$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa File: b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa (raw, json) Hash identifier: 6EUka4lGRBLknXAAy4QWW+Vi9l7PVvwZeWZciPQDYTI= Subject key identifier: AC:93:6D:28:B3:50:4E:D2:88:3A:77:A4:4E:AC:CE:11:44:A0:7E:63 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584D39CF823E93E216FA0F4476E0 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 209 IP address blocks: 209.3.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:82:3e:93:e2:16:fa:0f:44:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=3797a970-0e7e-4b4a-a6a8-a70bb0596f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:1d:3a:85:1e:27:8f:44:89:3e:f6:54:93: 40:3b:9b:94:8d:05:31:0a:dd:85:1d:61:a1:95:81: 48:1a:a1:37:d3:ef:1c:94:d1:4b:32:bc:c3:73:12: 0e:e7:c5:da:04:e5:e0:49:47:5c:86:b4:23:dc:ee: 29:33:66:4a:60:8f:7d:d4:78:b1:19:4b:a2:e5:e4: b6:d8:05:6a:90:79:c5:48:29:0f:d2:64:33:90:3a: 27:38:d4:85:5a:c8:22:d3:74:34:12:6d:3a:07:fc: 02:2c:25:99:a6:23:19:35:42:66:33:5b:0a:a6:68: 3f:9e:34:a8:38:0e:40:2e:a8:f4:05:d5:df:3f:28: 16:72:82:6d:44:3e:f7:a6:fe:d0:5f:3d:37:29:3f: d5:c3:f0:4b:cf:98:24:cf:64:09:7b:59:16:8f:62: 82:88:6e:16:c1:6f:ae:59:0c:2a:2c:4a:07:a9:32: f1:95:7d:b8:35:46:8e:5b:8a:e2:cf:7d:b2:7e:b7: 3c:ab:63:50:dd:93:07:56:4b:cb:30:bb:ba:91:b5: c4:4f:65:db:7e:e6:f6:9d:af:1b:1b:4a:54:64:19: 4f:9f:88:3b:08:dc:11:d4:3a:bb:ed:0d:6a:ef:bc: e0:af:bb:fd:4f:8e:8e:aa:e2:31:37:aa:07:d1:41: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:93:6D:28:B3:50:4E:D2:88:3A:77:A4:4E:AC:CE:11:44:A0:7E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.3.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d9:ec:df:23:6e:c0:51:bb:f9:ab:f6:7e:f2:8c:23:98:b2: b3:d1:4e:b6:3a:f6:99:2c:28:d5:48:50:79:ac:34:b6:0b:e1: 35:82:29:ed:5c:ac:9f:3c:7f:7f:d6:7f:9f:34:48:91:e2:19: 9e:ec:66:fe:5c:27:0d:c7:4f:30:6a:94:22:ed:26:8d:d0:05: 1c:97:89:22:ae:3c:c2:c7:90:ff:b9:3d:d1:ea:b6:e6:91:7d: ad:bc:ba:31:13:8e:d8:b1:88:23:73:f7:53:75:37:48:7e:92: 63:ef:ec:26:9c:3a:c7:0f:a6:30:0f:df:25:ac:7b:64:d9:b7: 7d:0b:03:67:34:2d:72:7a:b9:5a:6a:b5:f6:c0:45:b1:c5:32: 99:a6:49:b9:ce:1a:63:d6:fd:84:83:b1:cf:f3:a0:12:ee:3c: bc:12:aa:22:25:9f:ff:e3:5d:5d:e0:2a:e6:59:b2:49:fd:70: 11:97:38:2b:fd:aa:ab:24:fe:d2:eb:de:a6:7d:c6:2a:88:66: 89:59:40:ee:a8:3e:fa:d5:f5:15:0e:5c:b7:2a:06:c4:a3:a7: a7:2e:1c:be:8c:06:15:49:ac:bf:cf:2f:db:1c:7c:30:28:17: 45:6b:da:8b:81:12:3a:4c:c1:2f:6e:20:4a:54:62:2c:5c:6b: 4d:35:4b:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4I+k+IW+g9EduAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk Mzc5N2E5NzAtMGU3ZS00YjRhLWE2YTgtYTcwYmIwNTk2ZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFYdOoUeJ49EiT72VJNAO5uUjQUxCt2FHWGh lYFIGqE30+8clNFLMrzDcxIO58XaBOXgSUdchrQj3O4pM2ZKYI991HixGUui5eS2 2AVqkHnFSCkP0mQzkDonONSFWsgi03Q0Em06B/wCLCWZpiMZNUJmM1sKpmg/njSo OA5ALqj0BdXfPygWcoJtRD73pv7QXz03KT/Vw/BLz5gkz2QJe1kWj2KCiG4WwW+u WQwqLEoHqTLxlX24NUaOW4riz32yfrc8q2NQ3ZMHVkvLMLu6kbXET2Xbfub2na8b G0pUZBlPn4g7CNwR1Dq77Q1q77zgr7v9T46OquIxN6oH0UE9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyTbSizUE7SiDp3pE6szhFEoH5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYjk3Yjk1Y2UtY2Q4ZS0z YWZlLTkwMTMtOWM0MGY5MWFiNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7Z7N8jbsBRu/mr9n7yjCOYsrPRTrY69pksKNVIUHmsNLYL4TWCKe1c rJ88f3/Wf580SJHiGZ7sZv5cJw3HTzBqlCLtJo3QBRyXiSKuPMLHkP+5PdHqtuaR fa28ujETjtixiCNz91N1N0h+kmPv7CacOscPpjAP3yWse2TZt30LA2c0LXJ6uVpq tfbARbHFMpmmSbnOGmPW/YSDsc/zoBLuPLwSqiIln//jXV3gKuZZskn9cBGXOCv9 qqsk/tLr3qZ9xiqIZolZQO6oPvrV9RUOXLcqBsSjp6cuHL6MBhVJrL/PL9scfDAo F0Vr2ouBEjpMwS9uIEpUYixca001S1c= -----END CERTIFICATE-----Generated at Thu Mar 26 02:47:06 2026 by rpki-client