$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a03e98ec-259c-3030-aabb-240a6bb534a8.roa File: a03e98ec-259c-3030-aabb-240a6bb534a8.roa (raw, json) Hash identifier: 4kz5FiOAFSh/nmtQ/QyCtFnj6s3ynOxv4mqDyCMmOs8= Subject key identifier: F9:AB:31:2A:EA:9A:50:7F:E4:0E:D3:39:80:7E:38:01:CA:4E:24:C2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CE0974EA39D380EC8F43F7D00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a03e98ec-259c-3030-aabb-240a6bb534a8.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 834 IP address blocks: 209.101.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:4e:a3:9d:38:0e:c8:f4:3f:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=03746e84-e31b-4125-ad39-4bf3dbf1a2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cc:ea:df:c0:64:75:d3:ff:ad:91:d6:8e:9c: 97:8b:5d:c0:f7:e9:99:b6:94:e1:7a:2d:54:e2:d6: 27:dc:df:09:ec:5b:77:3d:4a:5e:c7:8c:0c:d3:dc: 10:bb:2e:d2:7e:74:a4:db:03:60:ea:8a:f0:09:d8: 6b:be:f2:2e:08:56:01:5a:ce:23:57:14:5c:54:12: e4:99:bf:b7:9d:ad:f7:9c:0e:d5:56:99:0c:b2:d2: 40:4b:49:1a:b3:8f:b3:33:51:b1:7e:39:51:8f:7c: 15:1a:93:4b:cb:c1:20:65:57:a3:79:8f:4f:da:25: e2:ab:a4:05:db:6f:b7:2c:d7:36:39:bd:3a:31:84: 69:9f:45:46:05:cb:70:6b:9b:4b:39:76:af:a0:c4: 5a:44:53:64:0a:fe:21:09:5a:90:38:30:fa:fd:b1: 97:55:45:30:21:68:20:be:c4:92:99:cd:69:6d:8f: 5a:2b:b5:d1:9e:39:31:9c:e8:f2:db:57:fb:34:9f: 8a:59:b9:07:31:b4:24:13:fe:ce:4c:ef:e0:e7:25: d9:d6:f5:da:b0:81:e9:44:bd:f3:52:0e:48:41:63: 5f:be:8b:22:54:3e:7e:6a:68:b7:8a:fb:3a:c1:9f: 72:4d:45:b0:2a:78:17:a4:5d:08:73:95:e3:fc:89: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AB:31:2A:EA:9A:50:7F:E4:0E:D3:39:80:7E:38:01:CA:4E:24:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a03e98ec-259c-3030-aabb-240a6bb534a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:07:30:a1:e6:79:ea:ae:da:22:9b:7c:00:d7:08:52:4b:fc: 56:40:b6:3f:0a:06:1c:e4:2d:0e:35:4f:6a:f4:4f:69:b9:1e: a7:94:e0:8d:36:d8:97:30:48:25:84:1d:25:66:c7:0f:70:ae: 5e:1e:ac:68:71:f8:b8:8a:0c:e6:ac:82:2a:dd:7f:0b:f1:87: f6:0b:1a:9e:44:ae:46:e0:4f:4b:f0:e6:47:f4:4d:8e:68:ee: f4:54:1f:14:73:20:03:30:6a:5c:6e:5d:40:c4:07:6c:53:6c: 0d:3d:08:90:0c:e3:1a:c6:ae:06:ed:2b:35:22:b1:ea:fc:cd: 3f:a6:4b:17:a2:dd:73:3b:08:77:21:a1:a0:0f:07:62:8b:01: 15:06:82:54:57:5e:1a:a8:a1:97:f7:b0:98:15:ca:0f:70:50: 6d:31:2a:0f:26:61:3b:f9:1e:bb:6a:1f:10:6f:5e:bc:ed:33: b3:fd:fa:da:b9:4d:f5:5b:fc:36:94:0a:50:20:85:77:72:9d: 4b:d3:f6:0e:08:84:82:6e:17:61:0e:3f:8a:8a:0c:f5:f8:de: cf:8f:e4:4e:2a:07:1b:25:ac:ef:b3:8c:49:ac:51:5b:fe:d1: e7:55:78:cf:d5:90:89:e4:fb:59:11:a6:d8:dc:96:21:40:81: d5:43:54:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl06jnTgOyPQ/fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk MDM3NDZlODQtZTMxYi00MTI1LWFkMzktNGJmM2RiZjFhMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMzq38BkddP/rZHWjpyXi13A9+mZtpThei1U 4tYn3N8J7Ft3PUpex4wM09wQuy7SfnSk2wNg6orwCdhrvvIuCFYBWs4jVxRcVBLk mb+3na33nA7VVpkMstJAS0kas4+zM1GxfjlRj3wVGpNLy8EgZVejeY9P2iXiq6QF 22+3LNc2Ob06MYRpn0VGBctwa5tLOXavoMRaRFNkCv4hCVqQODD6/bGXVUUwIWgg vsSSmc1pbY9aK7XRnjkxnOjy21f7NJ+KWbkHMbQkE/7OTO/g5yXZ1vXasIHpRL3z Ug5IQWNfvosiVD5+ami3ivs6wZ9yTUWwKngXpF0Ic5Xj/ImllQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmrMSrqmlB/5A7TOYB+OAHKTiTCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTAzZTk4ZWMtMjU5Yy0z MDMwLWFhYmItMjQwYTZiYjUzNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUHMKHmeequ2iKbfADXCFJL/FZAtj8KBhzkLQ41T2r0T2m5HqeU4I02 2JcwSCWEHSVmxw9wrl4erGhx+LiKDOasgirdfwvxh/YLGp5ErkbgT0vw5kf0TY5o 7vRUHxRzIAMwalxuXUDEB2xTbA09CJAM4xrGrgbtKzUiser8zT+mSxei3XM7CHch oaAPB2KLARUGglRXXhqooZf3sJgVyg9wUG0xKg8mYTv5HrtqHxBvXrztM7P9+tq5 TfVb/DaUClAghXdynUvT9g4IhIJuF2EOP4qKDPX43s+P5E4qBxslrO+zjEmsUVv+ 0edVeM/VkInk+1kRptjcliFAgdVDVO0= -----END CERTIFICATE-----Generated at Mon Mar 2 11:44:32 2026 by rpki-client