$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa File: f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa (raw, json) Hash identifier: vA3SoGpbnjDUkVBCtIOH3jxN7VYzHm4Hobau4wEEhvo= Subject key identifier: 37:98:D8:F7:CA:63:B7:11:A8:45:53:43:85:49:68:7C:AA:77:F5:78 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584DEF45E033685E12953D988E00 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 396185 IP address blocks: 207.171.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:45:e0:33:68:5e:12:95:3d:98:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=9470b92f-fd76-4b08-9f5c-3a93f09793dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:e3:63:cf:1c:cc:5e:dc:86:34:96:33:32: 5a:5e:1a:ad:f4:df:ff:a1:eb:14:ec:9a:2a:d7:20: 2c:2f:37:fa:4e:f8:d4:b4:db:2f:20:b6:9d:82:72: 32:4c:95:7e:42:b5:21:20:0d:7e:30:ee:c9:f4:be: cb:52:e1:72:19:c4:00:b6:be:70:f4:f3:56:2d:e0: f9:b5:f2:21:1d:fe:ca:7e:4b:69:be:21:06:64:f5: 76:84:5c:b4:a3:17:29:83:82:4d:f7:c0:c3:0d:65: 48:59:81:b0:ac:2d:97:6e:cc:cf:f1:3b:52:bd:9c: 22:28:bc:aa:67:0c:6f:f2:ca:70:5d:67:2e:44:95: ff:ae:22:05:ae:e0:e1:e1:6c:cb:bf:55:7a:36:35: 97:00:2a:e8:f5:62:ce:e2:db:c7:57:c9:5d:6b:b4: 0b:91:63:bd:50:b7:8b:30:a2:06:60:a2:41:b8:f3: 80:c3:01:e4:80:2d:b1:d6:ca:6c:cb:b6:d2:5c:84: f1:c0:63:60:cb:88:a2:ae:07:4b:7d:94:fe:bd:05: 83:32:d4:0d:32:bf:92:2d:ad:39:17:f7:13:1f:26: 61:c3:c1:71:66:03:99:4d:dd:b3:cd:23:4b:ce:9d: d7:35:95:7b:d2:96:10:84:3d:bd:c4:f7:c3:e9:d6: 22:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:98:D8:F7:CA:63:B7:11:A8:45:53:43:85:49:68:7C:AA:77:F5:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 207.171.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ed:5f:af:28:1f:38:10:39:a8:00:7b:5a:f6:69:4f:90:d2: a7:50:2b:0b:fc:20:59:86:a3:af:92:49:09:f7:69:b5:d2:34: 9e:a0:e4:d7:ee:68:01:90:03:37:d5:8d:f6:a2:42:35:66:48: 6c:1c:c6:53:4f:ce:2d:12:9a:8a:80:8e:f3:9f:71:3d:c6:86: 58:ce:00:50:28:e7:30:cc:90:c8:43:f3:f7:dc:c9:9a:20:1b: fa:0d:bd:93:1f:01:aa:06:fe:30:ea:6a:7c:e7:78:b4:8d:6f: a7:a5:ac:d5:5d:f1:2c:0b:7d:fb:07:92:dd:3b:a0:b8:8f:80: bc:cd:3a:66:53:a2:b5:cf:f2:b8:ce:8c:2a:78:dd:a7:03:df: e0:d6:98:09:1b:4e:ef:72:03:8d:4b:20:79:09:30:22:9c:76: 36:4b:5e:e4:92:da:9c:a4:49:c0:d8:8c:dc:74:fd:88:bd:ed: 8e:7e:92:a7:12:67:d1:79:b6:64:51:b3:81:29:72:4f:c4:ea: 62:0c:e7:07:17:c6:2e:a0:41:b9:35:66:e5:b7:da:1c:db:12: a7:b3:79:90:1e:ee:08:40:89:ed:bc:d5:48:35:be:d4:c5:c6: 00:3f:b1:c5:60:a0:03:c6:bc:18:6c:c7:14:d3:82:49:36:9f: fa:64:de:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vReAzaF4SlT2YjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk OTQ3MGI5MmYtZmQ3Ni00YjA4LTlmNWMtM2E5M2YwOTc5M2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3HjY88czF7chjSWMzJaXhqt9N//oesU7Joq 1yAsLzf6TvjUtNsvILadgnIyTJV+QrUhIA1+MO7J9L7LUuFyGcQAtr5w9PNWLeD5 tfIhHf7KfktpviEGZPV2hFy0oxcpg4JN98DDDWVIWYGwrC2XbszP8TtSvZwiKLyq Zwxv8spwXWcuRJX/riIFruDh4WzLv1V6NjWXACro9WLO4tvHV8lda7QLkWO9ULeL MKIGYKJBuPOAwwHkgC2x1spsy7bSXITxwGNgy4iirgdLfZT+vQWDMtQNMr+SLa05 F/cTHyZhw8FxZgOZTd2zzSNLzp3XNZV70pYQhD29xPfD6dYiRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeY2PfKY7cRqEVTQ4VJaHyqd/V4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvZjEzYWU5NmMtM2M5NC0z NzM2LWJkOWUtNjA5MmIwYmY0ZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6vGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/tX68oHzgQOagAe1r2aU+Q0qdQKwv8IFmGo6+SSQn3abXSNJ6g5Nfu aAGQAzfVjfaiQjVmSGwcxlNPzi0SmoqAjvOfcT3GhljOAFAo5zDMkMhD8/fcyZog G/oNvZMfAaoG/jDqanzneLSNb6elrNVd8SwLffsHkt07oLiPgLzNOmZTorXP8rjO jCp43acD3+DWmAkbTu9yA41LIHkJMCKcdjZLXuSS2pykScDYjNx0/Yi97Y5+kqcS Z9F5tmRRs4Epck/E6mIM5wcXxi6gQbk1ZuW32hzbEqezeZAe7ghAie281Ug1vtTF xgA/scVgoAPGvBhsxxTTgkk2n/pk3uE= -----END CERTIFICATE-----Generated at Mon Jun 1 22:58:58 2026 by rpki-client