$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/aecad75e-519d-3546-9e8f-7dd4c2939b1e.roa File: aecad75e-519d-3546-9e8f-7dd4c2939b1e.roa (raw, json) Hash identifier: ponkCoLRx9ODy5T5QLsQB8ZZlNDG63RBpTiM1IBSO9w= Subject key identifier: 14:04:40:E2:17:79:F0:88:E2:0A:43:08:ED:1F:7F:B5:86:19:C2:F3 Certificate issuer: /CN=c873b1de-87e4-4876-98b6-52dff5baa65a Certificate serial: 010D0C9F4328584F6C58324535BF2A0C581478C0 Authority key identifier: CB:1B:D0:91:1F:26:8D:A8:35:17:B1:AB:12:AB:FF:B9:1E:7F:B2:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/aecad75e-519d-3546-9e8f-7dd4c2939b1e.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 402005 IP address blocks: 207.228.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/c873b1de-87e4-4876-98b6-52dff5baa65a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/c873b1de-87e4-4876-98b6-52dff5baa65a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:32:45:35:bf:2a:0c:58:14:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c873b1de-87e4-4876-98b6-52dff5baa65a Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=c7bbb92b-2d1e-4874-8e30-c05039a6749f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:db:58:49:7e:47:4b:dc:3c:82:01:82:0b: 4d:30:2c:9d:49:fd:5b:42:7d:8e:f1:c7:61:03:e3: 09:83:5f:e9:14:c2:c8:e0:9b:b5:5a:d2:dc:a0:d3: d2:5a:80:05:7e:f5:8d:d1:48:48:68:45:46:b3:8b: 7d:a3:d0:91:7e:2d:52:89:ee:b4:b0:f6:c0:8e:eb: 3d:04:a0:15:73:4c:20:1c:f8:5e:bf:9d:ac:39:09: db:30:34:1d:93:01:dd:ad:17:8a:fd:51:b5:92:42: 04:1b:a0:0a:37:9f:85:5f:0d:3b:3b:d0:08:25:da: de:dc:85:55:d1:ea:c0:2d:8f:83:06:6d:a2:ff:e6: 6f:14:c4:2d:ba:99:3f:5c:11:c2:7c:03:9a:d4:c2: 85:88:23:d1:63:08:18:16:1e:6f:fa:b4:10:5d:70: ab:ff:fc:67:55:1f:42:72:7f:02:11:c2:b6:e7:4a: 18:fc:86:91:61:a0:68:c3:a9:43:1f:9d:88:33:47: a7:50:ad:49:ce:99:5a:d3:a9:f2:90:7e:f0:e1:2b: c1:fa:14:34:7e:25:82:33:15:bd:9f:82:53:ac:ea: df:0b:f9:4b:e0:fd:60:b1:2b:ed:a3:48:a9:15:eb: 98:90:26:d4:c0:d6:35:55:1e:d7:a0:53:4c:7a:a0: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:04:40:E2:17:79:F0:88:E2:0A:43:08:ED:1F:7F:B5:86:19:C2:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/aecad75e-519d-3546-9e8f-7dd4c2939b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/c873b1de-87e4-4876-98b6-52dff5baa65a.crl X509v3 Authority Key Identifier: keyid:CB:1B:D0:91:1F:26:8D:A8:35:17:B1:AB:12:AB:FF:B9:1E:7F:B2:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a.cer sbgp-ipAddrBlock: critical IPv4: 207.228.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:7b:7e:86:e3:ec:e7:91:05:e2:d9:df:fa:56:39:e6:d5:e5: a9:fd:b0:e7:f4:2c:87:22:de:31:a6:4b:4e:d5:14:40:13:a6: f6:f0:e8:2a:ed:40:79:ff:34:b8:91:9a:90:d2:9c:df:b1:d2: 67:8a:56:47:e5:51:d4:95:85:b5:30:af:1f:34:6e:49:72:58: 3c:7d:ab:49:2f:6e:80:dd:43:3c:ae:a5:db:93:9e:29:85:8f: 91:4b:4d:d7:8e:91:90:38:00:74:53:cf:3c:3a:af:e4:13:07: 54:17:c6:3f:ce:48:31:75:b5:2f:f6:0d:04:b4:4f:d7:ac:1d: 71:04:5e:08:12:61:f3:db:c9:c2:fc:0c:9e:2d:1c:96:9d:ca: 30:68:7e:c0:b9:6a:ba:c5:8b:30:9e:b7:fe:06:29:6a:f4:df: 9c:30:52:05:cb:97:2d:90:69:f0:c6:e3:cb:c6:47:73:51:00: ea:f9:01:18:67:74:64:a0:fb:f3:a0:53:1e:02:2e:4a:9a:2d: c8:c6:35:db:e1:a9:12:19:27:9b:92:ab:b1:d6:82:a6:00:77: f4:d2:2d:9b:dd:dc:73:6c:2b:3d:60:44:30:e7:db:36:a2:94: c0:6c:2b:53:41:28:74:9f:98:0d:10:7a:3e:83:6a:30:be:e0: 3b:16:6e:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDJFNb8qDFgUeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg3M2IxZGUtODdlNC00ODc2LTk4YjYtNTJkZmY1YmFh NjVhMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk YzdiYmI5MmItMmQxZS00ODc0LThlMzAtYzA1MDM5YTY3NDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9DbWEl+R0vcPIIBggtNMCydSf1bQn2O8cdh A+MJg1/pFMLI4Ju1WtLcoNPSWoAFfvWN0UhIaEVGs4t9o9CRfi1Sie60sPbAjus9 BKAVc0wgHPhev52sOQnbMDQdkwHdrReK/VG1kkIEG6AKN5+FXw07O9AIJdre3IVV 0erALY+DBm2i/+ZvFMQtupk/XBHCfAOa1MKFiCPRYwgYFh5v+rQQXXCr//xnVR9C cn8CEcK250oY/IaRYaBow6lDH52IM0enUK1Jzpla06nykH7w4SvB+hQ0fiWCMxW9 n4JTrOrfC/lL4P1gsSvto0ipFeuYkCbUwNY1VR7XoFNMeqBV/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQEQOIXefCI4gpDCO0ff7WGGcLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jODcz YjFkZS04N2U0LTQ4NzYtOThiNi01MmRmZjViYWE2NWEvYWVjYWQ3NWUtNTE5ZC0z NTQ2LTllOGYtN2RkNGMyOTM5YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzg3M2IxZGUtODdlNC00ODc2LTk4 YjYtNTJkZmY1YmFhNjVhL2M4NzNiMWRlLTg3ZTQtNDg3Ni05OGI2LTUyZGZmNWJh YTY1YS5jcmwwHwYDVR0jBBgwFoAUyxvQkR8mjag1F7GrEqv/uR5/sr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jODczYjFkZS04N2U0LTQ4NzYtOThiNi01MmRm ZjViYWE2NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+TPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG57fobj7OeRBeLZ3/pWOebV5an9sOf0LIci3jGmS07VFEATpvbw6Crt QHn/NLiRmpDSnN+x0meKVkflUdSVhbUwrx80bklyWDx9q0kvboDdQzyupduTnimF j5FLTdeOkZA4AHRTzzw6r+QTB1QXxj/OSDF1tS/2DQS0T9esHXEEXggSYfPbycL8 DJ4tHJadyjBofsC5arrFizCet/4GKWr035wwUgXLly2QafDG48vGR3NRAOr5ARhn dGSg+/OgUx4CLkqaLcjGNdvhqRIZJ5uSq7HWgqYAd/TSLZvd3HNsKz1gRDDn2zai lMBsK1NBKHSfmA0Qej6DajC+4DsWbiA= -----END CERTIFICATE-----Generated at Sat Oct 10 16:22:42 2026 by rpki-client