$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa File: dc028e64-2955-3844-8f5c-a4e9288d62cd.roa (raw, json) Hash identifier: m6BU5O0MMoJPNVFMSOqv3s+OEbJJtGf+lZUd+wCQgu8= Subject key identifier: 44:E7:E0:F8:E5:40:63:71:73:95:47:58:79:84:62:BF:D1:DC:1E:E9 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B5571D2AA8BFD1716DAC51280 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 209 IP address blocks: 207.3.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d2:aa:8b:fd:17:16:da:c5:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=8a0793ec-9c68-408d-9d3e-c88365e18ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c8:45:d3:0f:d0:54:34:93:18:bb:54:81:0d: 78:e4:4d:2a:7f:7e:d4:ec:cc:2d:6b:74:84:7f:00: 78:f5:f0:4f:cd:74:17:2a:d1:a5:39:3f:ce:a4:33: 3b:2d:fb:ab:63:a3:25:ca:b2:c1:4c:ce:e1:ef:b4: 45:91:1d:aa:3e:74:8c:52:09:0c:5e:d7:43:7c:59: a0:f6:d5:9b:af:94:75:63:f1:ba:b4:21:65:dd:9d: ee:c0:12:1d:b6:20:d7:25:d9:1c:23:01:f2:7c:bd: 59:30:a1:0a:b7:fc:75:71:16:bd:1d:f4:75:18:1c: 23:95:33:89:20:ec:83:a2:4c:01:c5:23:e7:85:83: 66:01:c6:98:5c:99:3d:72:96:e8:d8:a7:23:c2:ce: 15:29:91:03:05:07:83:cc:e3:48:ee:1f:d3:01:a0: 73:f9:d2:98:dd:84:43:08:19:62:54:44:33:c2:6f: cd:77:5d:e1:51:4f:69:36:25:74:3d:7e:1d:0b:d7: ae:e5:b0:85:c7:8f:c3:32:b3:0a:54:a9:dc:6a:f4: a3:d1:02:92:fd:96:77:af:63:18:b7:af:95:01:12: a6:5c:20:74:cf:e4:f3:68:a4:f3:8e:96:e9:ed:f3: 3a:9f:a7:b2:27:d1:ce:06:55:4b:38:7a:56:bd:fa: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:E0:F8:E5:40:63:71:73:95:47:58:79:84:62:BF:D1:DC:1E:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 207.3.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:76:b7:14:75:e3:02:c5:6b:dc:1d:05:4b:35:25:3c:6d:9a: 63:93:18:c1:77:10:18:80:80:c3:e6:ab:d9:29:39:3d:60:80: 61:3a:e5:a6:0c:dd:15:d5:d2:cf:e1:c6:b2:88:11:27:28:7c: 50:e0:31:c7:de:f5:49:58:4f:69:2c:60:45:b2:0e:63:ed:b1: 74:fb:61:aa:1b:4a:52:b8:ee:bd:c0:40:68:5f:6d:93:7d:78: 60:d2:99:42:bb:74:2c:58:46:bd:bf:78:53:93:a6:12:17:34: 2e:fa:fb:3e:b5:18:a7:3c:47:b0:a4:1e:05:c2:bc:7d:84:e3: 82:d7:59:c7:75:70:58:0b:d1:90:90:6e:4f:fa:41:80:09:0d: 78:7a:9f:ba:2a:7d:ff:33:98:87:c2:64:d0:38:88:d1:e3:40: dc:90:63:79:c0:c0:80:ad:bb:92:8e:e6:ae:fa:93:46:70:4a: 6e:4c:6c:17:4c:7c:c1:a1:cb:f2:06:59:f2:d2:5b:f8:25:02: 97:bb:48:8c:a7:fb:86:1d:60:58:d9:61:b2:ac:e8:98:8c:09: a5:8f:c8:11:a0:e4:3d:00:5c:42:90:b7:3c:12:01:73:7e:eb: 8e:57:fa:94:be:ed:de:6a:1f:c8:78:f7:7d:1f:f1:fa:d9:1e: 14:8a:6f:51 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtVcdKqi/0XFtrFEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk OGEwNzkzZWMtOWM2OC00MDhkLTlkM2UtYzg4MzY1ZTE4YWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8hF0w/QVDSTGLtUgQ145E0qf37U7Mwta3SE fwB49fBPzXQXKtGlOT/OpDM7LfurY6MlyrLBTM7h77RFkR2qPnSMUgkMXtdDfFmg 9tWbr5R1Y/G6tCFl3Z3uwBIdtiDXJdkcIwHyfL1ZMKEKt/x1cRa9HfR1GBwjlTOJ IOyDokwBxSPnhYNmAcaYXJk9cpbo2Kcjws4VKZEDBQeDzONI7h/TAaBz+dKY3YRD CBliVEQzwm/Nd13hUU9pNiV0PX4dC9eu5bCFx4/DMrMKVKncavSj0QKS/ZZ3r2MY t6+VARKmXCB0z+TzaKTzjpbp7fM6n6eyJ9HOBlVLOHpWvfpJ6QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFETn4PjlQGNxc5VHWHmEYr/R3B7pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZGMwMjhlNjQtMjk1NS0z ODQ0LThmNWMtYTRlOTI4OGQ2MmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzwMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhna3FHXjAsVr3B0FSzUlPG2aY5MYwXcQGICAw+ar2Sk5PWCAYTrlpgzd FdXSz+HGsogRJyh8UOAxx971SVhPaSxgRbIOY+2xdPthqhtKUrjuvcBAaF9tk314 YNKZQrt0LFhGvb94U5OmEhc0Lvr7PrUYpzxHsKQeBcK8fYTjgtdZx3VwWAvRkJBu T/pBgAkNeHqfuip9/zOYh8Jk0DiI0eNA3JBjecDAgK27ko7mrvqTRnBKbkxsF0x8 waHL8gZZ8tJb+CUCl7tIjKf7hh1gWNlhsqzomIwJpY/IEaDkPQBcQpC3PBIBc37r jlf6lL7t3mofyHj3fR/x+tkeFIpvUQ== -----END CERTIFICATE-----Generated at Sat Oct 11 11:35:15 2025 by rpki-client