$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a21d5c78-1d28-3fc8-820d-ca0d9620786a.roa File: a21d5c78-1d28-3fc8-820d-ca0d9620786a.roa (raw, json) Hash identifier: JeFvN+xJZAQ23vNjMn/QNuvW0D2PqouIfm3IjsdqIkI= Subject key identifier: 24:F2:21:4B:67:53:54:CA:30:14:23:94:A1:0E:32:36:89:51:DD:FD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CC6121AF6ACAB619B09CB0D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a21d5c78-1d28-3fc8-820d-ca0d9620786a.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 834 IP address blocks: 209.101.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:1a:f6:ac:ab:61:9b:09:cb:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=c8bc78e8-a02f-477e-a75d-e459c22330ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fe:c7:68:6f:5f:03:cd:c4:84:34:99:16:86: 19:6f:1a:2a:8f:e5:e3:55:7b:76:a2:f8:aa:33:da: a7:aa:65:09:85:7a:54:45:bf:bc:8a:a1:47:f5:7a: b5:12:46:d5:df:fb:35:0d:84:eb:c2:ec:18:f7:27: 94:97:31:44:2f:78:d8:5b:30:64:8b:e4:fe:fa:68: a8:72:c0:4a:b3:0f:d8:83:c1:c2:44:9d:cd:97:72: 2e:6a:08:3d:dd:76:87:58:6d:ce:9a:86:cb:45:65: 75:13:1a:11:bf:2f:2c:e9:56:0a:e2:e5:da:29:29: 98:06:0a:7f:b2:f2:13:40:63:8f:2e:d9:61:c1:1f: ff:f2:ea:28:9e:f2:a9:b2:50:0c:90:80:09:88:aa: 60:01:76:6f:2b:4e:ba:20:d0:2d:db:e0:d7:30:ca: 5b:c2:76:fa:6d:c1:23:70:d5:40:c1:2e:85:7f:c4: 4a:44:cd:ff:44:c2:7c:a6:a0:c8:66:83:fb:ce:43: de:c5:b1:28:c5:87:1d:6c:8e:2e:f2:ee:74:d3:06: 47:05:94:47:b3:fc:ae:e5:e7:93:3a:73:2b:a8:d1: ad:cc:ff:89:06:87:22:88:3e:25:5e:04:1e:f2:1e: 4f:6c:53:ec:aa:74:30:79:3f:02:5e:fc:ae:de:39: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F2:21:4B:67:53:54:CA:30:14:23:94:A1:0E:32:36:89:51:DD:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a21d5c78-1d28-3fc8-820d-ca0d9620786a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:28:d7:8c:ff:1f:4a:be:71:78:68:bf:06:b2:0b:bb:dd:2b: c2:b7:df:90:95:38:62:d0:48:79:db:34:af:f3:8e:ca:f4:3b: d7:dc:d3:30:af:7b:88:cf:91:66:90:ea:de:3f:88:ef:46:6d: c5:7d:ae:ef:7d:71:af:b0:43:17:a2:ca:06:f5:94:83:3e:db: 5b:c7:a0:1c:8a:93:c7:aa:fb:7a:95:47:48:3f:1a:2c:35:63: ff:a7:cf:9b:72:da:ad:21:6f:00:d4:55:be:28:11:63:c9:df: 3c:25:3c:d1:e9:3c:71:90:5e:d0:62:8e:9a:6e:74:f7:10:ae: 39:38:ab:b0:2d:8f:f0:15:93:10:ff:98:36:5f:d5:62:a1:14: c9:f7:7f:b7:18:f1:b4:0a:ec:90:59:9b:ac:38:03:25:91:85: 44:7c:5b:7a:69:6f:50:2c:94:34:70:8b:50:9a:5f:dd:5c:f5: c0:7c:18:e9:10:ac:d0:ee:88:e9:4e:aa:d4:eb:38:10:fc:27: 4e:b9:bb:84:36:64:12:3f:05:26:7e:a8:b6:c3:8d:5c:8e:d9: 16:f2:71:c6:14:41:2a:3e:d9:e3:9f:17:c3:6b:f2:52:cb:3b: 8a:cb:b0:9f:a3:f4:9b:85:32:36:2d:0d:2c:f8:45:7b:d2:0a: f1:72:77:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEhr2rKthmwnLDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk YzhiYzc4ZTgtYTAyZi00NzdlLWE3NWQtZTQ1OWMyMjMzMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv7HaG9fA83EhDSZFoYZbxoqj+XjVXt2oviq M9qnqmUJhXpURb+8iqFH9Xq1EkbV3/s1DYTrwuwY9yeUlzFEL3jYWzBki+T++mio csBKsw/Yg8HCRJ3Nl3Iuagg93XaHWG3OmobLRWV1ExoRvy8s6VYK4uXaKSmYBgp/ svITQGOPLtlhwR//8uoonvKpslAMkIAJiKpgAXZvK066INAt2+DXMMpbwnb6bcEj cNVAwS6Ff8RKRM3/RMJ8pqDIZoP7zkPexbEoxYcdbI4u8u500wZHBZRHs/yu5eeT OnMrqNGtzP+JBociiD4lXgQe8h5PbFPsqnQweT8CXvyu3jnNiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTyIUtnU1TKMBQjlKEOMjaJUd39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTIxZDVjNzgtMWQyOC0z ZmM4LTgyMGQtY2EwZDk2MjA3ODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMko14z/H0q+cXhovwayC7vdK8K335CVOGLQSHnbNK/zjsr0O9fc0zCv e4jPkWaQ6t4/iO9GbcV9ru99ca+wQxeiygb1lIM+21vHoByKk8eq+3qVR0g/Giw1 Y/+nz5ty2q0hbwDUVb4oEWPJ3zwlPNHpPHGQXtBijppudPcQrjk4q7Atj/AVkxD/ mDZf1WKhFMn3f7cY8bQK7JBZm6w4AyWRhUR8W3ppb1AslDRwi1CaX91c9cB8GOkQ rNDuiOlOqtTrOBD8J065u4Q2ZBI/BSZ+qLbDjVyO2RbyccYUQSo+2eOfF8Nr8lLL O4rLsJ+j9JuFMjYtDSz4RXvSCvFyd+4= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:40 2026 by rpki-client