$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa File: dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa (raw, json) Hash identifier: pHnY0DCGyP6FwTtQfVukwR+sOmPJ9FT3OtLP99TNduM= Subject key identifier: F1:75:88:1B:3A:4A:25:52:3E:A8:75:CE:42:11:C3:93:A6:E6:ED:41 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584D703FDD7C8A5BE97BCD731500 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 27235 IP address blocks: 65.120.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:dd:7c:8a:5b:e9:7b:cd:73:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=6e20abef-dd42-43da-b2e6-8c95210eb737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:14:d3:af:3b:50:e8:66:41:d8:aa:bb:9f: aa:1c:c2:25:07:f3:3d:c4:5a:63:95:f7:ac:2c:d3: ef:79:5b:fe:7c:4b:aa:fa:ca:98:76:5f:38:f5:de: 6e:87:0e:ab:97:ff:4e:fc:8c:6a:23:e0:48:c2:f3: 29:44:e3:74:b9:2a:96:40:e8:2d:62:8e:4d:36:79: 91:5d:bb:a7:52:01:a5:75:78:55:c0:ff:82:8e:5d: f8:60:71:77:e0:36:19:78:9d:93:02:40:00:31:d7: 11:b5:b6:f7:6f:44:95:98:15:c6:42:e9:27:e7:21: aa:c0:6f:a1:c7:37:71:4c:64:3e:5d:13:51:c3:5e: 6d:09:f3:0d:75:a8:29:df:12:36:6e:c9:a4:2b:d6: c5:74:d6:1c:d9:02:97:7f:1f:e4:10:ba:ec:fa:e6: a4:bf:de:a4:20:21:28:39:11:3f:54:02:13:0a:3b: 77:29:43:27:db:4d:24:7c:a6:70:97:c4:d6:5f:50: 47:4b:2f:94:be:72:b4:79:22:bf:97:5c:9a:2b:14: 58:84:8a:64:ad:bd:d8:75:68:26:c7:7a:79:b3:96: dc:28:e0:9b:59:c1:37:df:ba:14:e1:dd:6d:c1:34: 87:1c:ed:e5:40:7b:74:95:b4:14:aa:40:63:0d:83: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:75:88:1B:3A:4A:25:52:3E:A8:75:CE:42:11:C3:93:A6:E6:ED:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 65.120.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:00:36:9b:5c:de:04:70:76:2f:da:98:78:d4:16:78:14:80: a2:16:35:2d:92:7b:cb:c6:91:4c:05:62:7b:9d:45:62:7b:4e: 75:77:c8:f6:5b:66:04:66:f2:56:d6:5c:ed:8b:d5:0e:f4:4b: c8:0b:ff:ed:91:95:c7:1f:0a:b1:fc:04:fc:86:4b:43:d6:58: ab:a6:dc:4d:7c:25:3e:8d:c6:f4:23:90:3b:99:3a:43:e5:3e: 1c:5c:a2:2c:90:b0:e5:28:6a:9f:58:94:e9:6f:61:f8:82:7d: bf:9e:06:03:65:6c:4e:44:86:00:21:90:ce:af:0a:a3:27:4e: 1d:1a:a0:89:b9:89:d9:dd:e3:58:40:42:cc:a4:c0:16:d5:73: 5e:a0:04:19:87:28:0c:e1:f7:3b:9f:f4:1b:b8:fa:c7:3f:00: 40:c6:6c:d8:9e:ed:79:34:04:2b:98:90:5f:87:36:72:fc:b2: 9f:31:c5:47:51:45:c3:cc:68:bf:fb:69:a9:33:11:c2:0f:be: fe:e8:0b:00:15:20:e0:56:7b:95:39:6f:c9:50:0d:b6:26:a8: b4:db:f3:fd:fe:4f:20:4b:3e:62:e3:04:95:ef:f3:54:d7:d0: 97:da:9c:43:81:7c:e7:14:34:b3:1c:95:8b:d7:96:16:29:ef: f1:db:8f:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP918ilvpe81zFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk NmUyMGFiZWYtZGQ0Mi00M2RhLWIyZTYtOGM5NTIxMGViNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbwU0687UOhmQdiqu5+qHMIlB/M9xFpjlfes LNPveVv+fEuq+sqYdl849d5uhw6rl/9O/IxqI+BIwvMpRON0uSqWQOgtYo5NNnmR XbunUgGldXhVwP+Cjl34YHF34DYZeJ2TAkAAMdcRtbb3b0SVmBXGQukn5yGqwG+h xzdxTGQ+XRNRw15tCfMNdagp3xI2bsmkK9bFdNYc2QKXfx/kELrs+uakv96kICEo ORE/VAITCjt3KUMn200kfKZwl8TWX1BHSy+UvnK0eSK/l1yaKxRYhIpkrb3YdWgm x3p5s5bcKOCbWcE337oU4d1twTSHHO3lQHt0lbQUqkBjDYN0TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF1iBs6SiVSPqh1zkIRw5Om5u1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZGZlMGVjM2MtMTRiMS0z YmRmLTlmMjUtNmRjZTc1MWRlMGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQXgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAANptc3gRwdi/amHjUFngUgKIWNS2Se8vGkUwFYnudRWJ7TnV3yPZb ZgRm8lbWXO2L1Q70S8gL/+2RlccfCrH8BPyGS0PWWKum3E18JT6NxvQjkDuZOkPl PhxcoiyQsOUoap9YlOlvYfiCfb+eBgNlbE5EhgAhkM6vCqMnTh0aoIm5idnd41hA QsykwBbVc16gBBmHKAzh9zuf9Bu4+sc/AEDGbNie7Xk0BCuYkF+HNnL8sp8xxUdR RcPMaL/7aakzEcIPvv7oCwAVIOBWe5U5b8lQDbYmqLTb8/3+TyBLPmLjBJXv81TX 0JfanEOBfOcUNLMclYvXlhYp7/HbjwI= -----END CERTIFICATE-----Generated at Wed Apr 15 10:14:55 2026 by rpki-client