$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e3b4a726-0e19-3af7-8092-aaceb7e35899.roa File: e3b4a726-0e19-3af7-8092-aaceb7e35899.roa (raw, json) Hash identifier: 8RhOLS/lRWaw19ieXUuiGMbEnTrchf6KsKV+DZAIQ3E= Subject key identifier: 91:F0:AD:51:C8:54:70:43:02:FD:2E:46:EC:F2:E3:B1:1D:AC:E5:81 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D24DFA305F43EF7A95DC39000 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e3b4a726-0e19-3af7-8092-aaceb7e35899.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 40413 IP address blocks: 207.250.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a3:05:f4:3e:f7:a9:5d:c3:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5fdfab0a-010b-456a-a138-573318d0a759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:28:33:d7:6c:5d:cf:6e:55:22:9f:ff:96:25: 93:83:d5:2f:c6:13:a1:d2:f4:82:ef:68:47:ca:23: 9c:92:80:55:bb:55:f7:76:cc:99:46:2a:e8:11:82: 44:f7:a2:c0:25:55:6d:a5:13:42:a2:d7:59:bc:d9: 40:56:97:f2:ba:d8:fc:64:27:3d:67:df:01:92:6f: 37:0c:e0:89:58:70:f2:ee:3b:4a:10:11:bd:61:86: f4:ac:8e:4a:fb:5f:08:3c:87:62:b4:a7:d1:29:00: 8d:1c:12:b7:f7:2f:39:6e:ff:e3:25:6c:3b:95:12: 5b:42:e7:95:55:57:94:d7:95:42:62:bf:c7:da:dc: 35:62:33:3f:c4:ea:23:32:a3:98:20:50:8f:f3:b1: 12:76:83:99:1a:0c:af:cd:4f:5e:9e:f9:3f:14:4c: dc:fe:b7:0f:5f:02:19:b5:d7:59:59:04:3a:1d:74: e6:c4:82:70:24:f2:3f:52:05:49:ae:c5:dc:61:4c: c9:da:86:93:79:d4:bb:e5:24:30:88:4c:c5:0e:cf: 61:56:d6:0c:86:d4:52:e6:0c:49:ab:5d:e0:98:48: 3c:6e:00:a1:58:3f:15:5c:7a:8a:f8:33:f6:7f:a8: 1f:ca:64:8e:a6:d1:e7:44:ac:d5:94:ea:ee:65:b4: 4f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F0:AD:51:C8:54:70:43:02:FD:2E:46:EC:F2:E3:B1:1D:AC:E5:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e3b4a726-0e19-3af7-8092-aaceb7e35899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.250.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:69:f2:28:ca:1c:60:ca:6c:c0:f8:a0:2f:ee:5a:ed:3f:e2: aa:07:2e:37:33:d1:1b:b5:3e:b4:8f:b5:cc:54:7d:65:ad:73: a8:85:a1:52:9a:3c:70:42:fe:b2:a2:5f:b8:5d:3e:b4:bc:15: 7c:5a:e2:b4:fc:51:27:c9:18:5d:1c:1b:aa:1e:f7:c4:d9:30: 6c:0c:be:16:d2:35:89:85:0b:94:f8:52:8e:9f:98:2c:18:b7: 96:7c:21:bd:07:09:78:f4:5e:ad:0c:13:e4:f9:78:11:e7:eb: 42:0f:08:77:20:0a:0a:00:22:d8:fb:16:cf:3f:6f:76:90:7b: b5:81:b9:90:fa:e6:a9:65:7e:a6:6a:11:1e:07:a9:d6:21:d3: a5:08:c6:d4:65:e1:b6:5d:f1:30:02:3b:0a:47:55:5f:a9:05: e1:13:b7:d0:0a:19:57:31:7b:9b:4f:d3:cd:0a:bf:a7:73:c6: f9:d8:fa:0e:67:b7:8e:2e:c8:1f:a0:21:de:6c:c2:55:32:af: 07:b3:b6:35:1e:ee:2b:b9:6b:0b:0c:14:5a:c5:2f:51:37:f1: 99:de:e2:9c:57:bd:10:04:6a:c6:2e:ec:29:18:35:ca:a6:7c: f5:d3:72:e3:08:39:83:9e:0e:4e:00:f1:0f:1f:eb:3a:6c:72: 90:d2:62:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36MF9D73qV3DkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWZkZmFiMGEtMDEwYi00NTZhLWExMzgtNTczMzE4ZDBhNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoygz12xdz25VIp//liWTg9UvxhOh0vSC72hH yiOckoBVu1X3dsyZRiroEYJE96LAJVVtpRNCotdZvNlAVpfyutj8ZCc9Z98Bkm83 DOCJWHDy7jtKEBG9YYb0rI5K+18IPIditKfRKQCNHBK39y85bv/jJWw7lRJbQueV VVeU15VCYr/H2tw1YjM/xOojMqOYIFCP87ESdoOZGgyvzU9envk/FEzc/rcPXwIZ tddZWQQ6HXTmxIJwJPI/UgVJrsXcYUzJ2oaTedS75SQwiEzFDs9hVtYMhtRS5gxJ q13gmEg8bgChWD8VXHqK+DP2f6gfymSOptHnRKzVlOruZbRPHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHwrVHIVHBDAv0uRuzy47EdrOWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZTNiNGE3MjYtMGUxOS0z YWY3LTgwOTItYWFjZWI3ZTM1ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/rPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhp8ijKHGDKbMD4oC/uWu0/4qoHLjcz0Ru1PrSPtcxUfWWtc6iFoVKa PHBC/rKiX7hdPrS8FXxa4rT8USfJGF0cG6oe98TZMGwMvhbSNYmFC5T4Uo6fmCwY t5Z8Ib0HCXj0Xq0ME+T5eBHn60IPCHcgCgoAItj7Fs8/b3aQe7WBuZD65qllfqZq ER4HqdYh06UIxtRl4bZd8TACOwpHVV+pBeETt9AKGVcxe5tP080Kv6dzxvnY+g5n t44uyB+gId5swlUyrweztjUe7iu5awsMFFrFL1E38Zne4pxXvRAEasYu7CkYNcqm fPXTcuMIOYOeDk4A8Q8f6zpscpDSYjY= -----END CERTIFICATE-----Generated at Tue Mar 24 08:53:57 2026 by rpki-client