$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa File: efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa (raw, json) Hash identifier: zEyxPu1a5SBTQD4y+cF6lvr8L6zjtrmW9oWCw9j4/Cg= Subject key identifier: B0:FA:0C:DE:BE:82:9E:AF:35:ED:71:B3:E8:69:05:38:AC:72:4E:00 Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584CF2BD06F73879BDE75F56C600 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 14230 IP address blocks: 207.70.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:06:f7:38:79:bd:e7:5f:56:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=b35a1d53-56a4-4a4d-a955-d83aaa6a6b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:84:86:63:6c:c9:f0:38:75:c0:f7:b5:52:29: b0:c7:2d:91:0b:52:d0:91:fb:c3:e9:08:18:81:32: 2b:d2:f3:9a:98:b3:72:fb:e3:e7:cf:a2:f0:cd:a8: 49:c1:84:9d:69:45:42:83:6c:40:50:96:3c:c1:10: 95:ce:c8:29:46:91:cd:97:a5:b8:f6:42:47:85:26: 6c:a5:6c:e0:c0:69:c9:7b:b3:b3:0d:dc:b7:39:db: 41:b7:ab:2b:79:be:75:59:32:b7:f7:b5:19:f6:a7: 69:ff:27:d8:77:ff:66:7e:aa:c5:aa:fe:5b:21:b3: 7e:0a:a4:93:45:2d:ee:7f:fa:ce:29:13:95:8a:f0: e5:77:be:b4:1c:46:d9:a6:da:24:39:19:4c:7d:bc: 9a:03:79:43:a6:34:f8:8b:c1:23:9d:e4:80:d5:f8: 2c:1e:36:bd:20:ef:0d:22:08:cd:80:11:c6:f4:91: 10:4f:29:5e:da:89:d2:63:d6:25:20:72:8f:06:6b: 4e:d5:f6:b0:69:66:2d:6a:b1:b2:1a:c1:a7:f7:0d: c4:f2:95:f7:a2:bc:80:cc:af:ef:d2:d5:f6:c0:85: 36:05:fb:9b:9a:26:00:8d:51:37:81:7c:84:f2:1b: 31:2b:db:48:4c:26:06:b8:fb:1b:6b:4f:1a:06:cd: 7a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FA:0C:DE:BE:82:9E:AF:35:ED:71:B3:E8:69:05:38:AC:72:4E:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv4: 207.70.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:db:9f:e9:01:78:44:cc:9e:ec:75:e9:84:c6:16:22:d0:bf: 0f:2a:b9:e7:f9:ab:cf:24:76:24:9a:63:ba:31:80:ab:b7:0d: 97:6e:e1:89:25:f4:fc:4a:e8:d9:56:b9:e5:06:86:b1:9f:7c: 8a:cf:20:3b:e2:af:06:27:fd:51:47:4d:22:4c:81:ca:88:63: 84:a3:5b:75:2d:26:2f:c2:fe:de:31:ca:d2:00:94:02:94:61: 7c:59:69:41:bd:ea:9c:47:3c:2f:d5:9a:a3:6d:62:cd:b8:a8: fe:d4:ef:e0:f6:e2:ce:0e:e5:de:ed:be:47:88:b7:da:ef:0c: 41:45:b2:30:e6:8f:e5:63:df:0a:40:5b:b8:39:40:f1:61:34: 9b:49:27:d2:e8:9e:6f:33:d5:c4:0c:53:33:7f:81:21:94:c7: a9:15:c5:e1:d2:e2:bd:43:74:a0:fc:12:fa:3f:2b:2d:26:e9: 9b:be:56:d3:67:f9:2a:c3:b0:e5:bf:a9:1f:5e:4d:bc:79:ac: 3b:fe:d4:f9:b3:e5:9e:e8:7b:cf:e5:b7:cb:83:ee:bf:6e:7c: 69:46:b3:31:7b:d1:19:ab:87:4a:8c:b1:02:63:79:95:bb:69: 61:b5:81:ee:16:0f:b5:23:34:e3:0b:29:fc:c1:0d:45:8c:04: 42:11:32:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQb3OHm9519WxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk YjM1YTFkNTMtNTZhNC00YTRkLWE5NTUtZDgzYWFhNmE2YjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoSGY2zJ8Dh1wPe1Uimwxy2RC1LQkfvD6QgY gTIr0vOamLNy++Pnz6LwzahJwYSdaUVCg2xAUJY8wRCVzsgpRpHNl6W49kJHhSZs pWzgwGnJe7OzDdy3OdtBt6sreb51WTK397UZ9qdp/yfYd/9mfqrFqv5bIbN+CqST RS3uf/rOKROVivDld760HEbZptokORlMfbyaA3lDpjT4i8EjneSA1fgsHja9IO8N IgjNgBHG9JEQTyle2onSY9YlIHKPBmtO1fawaWYtarGyGsGn9w3E8pX3oryAzK/v 0tX2wIU2BfubmiYAjVE3gXyE8hsxK9tITCYGuPsba08aBs16jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD6DN6+gp6vNe1xs+hpBTisck4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvZWZkYzAzZTItZDdiOS0z NDk4LWE5NDMtMmYxZjBkYmRhMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz0YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzbn+kBeETMnux16YTGFiLQvw8quef5q88kdiSaY7oxgKu3DZdu4Ykl 9PxK6NlWueUGhrGffIrPIDvirwYn/VFHTSJMgcqIY4SjW3UtJi/C/t4xytIAlAKU YXxZaUG96pxHPC/VmqNtYs24qP7U7+D24s4O5d7tvkeIt9rvDEFFsjDmj+Vj3wpA W7g5QPFhNJtJJ9Lonm8z1cQMUzN/gSGUx6kVxeHS4r1DdKD8Evo/Ky0m6Zu+VtNn +SrDsOW/qR9eTbx5rDv+1Pmz5Z7oe8/lt8uD7r9ufGlGszF70Rmrh0qMsQJjeZW7 aWG1ge4WD7UjNOMLKfzBDUWMBEIRMos= -----END CERTIFICATE-----Generated at Mon Mar 2 08:12:45 2026 by rpki-client