$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/cdbcea0c-3491-3027-a795-0208a1a37c9f.roa File: cdbcea0c-3491-3027-a795-0208a1a37c9f.roa (raw, json) Hash identifier: TX/QLyfYoVp70zUZRvpSzeGIF5GiJuosoZq2lVHbntA= Subject key identifier: 11:82:94:66:86:19:69:10:D8:10:8F:BB:97:EA:FC:18:AF:6D:0F:B6 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584D0CEE39FFD0EC251956401180 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/cdbcea0c-3491-3027-a795-0208a1a37c9f.roa Signing time: Tue 03 Mar 2026 23:11:16 +0000 ROA not before: Tue 03 Mar 2026 23:11:16 +0000 ROA not after: Mon 01 Jun 2026 22:11:16 +0000 asID: 53959 IP address blocks: 207.171.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:ee:39:ff:d0:ec:25:19:56:40:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 3 23:11:16 2026 GMT Not After : Jun 1 22:11:16 2026 GMT Subject: CN=0f64d7b4-2e98-4930-aaf0-b1d5fdd4cb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b8:54:29:5d:c7:c2:8d:57:02:7e:83:96:6d: 9b:80:6a:ef:c1:c6:9b:ab:f6:06:7c:ba:69:4d:28: 0f:c5:fb:ca:d9:de:c9:86:5f:3b:ca:bb:68:db:d0: 23:0c:10:80:34:0a:93:cb:1c:d8:11:21:27:d8:84: 25:16:35:b5:6a:14:d4:91:5d:ee:2f:03:3c:e3:df: 05:82:b6:3f:85:0d:75:93:74:59:a2:e7:bd:7a:a6: 01:d3:8e:c0:1f:84:f8:1a:5b:6e:0f:85:24:79:ac: b8:e4:05:84:c7:e9:8f:7f:0d:46:5e:53:c0:d2:69: b5:2e:6f:58:ed:38:7d:ed:1b:9f:b9:64:7c:56:ea: 62:78:4e:31:6b:1d:24:5c:9b:97:f7:3a:02:21:f2: 3d:c5:54:81:0d:16:11:67:f5:0a:e8:7e:43:27:33: 77:10:18:a0:6a:4d:6e:6f:db:0a:4c:8a:b7:6f:a4: 69:85:a1:7e:a5:1c:b7:fa:f8:e9:87:75:34:10:58: 30:60:4e:57:f6:d4:3d:29:cd:9f:e5:86:c1:44:66: 35:fe:fe:54:ad:0d:55:9b:2d:91:56:85:c3:17:d6: c8:0a:d0:46:91:9d:ea:ea:7f:ab:60:eb:82:e9:dd: f9:2c:af:9e:c8:6a:32:16:de:f0:ab:fb:33:7c:59: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:82:94:66:86:19:69:10:D8:10:8F:BB:97:EA:FC:18:AF:6D:0F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/cdbcea0c-3491-3027-a795-0208a1a37c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 207.171.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:dc:d5:44:37:43:02:47:d1:3f:01:a8:b7:4a:ff:9f:a5:45: 1c:e3:c2:2c:58:ef:d9:64:6d:a5:f5:27:99:70:b3:81:28:be: e2:11:d1:73:c8:92:65:9d:dc:d3:85:88:59:6f:42:78:75:e3: 7e:6b:f6:84:0f:07:76:32:fa:9b:c8:6a:b9:3c:a9:b5:f2:76: 1b:25:7b:32:7e:24:0d:16:1b:92:bf:92:1f:9f:47:e6:ce:dd: 8b:dd:d0:69:97:f0:88:f4:b2:a7:5e:e5:a4:65:36:f7:81:2f: 37:49:d3:e2:d9:ba:ab:4a:6f:9d:d9:90:9a:0a:48:62:04:cb: f1:96:cf:d0:d4:52:2d:18:af:a7:fc:fa:ae:9b:a3:64:3e:af: 71:ee:db:7a:47:96:eb:e7:6c:97:0e:9c:e3:5b:9c:1d:c6:56: 1c:88:03:3d:01:cd:88:3a:2f:62:ab:ac:b4:c6:7f:df:1f:81: d6:32:4f:a9:85:0d:04:77:20:33:e4:e5:00:2b:67:fe:32:53: cf:3e:f4:a4:44:55:9c:c4:b3:a6:00:8e:3f:ea:7e:62:b4:fd: 88:28:29:24:29:bd:79:62:ae:34:00:d5:30:e1:b6:20:c0:13: 91:41:60:24:bd:5d:7a:a7:df:1c:64:58:48:2b:e7:41:a9:e0: c1:33:67:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0M7jn/0OwlGVZAEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDMwMzIzMTExNloXDTI2MDYwMTIyMTExNlowLzEtMCsGA1UEAxMk MGY2NGQ3YjQtMmU5OC00OTMwLWFhZjAtYjFkNWZkZDRjYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrhUKV3Hwo1XAn6Dlm2bgGrvwcabq/YGfLpp TSgPxfvK2d7Jhl87yrto29AjDBCANAqTyxzYESEn2IQlFjW1ahTUkV3uLwM8498F grY/hQ11k3RZoue9eqYB047AH4T4GltuD4Ukeay45AWEx+mPfw1GXlPA0mm1Lm9Y 7Th97RufuWR8VupieE4xax0kXJuX9zoCIfI9xVSBDRYRZ/UK6H5DJzN3EBigak1u b9sKTIq3b6RphaF+pRy3+vjph3U0EFgwYE5X9tQ9Kc2f5YbBRGY1/v5UrQ1Vmy2R VoXDF9bICtBGkZ3q6n+rYOuC6d35LK+eyGoyFt7wq/szfFkmrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGClGaGGWkQ2BCPu5fq/BivbQ+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvY2RiY2VhMGMtMzQ5MS0z MDI3LWE3OTUtMDIwOGExYTM3YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6vwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXc1UQ3QwJH0T8BqLdK/5+lRRzjwixY79lkbaX1J5lws4EovuIR0XPI kmWd3NOFiFlvQnh1435r9oQPB3Yy+pvIark8qbXydhslezJ+JA0WG5K/kh+fR+bO 3Yvd0GmX8Ij0sqde5aRlNveBLzdJ0+LZuqtKb53ZkJoKSGIEy/GWz9DUUi0Yr6f8 +q6bo2Q+r3Hu23pHluvnbJcOnONbnB3GVhyIAz0BzYg6L2KrrLTGf98fgdYyT6mF DQR3IDPk5QArZ/4yU88+9KREVZzEs6YAjj/qfmK0/YgoKSQpvXlirjQA1TDhtiDA E5FBYCS9XXqn3xxkWEgr50Gp4MEzZ9A= -----END CERTIFICATE-----Generated at Sat Mar 14 20:46:26 2026 by rpki-client