$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa File: cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa (raw, json) Hash identifier: +7wDOM2hxje4Q9FXgqJjWr4VY/hMpZkMlvz0dXQGq1M= Subject key identifier: 24:E4:35:4C:6D:A8:CF:DC:8F:ED:9F:F8:8E:74:E8:4A:9E:A3:4B:8F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CDF323C8B34DA35C66BDB8440 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 401783 IP address blocks: 209.101.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:3c:8b:34:da:35:c6:6b:db:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=856851d1-f33a-4e0e-8246-700f4093bda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:66:61:4f:72:a4:10:e4:ad:20:71:a3:17: cd:96:9d:32:39:bd:55:1f:f8:8c:9b:d3:e2:4a:d2: ad:89:77:2d:bb:41:ed:ec:84:9b:84:14:1b:79:2f: f8:8d:79:d1:6d:6e:c9:83:d6:36:ac:70:d4:0a:2c: d4:b1:d3:ae:1f:fc:58:c9:be:07:43:75:d8:e2:4f: 68:8d:e6:63:f8:aa:fa:54:4d:1e:88:21:a1:64:20: 33:a5:ca:aa:a5:11:d5:42:5b:f7:13:86:a2:9b:da: 56:82:cd:66:e1:44:c9:5b:ad:46:a7:00:b4:75:87: 6d:42:8a:7b:f7:53:35:44:87:a1:c0:04:66:90:e3: e5:b0:8b:65:50:ab:a1:48:e2:23:ab:ae:cc:76:52: ff:09:ab:93:c2:3a:70:48:92:7e:90:5d:ac:2f:63: 3d:c7:ae:aa:d9:03:52:09:66:cb:e2:9b:16:03:96: 2f:86:a7:92:c1:7b:66:10:9b:94:a9:c7:45:3b:73: 17:37:ab:fc:a2:90:41:a6:fe:fe:0e:81:90:99:32: db:b7:9b:9c:6a:30:e2:fc:de:eb:67:f1:af:29:25: 8b:44:db:c9:9b:af:74:e5:e5:c0:fb:ab:42:44:bd: 8e:c0:10:b4:86:dd:6b:17:26:e0:59:97:2d:ef:a6: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E4:35:4C:6D:A8:CF:DC:8F:ED:9F:F8:8E:74:E8:4A:9E:A3:4B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf3a8fe8-7810-3f1c-b97b-a5a6c5fa021a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:cf:45:bd:7a:b8:58:24:9e:f6:b5:e1:b0:36:74:6f:8f:cf: a7:47:d1:e7:5f:c3:6f:6b:5d:b4:4d:8c:08:a0:80:86:b8:70: 03:ac:11:de:eb:bb:9c:72:52:c4:b9:94:f4:96:e8:88:60:a8: e2:8b:f1:d9:4c:37:d3:87:9e:80:ec:40:92:e3:97:79:83:a6: 70:c1:0e:3e:ca:25:90:bb:06:a0:47:aa:47:cd:d9:fc:a5:33: b6:b1:b7:b3:12:39:95:68:cf:ef:5a:44:ce:fc:ff:08:33:12: d7:dd:64:70:51:2f:75:de:2a:0f:f0:1f:ab:8a:60:8a:07:3b: 87:32:3d:46:5a:0e:43:d4:df:9e:04:d2:82:5b:0e:e2:ed:9a: 65:17:93:2d:fe:4d:a0:97:5a:aa:ee:f1:7b:13:f2:f8:12:a6: 51:83:aa:c8:a9:cb:74:09:f9:59:82:cb:f6:8e:a9:26:dd:c6: 5c:66:9c:99:8b:db:87:c9:8b:7c:b6:79:f9:97:a1:af:fa:f2: f9:1d:e0:f9:98:52:6c:5e:e4:35:65:d1:a3:35:73:e6:db:5d: c2:d7:2e:b8:5a:0a:51:a0:f2:d8:47:bf:a5:66:6b:9d:1a:bd: a8:0f:13:2c:86:b6:c1:7d:a8:24:ff:de:eb:46:b7:e1:ae:9d: 32:fd:6f:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMjyLNNo1xmvbhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk ODU2ODUxZDEtZjMzYS00ZTBlLTgyNDYtNzAwZjQwOTNiZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU1mYU9ypBDkrSBxoxfNlp0yOb1VH/iMm9Pi StKtiXctu0Ht7ISbhBQbeS/4jXnRbW7Jg9Y2rHDUCizUsdOuH/xYyb4HQ3XY4k9o jeZj+Kr6VE0eiCGhZCAzpcqqpRHVQlv3E4aim9pWgs1m4UTJW61GpwC0dYdtQop7 91M1RIehwARmkOPlsItlUKuhSOIjq67MdlL/CauTwjpwSJJ+kF2sL2M9x66q2QNS CWbL4psWA5YvhqeSwXtmEJuUqcdFO3MXN6v8opBBpv7+DoGQmTLbt5ucajDi/N7r Z/GvKSWLRNvJm6905eXA+6tCRL2OwBC0ht1rFybgWZct76a5HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTkNUxtqM/cj+2f+I506Eqeo0uPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2YzYThmZTgtNzgxMC0z ZjFjLWI5N2ItYTVhNmM1ZmEwMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7PRb16uFgknva14bA2dG+Pz6dH0edfw29rXbRNjAiggIa4cAOsEd7r u5xyUsS5lPSW6IhgqOKL8dlMN9OHnoDsQJLjl3mDpnDBDj7KJZC7BqBHqkfN2fyl M7axt7MSOZVoz+9aRM78/wgzEtfdZHBRL3XeKg/wH6uKYIoHO4cyPUZaDkPU354E 0oJbDuLtmmUXky3+TaCXWqru8XsT8vgSplGDqsipy3QJ+VmCy/aOqSbdxlxmnJmL 24fJi3y2efmXoa/68vkd4PmYUmxe5DVl0aM1c+bbXcLXLrhaClGg8thHv6Vma50a vagPEyyGtsF9qCT/3utGt+GunTL9b0M= -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:34 2026 by rpki-client