$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/998acd54-f617-35ec-a7f9-f8942fc18a11.roa File: 998acd54-f617-35ec-a7f9-f8942fc18a11.roa (raw, json) Hash identifier: uc++d443C+O+/rzw0c4bsMUq3UkTCQ1kaHvs8LkwlmU= Subject key identifier: 42:D3:1E:16:6F:6B:CF:D5:89:83:7F:B8:5A:1E:C3:02:D8:B4:95:AC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D01DFB70396032C54298BD280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/998acd54-f617-35ec-a7f9-f8942fc18a11.roa Signing time: Sat 28 Feb 2026 00:08:08 +0000 ROA not before: Sat 28 Feb 2026 00:08:08 +0000 ROA not after: Thu 28 May 2026 23:08:08 +0000 asID: 834 IP address blocks: 209.101.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:01:df:b7:03:96:03:2c:54:29:8b:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 28 00:08:08 2026 GMT Not After : May 28 23:08:08 2026 GMT Subject: CN=e7ab8713-b2d9-454e-952e-86ee3e399831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:d1:38:1b:bb:d0:17:b9:55:8f:80:f7:ef: 0b:37:8d:65:9c:78:88:0a:b8:89:e2:2c:6d:35:af: 7b:ae:cd:dd:1f:fa:b4:b3:d8:9f:db:06:a3:1b:45: bb:82:60:ed:3a:fe:49:f2:6f:e1:0a:a2:9b:81:8c: aa:40:09:4f:86:ad:40:4f:aa:d9:cb:a9:ad:77:16: 01:ad:5b:e8:f9:25:9f:f8:2e:af:76:b8:41:bf:0a: 27:7f:cb:f9:d2:d0:80:7b:b6:1b:95:17:6e:69:20: 77:bf:65:05:2e:47:57:11:f4:b8:e2:87:0a:4e:d9: 44:01:f6:fe:cc:fc:9b:c8:e5:f1:51:e9:96:74:f3: 12:3e:40:42:5b:47:9a:45:42:c1:ca:ad:ca:57:47: 6e:ff:23:97:bd:2e:b2:90:bb:4a:25:44:20:fd:9d: ab:af:68:26:2e:c4:cc:b4:bd:90:db:7f:c0:2c:a5: d8:f3:ad:91:fb:76:23:0c:7e:e3:12:ca:ab:14:ac: f3:d2:78:da:cc:cf:61:be:90:80:e8:f3:ef:87:83: 1c:69:f8:46:c2:d7:91:16:dd:fc:de:b2:a6:09:d2: d8:9d:f6:04:35:d4:6d:36:d5:31:2e:15:3b:03:14: b7:38:d6:e3:91:89:b8:56:db:79:8e:5f:9a:30:21: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D3:1E:16:6F:6B:CF:D5:89:83:7F:B8:5A:1E:C3:02:D8:B4:95:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/998acd54-f617-35ec-a7f9-f8942fc18a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:44:5c:dc:86:d2:1b:26:07:93:6b:92:e4:bc:5f:01:3b:0b: a8:96:14:4a:d0:cb:6a:d8:ef:fe:62:4e:2c:30:2c:1f:24:d6: 85:fb:ac:3f:18:99:a0:70:d2:ce:c6:b8:e2:20:9e:6f:91:f9: be:9f:9a:1b:c5:a9:fe:7f:f5:f4:09:21:c3:01:3b:02:95:c0: 06:61:8b:c4:4b:b0:d1:89:3f:18:93:b4:23:c7:a9:61:62:68: 06:55:45:8f:4b:ac:9d:aa:bb:60:37:98:11:da:86:73:f4:20: 9c:fd:20:01:c3:a5:77:0a:96:9f:55:de:f8:8c:53:16:7e:79: 12:32:5c:1e:ff:43:33:44:98:af:79:1f:f7:94:c7:46:46:5c: 87:b4:1a:8c:e4:3b:15:5f:e4:47:35:c6:65:dc:0a:83:bc:9d: 9a:72:1c:af:0a:10:70:f4:f6:98:f8:27:b0:a4:9b:6c:3d:88: d7:6a:62:86:03:ff:7e:e3:af:b5:ba:c3:94:d6:cd:69:6a:37: 54:01:ae:5f:da:82:fd:bf:f1:0c:ac:df:01:3a:5e:6f:24:26: 7a:da:33:65:a7:c8:34:3b:54:45:2b:40:54:04:75:49:0b:47: e7:08:e0:99:27:ce:ff:ed:70:8e:88:53:a9:f5:34:ad:5b:51: 4c:22:3b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0B37cDlgMsVCmL0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyODAwMDgwOFoXDTI2MDUyODIzMDgwOFowLzEtMCsGA1UEAxMk ZTdhYjg3MTMtYjJkOS00NTRlLTk1MmUtODZlZTNlMzk5ODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXvROBu70Be5VY+A9+8LN41lnHiICriJ4ixt Na97rs3dH/q0s9if2wajG0W7gmDtOv5J8m/hCqKbgYyqQAlPhq1AT6rZy6mtdxYB rVvo+SWf+C6vdrhBvwonf8v50tCAe7YblRduaSB3v2UFLkdXEfS44ocKTtlEAfb+ zPybyOXxUemWdPMSPkBCW0eaRULByq3KV0du/yOXvS6ykLtKJUQg/Z2rr2gmLsTM tL2Q23/ALKXY862R+3YjDH7jEsqrFKzz0njazM9hvpCA6PPvh4McafhGwteRFt38 3rKmCdLYnfYENdRtNtUxLhU7AxS3ONbjkYm4Vtt5jl+aMCEtLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELTHhZva8/ViYN/uFoewwLYtJWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTk4YWNkNTQtZjYxNy0z NWVjLWE3ZjktZjg5NDJmYzE4YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxEXNyG0hsmB5NrkuS8XwE7C6iWFErQy2rY7/5iTiwwLB8k1oX7rD8Y maBw0s7GuOIgnm+R+b6fmhvFqf5/9fQJIcMBOwKVwAZhi8RLsNGJPxiTtCPHqWFi aAZVRY9LrJ2qu2A3mBHahnP0IJz9IAHDpXcKlp9V3viMUxZ+eRIyXB7/QzNEmK95 H/eUx0ZGXIe0GozkOxVf5Ec1xmXcCoO8nZpyHK8KEHD09pj4J7Ckm2w9iNdqYoYD /37jr7W6w5TWzWlqN1QBrl/agv2/8Qys3wE6Xm8kJnraM2WnyDQ7VEUrQFQEdUkL R+cI4Jknzv/tcI6IU6n1NK1bUUwiO8A= -----END CERTIFICATE-----Generated at Mon Mar 2 15:29:17 2026 by rpki-client