$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa File: 3e3631a7-6a34-3455-850a-0ec197b42195.roa (raw, json) Hash identifier: PWOGXTuBYLtpPDdbnP6tejWSRU0uKdRzlrQi1Szs34U= Subject key identifier: 02:9C:BB:CE:35:FA:36:41:2A:67:3A:1C:BF:5F:73:8D:7A:F0:6C:26 Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F4328584D091261C951C8AA7E39E69050 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 800 IP address blocks: 207.32.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:61:c9:51:c8:aa:7e:39:e6:90:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=c035a848-1a84-4187-acdc-df9335a55d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:95:3d:0c:ff:22:98:f9:a6:2a:e7:27:83:ca: ba:4d:1a:0f:ff:7e:22:48:69:42:63:ba:e1:b9:0c: 14:95:0b:7b:b1:09:a2:72:56:7e:1d:b8:7c:17:c3: 4d:2a:89:8a:ef:8a:76:7e:1b:a0:be:03:aa:d2:37: 3d:a4:bb:27:1a:47:6b:3a:c9:ca:ba:4b:73:11:68: db:15:b8:cb:de:28:dc:20:9b:ae:86:9b:a7:b2:b1: 34:b3:0f:b8:37:27:da:0d:00:c0:e7:86:59:2e:db: 89:29:26:f0:65:bc:96:2e:ef:02:8f:cd:f6:15:d5: d1:ce:3b:fa:4d:77:16:bf:a8:ee:ea:57:f7:69:a9: 56:6b:fc:a0:6e:8c:df:18:f2:d8:35:52:79:f7:66: b7:a6:01:79:92:7b:ec:31:6d:98:6e:a9:e7:cf:4d: 07:c2:a9:a9:b7:4b:ef:ce:e8:7a:5a:48:b9:89:e8: 0a:44:89:e2:18:a3:c8:a9:44:00:c3:55:1f:74:ba: 52:64:55:04:da:ad:7b:9f:31:fe:f8:5c:f0:32:54: bb:13:79:12:0c:0a:ce:51:b4:5e:14:84:85:5b:4b: 84:5a:20:24:d5:49:a8:a5:cf:11:a6:83:75:8e:42: 5e:f9:df:bf:d2:49:90:39:59:ae:07:db:7a:b0:f9: f7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9C:BB:CE:35:FA:36:41:2A:67:3A:1C:BF:5F:73:8D:7A:F0:6C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 207.32.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a1:7d:c5:13:62:f3:64:99:02:78:1a:57:ae:14:86:bb:f9: 9d:61:03:0a:7e:f9:25:b8:56:10:88:61:7e:17:cc:96:61:5c: 48:99:e9:4e:d3:30:fd:e6:54:b1:86:f9:1b:e0:af:e4:c2:b5: df:02:c4:a5:98:b7:4d:4b:81:78:89:51:7f:35:61:b5:48:6b: d1:e0:c3:dc:d2:4c:4f:fd:d5:1a:dc:bf:10:53:ec:dc:85:f0: 4f:36:c4:14:68:96:da:ef:bc:04:19:45:2d:04:4f:eb:2d:a8: 33:b3:f3:ed:83:2d:3a:07:96:9e:9c:6b:25:0f:cd:63:2a:cd: ad:93:1e:e5:75:3f:39:fb:fa:fb:b8:16:f9:e6:11:7a:0d:bd: 37:8c:72:a0:5d:19:ba:40:4f:03:e9:52:b1:cb:4d:3a:b9:3a: df:69:d9:3d:f5:2a:58:c5:7c:14:75:d7:c6:68:b8:c6:cd:5c: 84:d6:1f:fe:85:cc:94:42:ee:97:26:0b:ce:ac:0f:56:34:ee: 00:0e:57:61:c6:97:1a:57:a3:2a:7c:2e:13:e6:d4:55:6d:9d: 44:17:0a:93:3f:66:04:1a:b2:07:8d:07:c2:14:58:b6:54:13: b1:b4:c7:5f:82:a8:c1:be:61:b5:93:69:d6:70:f1:e5:b6:3a: 53:e2:56:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmHJUciqfjnmkFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YzAzNWE4NDgtMWE4NC00MTg3LWFjZGMtZGY5MzM1YTU1ZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJU9DP8imPmmKucng8q6TRoP/34iSGlCY7rh uQwUlQt7sQmiclZ+Hbh8F8NNKomK74p2fhugvgOq0jc9pLsnGkdrOsnKuktzEWjb FbjL3ijcIJuuhpunsrE0sw+4NyfaDQDA54ZZLtuJKSbwZbyWLu8Cj832FdXRzjv6 TXcWv6ju6lf3aalWa/ygbozfGPLYNVJ592a3pgF5knvsMW2Ybqnnz00Hwqmpt0vv zuh6Wki5iegKRIniGKPIqUQAw1UfdLpSZFUE2q17nzH++FzwMlS7E3kSDArOUbRe FISFW0uEWiAk1Umopc8RpoN1jkJe+d+/0kmQOVmuB9t6sPn3hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKcu841+jZBKmc6HL9fc4168GwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvM2UzNjMxYTctNmEzNC0z NDU1LTg1MGEtMGVjMTk3YjQyMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmhfcUTYvNkmQJ4GleuFIa7+Z1hAwp++SW4VhCIYX4XzJZhXEiZ6U7T MP3mVLGG+Rvgr+TCtd8CxKWYt01LgXiJUX81YbVIa9Hgw9zSTE/91RrcvxBT7NyF 8E82xBRoltrvvAQZRS0ET+stqDOz8+2DLToHlp6cayUPzWMqza2THuV1Pzn7+vu4 FvnmEXoNvTeMcqBdGbpATwPpUrHLTTq5Ot9p2T31KljFfBR118ZouMbNXITWH/6F zJRC7pcmC86sD1Y07gAOV2HGlxpXoyp8LhPm1FVtnUQXCpM/ZgQasgeNB8IUWLZU E7G0x1+CqMG+YbWTadZw8eW2OlPiVis= -----END CERTIFICATE-----Generated at Mon Mar 2 18:30:22 2026 by rpki-client