$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/45a2f1b3-32d0-3e6d-8ba2-2640f866e929.roa File: 45a2f1b3-32d0-3e6d-8ba2-2640f866e929.roa (raw, json) Hash identifier: iJHfrdJYL9+7KCS3VbTmZ73WaatSQFn04PxKVY3bLSQ= Subject key identifier: 24:A0:43:E1:14:F4:55:84:77:CA:67:4E:43:65:68:EB:BB:36:C4:1D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CF6BE7682A208E998D74DE4C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/45a2f1b3-32d0-3e6d-8ba2-2640f866e929.roa Signing time: Tue 24 Feb 2026 00:27:15 +0000 ROA not before: Tue 24 Feb 2026 00:27:15 +0000 ROA not after: Sun 24 May 2026 23:27:15 +0000 asID: 2914 IP address blocks: 209.101.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:be:76:82:a2:08:e9:98:d7:4d:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 24 00:27:15 2026 GMT Not After : May 24 23:27:15 2026 GMT Subject: CN=8879a0de-dba4-48c9-bb57-3f8a8a8140d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:c1:39:42:ed:73:a9:a7:04:54:c2:c9:09: 93:04:ec:6d:13:62:ed:24:19:9d:0c:88:95:1e:de: d0:b5:d5:07:10:4c:c5:5e:5f:5e:69:30:5d:92:79: 05:32:94:f3:b5:8f:f6:7f:05:71:29:79:06:c7:04: a2:54:68:c4:7d:23:37:a4:80:a2:79:c2:1d:6c:d4: 8e:0d:ce:79:c7:fc:a6:a2:c7:98:14:56:97:22:67: 55:ed:d2:b2:74:d1:c1:c9:72:17:b5:58:fb:8c:ed: fb:4a:85:47:8b:9e:56:be:33:92:2a:02:02:41:4c: fd:d3:d9:a6:99:59:ba:7c:2c:08:b3:6f:d0:b2:c8: 94:46:96:e9:9a:c9:e3:25:ec:bd:d4:0e:18:9f:67: 5a:9d:08:cf:93:17:1f:9d:e1:07:44:e4:52:98:33: 20:65:bd:40:71:db:6d:ee:96:f9:ba:6d:5b:b2:55: e5:34:9c:d9:20:20:be:b4:c0:7a:fd:e5:c2:11:2e: 69:da:9f:03:e8:d6:01:35:d4:c8:c6:6e:b3:da:26: 20:11:50:4d:92:68:71:2d:9a:ca:b5:cb:18:c4:6b: be:bc:0a:8a:70:f4:7d:d1:7e:4a:94:e3:5a:d4:b4: 6c:46:71:47:07:0e:fe:93:50:e3:3c:f0:35:79:f8: f7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A0:43:E1:14:F4:55:84:77:CA:67:4E:43:65:68:EB:BB:36:C4:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/45a2f1b3-32d0-3e6d-8ba2-2640f866e929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:68:61:e7:59:a5:cc:bc:81:28:35:11:9f:d3:30:4f:c9:bf: 89:71:a7:c7:da:7e:ec:0c:5a:a5:97:7a:d0:12:da:91:db:50: 53:54:b7:28:1e:86:74:8b:1d:08:b0:89:a1:b9:03:25:91:35: 70:f4:6c:a6:0e:7a:fa:1d:57:dc:aa:ad:de:eb:02:82:5b:c4: 82:44:ef:0a:e4:b3:7b:d7:77:bb:5b:4e:a4:ed:02:95:26:61: 90:91:17:12:af:f0:d4:2f:a3:a5:90:29:f9:0f:b0:e7:ab:b1: 45:11:7d:59:d2:cc:f8:99:f2:b1:f7:2d:63:c6:6d:98:54:b3: e6:18:11:85:63:87:cf:ca:64:a0:4d:15:2f:b1:9e:48:38:91: ae:03:23:90:4c:81:d7:93:42:26:81:7f:39:ac:94:db:f5:22: fa:e2:65:8f:f9:e2:5c:17:06:8c:3f:f2:4f:65:2a:b6:ff:88: e6:a0:82:2a:33:f2:f3:71:cf:98:07:95:27:b1:93:77:62:05: 77:db:6b:23:69:76:18:52:d6:f2:5f:77:25:b3:ca:78:f5:10: 38:9a:c1:33:b4:f3:58:c2:45:43:49:2b:1f:34:4d:8c:53:20: ff:a9:7a:d1:26:a2:26:ff:3d:ed:c4:ce:f4:bc:ec:fa:4f:f7: d9:34:71:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz2vnaCogjpmNdN5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyNDAwMjcxNVoXDTI2MDUyNDIzMjcxNVowLzEtMCsGA1UEAxMk ODg3OWEwZGUtZGJhNC00OGM5LWJiNTctM2Y4YThhODE0MGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HHBOULtc6mnBFTCyQmTBOxtE2LtJBmdDIiV Ht7QtdUHEEzFXl9eaTBdknkFMpTztY/2fwVxKXkGxwSiVGjEfSM3pICiecIdbNSO Dc55x/ymoseYFFaXImdV7dKydNHByXIXtVj7jO37SoVHi55WvjOSKgICQUz909mm mVm6fCwIs2/QssiURpbpmsnjJey91A4Yn2danQjPkxcfneEHRORSmDMgZb1Acdtt 7pb5um1bslXlNJzZICC+tMB6/eXCES5p2p8D6NYBNdTIxm6z2iYgEVBNkmhxLZrK tcsYxGu+vAqKcPR90X5KlONa1LRsRnFHBw7+k1DjPPA1efj3QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSgQ+EU9FWEd8pnTkNlaOu7NsQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDVhMmYxYjMtMzJkMC0z ZTZkLThiYTItMjY0MGY4NjZlOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALloYedZpcy8gSg1EZ/TME/Jv4lxp8fafuwMWqWXetAS2pHbUFNUtyge hnSLHQiwiaG5AyWRNXD0bKYOevodV9yqrd7rAoJbxIJE7wrks3vXd7tbTqTtApUm YZCRFxKv8NQvo6WQKfkPsOersUURfVnSzPiZ8rH3LWPGbZhUs+YYEYVjh8/KZKBN FS+xnkg4ka4DI5BMgdeTQiaBfzmslNv1IvriZY/54lwXBow/8k9lKrb/iOaggioz 8vNxz5gHlSexk3diBXfbayNpdhhS1vJfdyWzynj1EDiawTO081jCRUNJKx80TYxT IP+petEmoib/Pe3EzvS87PpP99k0cS0= -----END CERTIFICATE-----Generated at Mon Mar 2 12:31:33 2026 by rpki-client