba:dd:56:bc:32:e3:5b:ab:a5:fc:38:97:9f: 87:8a:ab:7e:f2:c9:b3:bc:19:b3:b2:d3:82:53:80:27:b6:64: a6:e4:d7:e4:43:0f:e6:27:d6:42:fa:74:a8:04:04:15:09:ec: ff:b8:f4:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfOz5w1rjcfadCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk Y2UxYzBhYzMtMmExNy00M2JiLTgwMDctMTAyN2UyYTRjMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUsFBOR+v5V4bYNVq1B9w467H69+VNFGDwHs XhdWZKU6CjaQmyP2eSa1RFAQzi4pD0gv1RQCS5W2UbhIXejOEJ3ZD86AHYxa6S/s p5Cx/nrEP6WnbztJEdl63HRNxg+w0VzDaFNdqvpFUx/+kgO45Lu1IXgh4i2/YL8a MTOxL2ZdHgoOguvCh2L6Ww/N53wVJ2ZO/31If8hFR3kMQaoJPZL8pgF8u+ErD9mr 4CRaPbMGKY1h6m80mHUXDeY8tGzIU/65kZIVcl0L2yF/7pHA72BbN5COibJbfX6K FZxHJh0Tljdz+prM6TRwm+pV0Ua15wueukLhyhjZzOc5P8T+3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk+bRR9YBA1N7PUeEnqLTBOqmIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzczY2Q5ZjMtOGU1ZS0z MGYyLTllYzMtNjAxZTZiMmE0NjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WW5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8EXnWc0jlk+gWOfnMhe4Dd6rYyfvHdQ+kbdCL3JWYqAJ7yB9qn6WPo 4xmiVi3XT854+tfMj+CdClu87W2GEYbyF2ZlyIzkt5o0FZpoYKI9zltuhaS6eosA OuZQz+KehwMynPqjwJv/gRHyvpb0MK+OyjM5CqVvy2kekROx+j70wYuyQlyRDzxO N9A7/HeWZx5VSpup/sSyyBBujWOcLwZgVRyDvaEbbRZru8EvrDCKOeyex+VtejHe JEdOEOmzQi+DQw1ung9QmOVXut1WvDLjW6ul/DiXn4eKq37yybO8GbOy04JTgCe2 ZKbk1+RDD+Yn1kL6dKgEBBUJ7P+49Es= -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:27 2026 by rpki-client