$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa File: efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa (raw, json) Hash identifier: dIGPwMUXfaP0RZKQK63g6ZcFatpcbzl8JVwh96iJEok= Subject key identifier: 68:ED:F7:4C:48:D9:33:24:93:2A:43:19:67:55:BF:50:97:EA:11:1E Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584F49882A67016271D69BED29C0 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14230 IP address blocks: 207.70.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:2a:67:01:62:71:d6:9b:ed:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a1e8d605-fbc8-4bd7-b7ce-6b87ed60a433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:66:c9:36:45:4d:f6:62:99:6d:c0:c5:4f:11: ba:6a:23:0d:fc:9d:f0:ed:c4:e7:af:93:ad:2f:ed: 1a:6a:ba:4b:4d:0c:50:88:f7:63:61:8f:6d:f2:ec: 40:c8:c5:fe:bf:41:40:e1:3f:56:2d:55:97:e3:80: 5e:8d:5a:10:48:4c:df:3f:96:e8:22:78:56:73:7a: 68:9d:33:95:c1:65:e1:e3:3c:5d:6d:23:4b:44:cb: b9:25:fe:1a:b1:e8:c4:81:d3:e7:80:25:d4:fe:a3: a0:2d:79:17:68:32:f7:57:57:aa:a7:a4:de:ab:4f: d6:f1:96:99:3e:a2:67:fe:ba:af:91:34:34:04:eb: 45:33:47:72:78:4d:90:b7:34:cb:53:76:7d:42:dc: ea:f2:40:5c:90:4e:36:ee:23:2f:13:3c:61:e6:b3: c4:6f:4e:7b:e4:75:c3:57:10:de:65:61:ec:bf:04: 3c:b5:43:ba:52:8c:b8:4d:3d:ce:a0:2c:4b:51:c2: 27:9e:01:27:bf:5c:3b:25:2c:35:19:4f:68:3c:bb: a8:26:3a:ad:5e:56:fd:be:29:a9:e9:8e:0d:89:79: 97:12:eb:05:6f:62:49:45:81:9a:ba:4d:ad:4e:74: b7:37:a1:c3:fe:ef:46:f0:70:4f:70:9e:c4:63:8e: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:ED:F7:4C:48:D9:33:24:93:2A:43:19:67:55:BF:50:97:EA:11:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv4: 207.70.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:da:48:7e:5b:ef:29:b0:0f:7a:bd:7f:12:85:9d:d2:4e:81: ab:ee:90:cf:22:76:90:99:2b:9a:84:c7:e8:b4:15:95:a2:90: 97:79:23:c3:fb:a3:10:de:2e:f2:41:71:47:df:8d:ef:4c:6c: b2:70:74:0e:7c:88:05:6b:f7:9a:0d:e5:25:f5:94:45:5e:68: 2b:c4:49:d7:ec:f8:fa:6c:44:61:96:12:62:d1:d1:18:32:fb: a4:26:4d:29:13:35:02:8c:ac:fa:36:c2:0d:e6:6c:4c:b5:60: 23:c3:0c:9e:5f:22:a0:d6:68:95:81:e0:b2:3b:ef:48:3a:59: 30:eb:d1:d5:2b:62:27:cb:d3:0c:3c:49:cc:d4:f0:9d:0c:47: 0f:8c:9b:36:39:2e:05:26:45:66:bc:14:a9:75:20:95:38:26: 7d:5c:d2:7b:af:5f:e4:74:cf:f8:b1:b0:b2:64:b7:3e:69:8d: ed:ee:7e:ff:33:e1:c8:65:71:1e:dc:4e:8f:0f:82:6d:e0:13: 9b:4c:31:96:b3:6d:d4:02:77:db:ee:0c:bf:df:58:e5:52:9b: ab:b9:cb:9a:43:6b:11:d3:f7:9e:23:80:e4:ef:c5:7a:ea:d7: a0:fa:30:c5:40:bc:9d:fb:d2:74:bb:23:d4:dd:bd:9d:6d:8e: 85:86:4d:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCpnAWJx1pvtKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTFlOGQ2MDUtZmJjOC00YmQ3LWI3Y2UtNmI4N2VkNjBhNDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2bJNkVN9mKZbcDFTxG6aiMN/J3w7cTnr5Ot L+0aarpLTQxQiPdjYY9t8uxAyMX+v0FA4T9WLVWX44BejVoQSEzfP5boInhWc3po nTOVwWXh4zxdbSNLRMu5Jf4asejEgdPngCXU/qOgLXkXaDL3V1eqp6Teq0/W8ZaZ PqJn/rqvkTQ0BOtFM0dyeE2QtzTLU3Z9Qtzq8kBckE427iMvEzxh5rPEb0575HXD VxDeZWHsvwQ8tUO6Uoy4TT3OoCxLUcInngEnv1w7JSw1GU9oPLuoJjqtXlb9vimp 6Y4NiXmXEusFb2JJRYGauk2tTnS3N6HD/u9G8HBPcJ7EY47DGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjt90xI2TMkkypDGWdVv1CX6hEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvZWZkYzAzZTItZDdiOS0z NDk4LWE5NDMtMmYxZjBkYmRhMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz0YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHraSH5b7ymwD3q9fxKFndJOgavukM8idpCZK5qEx+i0FZWikJd5I8P7 oxDeLvJBcUffje9MbLJwdA58iAVr95oN5SX1lEVeaCvESdfs+PpsRGGWEmLR0Rgy +6QmTSkTNQKMrPo2wg3mbEy1YCPDDJ5fIqDWaJWB4LI770g6WTDr0dUrYifL0ww8 SczU8J0MRw+MmzY5LgUmRWa8FKl1IJU4Jn1c0nuvX+R0z/ixsLJktz5pje3ufv8z 4chlcR7cTo8Pgm3gE5tMMZazbdQCd9vuDL/fWOVSm6u5y5pDaxHT954jgOTvxXrq 16D6MMVAvJ370nS7I9TdvZ1tjoWGTeU= -----END CERTIFICATE-----Generated at Thu Oct 8 11:00:00 2026 by rpki-client