$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa File: 9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa (raw, json) Hash identifier: HEb+6WaqgAJQCQ5m/F8NSp/ntIRZnWU3ffMNK9a4X8I= Subject key identifier: DD:BF:E9:B6:44:D0:02:2D:4F:B5:F7:4D:0E:57:54:DA:23:DC:B0:55 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CDF328DAC28F1133461472A20 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 9304 IP address blocks: 209.101.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:8d:ac:28:f1:13:34:61:47:2a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=e92887cb-ad06-487c-bd9a-c7c21fac5003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d6:4f:fc:ec:c5:3b:36:0e:0d:20:85:dc:db: b5:42:6e:21:bd:83:b0:eb:fd:63:71:ff:fd:0e:5c: 28:80:df:fe:41:7b:b2:49:66:c6:f9:60:1a:f5:81: e7:50:67:58:33:95:cb:88:45:62:f5:51:ce:48:e3: a1:87:0b:49:1a:81:54:17:32:83:d6:d6:33:7c:e0: 19:40:35:cf:b6:fe:3a:35:ce:61:d8:62:c2:d7:f6: eb:53:13:99:10:7c:ec:7c:4e:47:ed:98:3f:be:70: a1:6f:d9:f5:a1:5e:ce:54:fb:76:58:fe:7f:b7:00: 2c:04:de:62:c2:ee:85:bd:67:60:60:8a:f8:b0:e8: 23:ac:09:10:b4:2f:0c:e1:6b:34:a3:b0:38:9f:9f: 0e:c2:e3:fc:87:15:4a:72:56:59:d4:87:3b:ce:44: b7:55:8b:1e:df:91:eb:c3:10:c3:7c:1e:c9:ec:72: 0b:4d:c7:1d:40:88:88:98:bc:36:58:92:78:6a:b9: 34:1f:f0:fa:f4:84:2f:98:5c:e6:35:76:50:5c:38: 37:f9:1a:01:f4:82:d8:e5:ff:56:21:3f:32:14:8f: fd:c2:79:0b:2b:12:3c:cd:00:a1:15:ba:11:6e:89: fe:58:e8:65:28:41:be:d3:d7:af:7b:f2:f8:b2:62: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BF:E9:B6:44:D0:02:2D:4F:B5:F7:4D:0E:57:54:DA:23:DC:B0:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ad:2a:3a:b7:26:09:57:49:5b:bc:27:13:dc:e1:38:36:12: 85:5a:d9:be:0c:a8:c2:4a:d0:3c:69:b9:ac:f9:39:92:49:37: a5:94:3c:e4:31:08:1b:d4:ac:5b:9a:66:f2:0c:be:4e:0e:20: fc:2e:82:6c:f9:7f:60:b5:cc:3e:e7:23:4d:55:a4:c6:72:4e: a2:9f:8b:db:d4:3a:e1:a6:46:a9:3e:23:81:27:18:26:e4:25: d5:2f:06:74:a4:d7:14:41:a1:a4:f1:df:00:26:b4:b6:29:e1: 3e:07:dd:07:7a:67:bc:20:3d:14:dd:ed:ee:36:f2:3d:28:79: 2a:26:7c:d0:c6:1c:b9:c2:cb:12:8c:f2:c6:04:c7:f5:ad:9c: 38:59:8d:e1:62:52:be:28:ac:5e:29:3d:e5:89:0c:13:d4:5c: 87:23:d1:53:96:65:04:26:a0:2e:f0:30:f2:98:78:4d:b0:c2: ec:f8:cb:2e:40:66:09:fb:a1:c7:f8:0c:9f:0e:6e:02:07:9f: 47:03:19:fd:cc:f7:c4:dd:44:e0:7b:0e:1e:24:08:0a:3b:76: d3:1b:ca:0c:5b:75:81:7a:45:58:56:3d:da:46:a8:c3:7a:d6: 6e:09:6b:32:21:10:ab:b4:73:46:0a:38:04:81:3d:27:40:77: c9:70:d7:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMo2sKPETNGFHKiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk ZTkyODg3Y2ItYWQwNi00ODdjLWJkOWEtYzdjMjFmYWM1MDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9ZP/OzFOzYODSCF3Nu1Qm4hvYOw6/1jcf/9 DlwogN/+QXuySWbG+WAa9YHnUGdYM5XLiEVi9VHOSOOhhwtJGoFUFzKD1tYzfOAZ QDXPtv46Nc5h2GLC1/brUxOZEHzsfE5H7Zg/vnChb9n1oV7OVPt2WP5/twAsBN5i wu6FvWdgYIr4sOgjrAkQtC8M4Ws0o7A4n58OwuP8hxVKclZZ1Ic7zkS3VYse35Hr wxDDfB7J7HILTccdQIiImLw2WJJ4ark0H/D69IQvmFzmNXZQXDg3+RoB9ILY5f9W IT8yFI/9wnkLKxI8zQChFboRbon+WOhlKEG+09eve/L4smKrJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2/6bZE0AItT7X3TQ5XVNoj3LBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWNkYWFlNzEtN2Q5YS0z OGIyLTg2NjgtYmU5MmQ1NGM0N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEutKjq3JglXSVu8JxPc4Tg2EoVa2b4MqMJK0Dxpuaz5OZJJN6WUPOQx CBvUrFuaZvIMvk4OIPwugmz5f2C1zD7nI01VpMZyTqKfi9vUOuGmRqk+I4EnGCbk JdUvBnSk1xRBoaTx3wAmtLYp4T4H3Qd6Z7wgPRTd7e428j0oeSomfNDGHLnCyxKM 8sYEx/WtnDhZjeFiUr4orF4pPeWJDBPUXIcj0VOWZQQmoC7wMPKYeE2wwuz4yy5A Zgn7ocf4DJ8ObgIHn0cDGf3M98TdROB7Dh4kCAo7dtMbygxbdYF6RVhWPdpGqMN6 1m4JazIhEKu0c0YKOASBPSdAd8lw1/I= -----END CERTIFICATE-----Generated at Sun Mar 1 21:02:39 2026 by rpki-client