$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa File: c432c5a4-ed04-3547-9d82-8353164b23d8.roa (raw, json) Hash identifier: 516lHXzBgNoJxU+1ddE8W+npQrAMdy5z/bWYsZvmRSc= Subject key identifier: E1:8D:B5:4B:66:96:87:3C:BB:30:72:B5:59:CB:0B:11:F4:6D:00:0C Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584D0D425AD6CD7B2B14B7B20C00 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 16409 IP address blocks: 207.114.24.0/24 maxlen: 24 207.114.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:5a:d6:cd:7b:2b:14:b7:b2:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=570ea00a-5949-4ef3-aa95-6cd03f9a893b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:01:ef:f4:f5:52:e9:d1:15:97:de:48:9d:32: 94:43:47:9b:c7:b1:fc:fe:0a:a7:db:2e:99:1b:32: 31:e0:40:07:aa:01:2b:fd:a5:6c:61:db:ad:af:e3: 91:72:7a:31:cf:26:0e:04:2f:d5:2e:5e:d9:96:cb: d4:9f:19:8f:98:ff:5d:1f:fb:96:49:f6:40:7e:e6: 41:87:c9:1f:2a:72:bf:0c:24:3d:16:dd:37:72:48: 63:c3:94:8b:06:30:34:63:11:0a:52:f4:4a:6b:88: 32:e2:3e:d3:8c:65:9a:b2:e1:89:41:78:9c:ae:4b: e8:31:6a:a4:11:8b:9b:81:9b:f4:05:f3:1c:7a:36: d7:c7:0f:58:fe:fe:7b:94:d5:eb:b6:cc:6b:82:bd: 09:a2:63:51:ee:21:4a:5b:a0:49:36:27:dc:c5:df: 8e:7e:33:c6:d1:2b:3a:e4:a3:bb:db:4c:ae:11:09: dc:c9:6e:a2:3f:6a:84:94:7f:a1:39:51:62:ea:2b: f5:72:05:a5:91:b5:51:a3:e1:c6:ef:52:e8:39:a8: 20:b0:e9:f7:41:cc:1c:83:ac:1b:73:b2:5e:53:a7: 8a:99:da:f4:e0:ca:c5:37:70:a4:12:dc:0f:9d:4a: cd:6e:1c:ba:07:42:ee:bc:a7:7c:41:77:b7:2c:14: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8D:B5:4B:66:96:87:3C:BB:30:72:B5:59:CB:0B:11:F4:6D:00:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 207.114.24.0/24 207.114.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:27:00:11:1c:80:34:00:4d:b0:0b:a0:49:21:07:5a:63:a6: 0c:a5:76:3e:b3:00:2c:67:9f:36:9e:a2:69:52:5d:8b:ca:10: 2c:9a:c1:7a:7d:ec:f3:52:c6:27:41:06:ba:11:bb:6b:ee:ae: 63:27:98:5f:dc:cd:a8:2c:59:6a:11:10:5a:be:7e:41:79:e1: e9:ba:e7:63:04:cd:6c:b7:81:eb:fa:57:1e:52:24:26:2c:0b: 1a:a6:99:88:03:a4:9d:fd:39:1c:ab:fa:0b:74:6c:70:fe:92: 78:42:e8:73:00:af:12:6a:e4:2f:de:5c:2f:a8:cc:cb:86:f1: 26:54:f2:ef:a6:c3:2e:cc:de:7f:eb:41:a8:2e:d6:46:fe:d4: 14:e6:8e:3d:d8:81:f0:af:e4:d9:73:f7:72:c3:1c:fb:04:93: b7:bb:ab:fa:12:66:71:34:3b:45:60:a4:e5:62:7a:42:b9:0f: bb:94:82:c3:a8:3c:c4:00:d9:68:6b:b2:7e:75:72:b6:12:5f: bb:10:41:5a:a8:72:db:65:7e:a4:74:c7:08:05:45:3b:33:ef: 65:f4:85:89:19:69:85:8d:85:94:6b:f5:48:6f:d6:79:df:23: 87:64:88:f3:56:35:da:22:b3:8a:54:77:14:c7:fc:64:9c:83: 72:ce:ac:7f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0NQlrWzXsrFLeyDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NTcwZWEwMGEtNTk0OS00ZWYzLWFhOTUtNmNkMDNmOWE4OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wHv9PVS6dEVl95InTKUQ0ebx7H8/gqn2y6Z GzIx4EAHqgEr/aVsYdutr+ORcnoxzyYOBC/VLl7ZlsvUnxmPmP9dH/uWSfZAfuZB h8kfKnK/DCQ9Ft03ckhjw5SLBjA0YxEKUvRKa4gy4j7TjGWasuGJQXicrkvoMWqk EYubgZv0BfMcejbXxw9Y/v57lNXrtsxrgr0JomNR7iFKW6BJNifcxd+OfjPG0Ss6 5KO720yuEQncyW6iP2qElH+hOVFi6iv1cgWlkbVRo+HG71LoOaggsOn3Qcwcg6wb c7JeU6eKmdr04MrFN3CkEtwPnUrNbhy6B0LuvKd8QXe3LBQilwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOGNtUtmloc8uzBytVnLCxH0bQAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYzQzMmM1YTQtZWQwNC0z NTQ3LTlkODItODM1MzE2NGIyM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz3IYAwQD z3IgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACUnABEcgDQATbALoEkhB1pjpgyldj6zACxnnzaeomlSXYvK ECyawXp97PNSxidBBroRu2vurmMnmF/czagsWWoREFq+fkF54em652MEzWy3gev6 Vx5SJCYsCxqmmYgDpJ39ORyr+gt0bHD+knhC6HMArxJq5C/eXC+ozMuG8SZU8u+m wy7M3n/rQagu1kb+1BTmjj3YgfCv5Nlz93LDHPsEk7e7q/oSZnE0O0VgpOViekK5 D7uUgsOoPMQA2Whrsn51crYSX7sQQVqocttlfqR0xwgFRTsz72X0hYkZaYWNhZRr 9Uhv1nnfI4dkiPNWNdois4pUdxTH/GScg3LOrH8= -----END CERTIFICATE-----Generated at Fri Mar 13 13:16:41 2026 by rpki-client