$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3edda63d-a054-36de-9fc9-3501960d7503.roa File: 3edda63d-a054-36de-9fc9-3501960d7503.roa (raw, json) Hash identifier: eMY7RLi5+c7aOIla6hqMbZOw5hlGPlx9V5O+17e911Q= Subject key identifier: 30:70:40:77:DA:0F:61:C6:63:16:72:36:79:A3:8C:63:EB:EF:76:F3 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584D359F88D83C4EFFA1E6008300 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3edda63d-a054-36de-9fc9-3501960d7503.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22652 IP address blocks: 207.96.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:88:d8:3c:4e:ff:a1:e6:00:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=43cd778c-eca8-4922-91b3-564fca35ddbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5b:6a:d6:01:f4:45:bd:0d:82:a4:b5:87:3a: 5c:ca:40:35:18:23:60:11:a5:7f:f4:ba:29:cf:74: 90:21:62:f4:b1:2f:56:67:cc:ff:2b:ed:d2:8e:39: 79:e5:92:28:02:73:68:f9:a8:0d:bc:83:47:88:be: 73:74:14:bb:43:c8:2d:94:6a:0e:3b:15:19:8c:03: 0e:fa:6d:68:6c:65:bd:ad:be:07:dd:8c:8f:a9:0d: d2:35:2d:19:95:00:72:4e:fa:34:8a:03:93:53:02: a2:70:ff:77:e7:b0:19:30:bb:91:45:c6:d7:b1:07: 5f:a3:71:98:74:08:3e:4c:74:c3:df:e3:7b:b9:b0: 6e:1b:bc:d2:3d:9c:4c:08:62:95:87:2e:78:1f:ea: 5f:d1:83:23:8a:1c:dd:35:cc:b5:01:c5:bc:b9:6b: 9d:ed:25:96:a6:4e:88:3a:00:fc:64:67:cd:ba:98: 54:5a:1d:bc:e7:4d:86:93:ee:c8:4e:85:a3:a6:cf: f3:59:33:ba:e1:7e:78:dc:f6:9e:e3:46:c9:55:74: 6f:2f:f7:f9:59:28:16:26:35:ab:bd:9d:2c:20:08: d6:52:ad:3c:09:62:c1:52:25:b0:fb:ad:86:fb:48: 88:83:b6:5b:83:77:e0:d3:db:f7:aa:49:c5:f4:97: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:70:40:77:DA:0F:61:C6:63:16:72:36:79:A3:8C:63:EB:EF:76:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3edda63d-a054-36de-9fc9-3501960d7503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.96.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:81:96:0d:63:e7:62:93:e6:2c:3c:91:08:e0:00:42:c9:e5: a0:e8:e4:14:b9:25:fd:8c:c9:59:5e:30:e0:2e:6b:6e:14:a3: f2:d6:f5:34:a1:a5:5f:cc:c5:17:5a:41:d2:8c:76:fb:0a:35: 97:a2:d7:e7:b1:ab:1e:2b:e8:29:58:07:9c:b9:74:a9:61:a9: f2:fc:e4:23:b6:16:ad:cc:9a:97:20:be:58:b5:87:f6:a1:40: 1d:36:98:80:1d:da:df:4a:d5:72:7a:01:f1:ac:a3:08:22:aa: 96:b0:ce:49:1c:5b:0b:05:f2:58:c4:7b:92:c9:e3:59:97:29: df:93:5d:4a:4d:6a:b2:99:c1:4e:07:9a:63:6f:c3:c1:e4:67: d6:b0:66:c3:6f:d7:04:39:21:ff:51:62:a3:f9:a1:ac:59:c6: 05:a7:dc:9c:5b:70:87:75:3a:55:b3:2a:a1:6a:d5:69:27:50: f0:32:17:ef:e5:d1:85:4e:60:3d:5b:04:19:3f:ed:26:48:5e: 68:17:c3:9c:2f:ba:c1:3d:b5:6a:4f:26:f3:c4:b6:4a:c8:d6: d1:3d:c1:0e:b5:23:b4:f2:cb:e3:dc:ad:d2:3e:8f:ae:e8:df: f4:5b:f5:61:d1:aa:6f:2d:d5:aa:b6:17:c5:db:a4:3c:59:4a: fb:a2:06:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n4jYPE7/oeYAgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDNjZDc3OGMtZWNhOC00OTIyLTkxYjMtNTY0ZmNhMzVkZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1tq1gH0Rb0NgqS1hzpcykA1GCNgEaV/9Lop z3SQIWL0sS9WZ8z/K+3Sjjl55ZIoAnNo+agNvINHiL5zdBS7Q8gtlGoOOxUZjAMO +m1obGW9rb4H3YyPqQ3SNS0ZlQByTvo0igOTUwKicP9357AZMLuRRcbXsQdfo3GY dAg+THTD3+N7ubBuG7zSPZxMCGKVhy54H+pf0YMjihzdNcy1AcW8uWud7SWWpk6I OgD8ZGfNuphUWh28502Gk+7IToWjps/zWTO64X543Pae40bJVXRvL/f5WSgWJjWr vZ0sIAjWUq08CWLBUiWw+62G+0iIg7Zbg3fg09v3qknF9JcvmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBwQHfaD2HGYxZyNnmjjGPr73bzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvM2VkZGE2M2QtYTA1NC0z NmRlLTlmYzktMzUwMTk2MGQ3NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2DpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiBlg1j52KT5iw8kQjgAELJ5aDo5BS5Jf2MyVleMOAua24Uo/LW9TSh pV/MxRdaQdKMdvsKNZei1+exqx4r6ClYB5y5dKlhqfL85CO2Fq3Mmpcgvli1h/ah QB02mIAd2t9K1XJ6AfGsowgiqpawzkkcWwsF8ljEe5LJ41mXKd+TXUpNarKZwU4H mmNvw8HkZ9awZsNv1wQ5If9RYqP5oaxZxgWn3JxbcId1OlWzKqFq1WknUPAyF+/l 0YVOYD1bBBk/7SZIXmgXw5wvusE9tWpPJvPEtkrI1tE9wQ61I7Tyy+PcrdI+j67o 3/Rb9WHRqm8t1aq2F8XbpDxZSvuiBqg= -----END CERTIFICATE-----Generated at Wed Mar 25 10:10:14 2026 by rpki-client