$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa File: dc028e64-2955-3844-8f5c-a4e9288d62cd.roa (raw, json) Hash identifier: 8reoTUl8iqRUXc92HcxQfrNFEzdwQm4fl3+UuFYX5yI= Subject key identifier: 67:20:24:7A:49:C3:6C:EA:E4:EC:4B:3F:8F:9A:29:45:09:DC:2F:72 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584D15A259B68ED734F6CD51CE80 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 209 IP address blocks: 207.3.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:59:b6:8e:d7:34:f6:cd:51:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=1556b00f-dada-4cc9-bd2b-81827f981906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:18:91:26:89:9a:34:f7:33:cf:64:89:ac:0d: 1a:2a:43:39:6f:99:cd:e5:6f:41:d7:e5:74:9a:c4: 3c:4e:76:8e:85:7d:4b:a8:a2:ef:65:22:4d:14:b3: 97:83:f5:32:53:fe:2d:0b:16:8b:67:80:da:bd:a6: 10:96:4c:c6:44:3e:88:b9:c6:e5:9e:a2:72:b0:f7: 71:77:20:1d:59:87:11:95:27:2b:5c:f6:ad:ab:36: b2:09:8d:a3:50:81:cd:cd:2a:1b:03:20:cd:d5:78: 47:48:d1:73:de:08:a3:a8:4f:a7:fb:20:80:c2:2a: 51:f7:00:e8:2e:a0:75:f3:48:27:6e:00:48:36:ea: 7b:23:9a:6d:e2:8b:c0:49:76:2f:a2:8b:5b:24:df: cc:ae:01:0a:69:71:ea:d2:b4:de:eb:78:e7:e5:5f: 7a:96:72:eb:b7:e0:f5:f2:26:6a:d5:77:78:63:35: f6:70:8c:50:a9:9d:11:57:43:d4:18:20:dd:82:5c: 4d:d9:3b:70:4e:55:b7:59:36:37:e9:68:c3:07:e0: 87:d1:49:1f:0c:98:55:58:51:61:17:96:59:f0:b7: 82:81:66:33:1c:1b:57:b1:c2:63:45:c0:3b:bc:ee: e8:3c:a6:a9:ed:13:2c:e7:7c:00:d6:3e:77:db:22: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:20:24:7A:49:C3:6C:EA:E4:EC:4B:3F:8F:9A:29:45:09:DC:2F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 207.3.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:4e:65:6f:c0:48:14:ed:f4:d2:4c:92:d6:5c:23:60:bd:36: 36:df:19:08:9e:fc:55:e3:81:8d:0f:21:aa:c3:59:b4:f3:56: 45:a7:60:3d:aa:e0:f8:e7:c8:78:f8:ea:32:69:82:fb:e5:79: 13:93:f7:70:77:8b:96:61:6e:c6:0d:af:23:7e:57:9e:fd:9d: 2a:ee:57:d3:c1:eb:6b:78:a3:3a:49:ad:9b:ca:ec:47:b2:d3: 48:c9:62:bb:d6:be:8a:86:5f:d7:99:15:59:96:1c:81:be:81: b8:55:2b:1e:f6:1e:36:3a:d6:46:08:ee:09:b4:15:66:4a:55: b7:7f:57:e5:1e:9c:08:9b:ba:cf:22:fd:0c:1c:f3:48:91:57: 09:50:91:4f:87:e3:69:9f:9a:a5:a8:c2:9b:ce:73:27:d1:32: 2c:92:1d:eb:e6:69:2b:3c:6a:a5:cd:61:fa:9b:f9:2c:fc:38: dc:36:da:28:33:08:70:58:33:bc:1b:df:2e:30:f4:10:c8:fa: e1:59:dd:cb:fd:80:65:78:a6:bc:0f:19:57:48:60:11:6d:b6: b7:d3:0d:3a:25:cf:dc:54:4a:87:6e:20:f5:18:fb:6d:e2:89: ce:19:2a:78:9f:fe:9a:e9:34:eb:3a:3e:d9:05:6c:db:be:50: 5e:aa:38:91 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0Volm2jtc09s1RzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk MTU1NmIwMGYtZGFkYS00Y2M5LWJkMmItODE4MjdmOTgxOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxiRJomaNPczz2SJrA0aKkM5b5nN5W9B1+V0 msQ8TnaOhX1LqKLvZSJNFLOXg/UyU/4tCxaLZ4DavaYQlkzGRD6IucblnqJysPdx dyAdWYcRlScrXPatqzayCY2jUIHNzSobAyDN1XhHSNFz3gijqE+n+yCAwipR9wDo LqB180gnbgBINup7I5pt4ovASXYvootbJN/MrgEKaXHq0rTe63jn5V96lnLrt+D1 8iZq1Xd4YzX2cIxQqZ0RV0PUGCDdglxN2TtwTlW3WTY36WjDB+CH0UkfDJhVWFFh F5ZZ8LeCgWYzHBtXscJjRcA7vO7oPKap7RMs53wA1j532yKz2QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGcgJHpJw2zq5OxLP4+aKUUJ3C9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZGMwMjhlNjQtMjk1NS0z ODQ0LThmNWMtYTRlOTI4OGQ2MmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzwMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMU5lb8BIFO300kyS1lwjYL02Nt8ZCJ78VeOBjQ8hqsNZtPNWRadgParg +OfIePjqMmmC++V5E5P3cHeLlmFuxg2vI35Xnv2dKu5X08Hra3ijOkmtm8rsR7LT SMliu9a+ioZf15kVWZYcgb6BuFUrHvYeNjrWRgjuCbQVZkpVt39X5R6cCJu6zyL9 DBzzSJFXCVCRT4fjaZ+apajCm85zJ9EyLJId6+ZpKzxqpc1h+pv5LPw43DbaKDMI cFgzvBvfLjD0EMj64Vndy/2AZXimvA8ZV0hgEW22t9MNOiXP3FRKh24g9Rj7beKJ zhkqeJ/+muk06zo+2QVs275QXqo4kQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:25 2026 by rpki-client