$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa File: 3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa (raw, json) Hash identifier: zRItG6n23JZhSJ+CZnlm0WhbBhoO+bVgy46GNAz7LJI= Subject key identifier: EC:4C:47:F8:56:21:8C:2B:15:C0:8F:46:D3:7C:B4:7E:F3:B3:2F:E1 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584EA797CF813798F42DC8CEDB00 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 207.202.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:cf:81:37:98:f4:2d:c8:ce:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6e6601c8-34ec-4461-b743-9fc415fa61f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:e4:0f:7f:ca:74:d2:2d:ee:2f:36:cc:16: 0d:ba:93:fe:bd:10:37:b9:b4:91:86:1b:4c:ad:5e: cb:1d:8c:8c:5a:f6:c1:ca:9d:76:df:83:1d:98:55: 4c:27:a8:94:6c:4d:4a:a0:85:77:a6:6d:70:b8:c1: 01:5a:6d:db:56:32:77:35:78:62:31:62:9f:b5:0c: b7:3f:07:00:0d:db:69:71:27:fb:e6:95:d1:88:b3: 13:70:ce:a6:71:17:15:f4:96:e5:e5:98:76:8b:e8: b5:e8:c2:6f:55:ba:72:e8:0a:7f:87:7a:1e:20:7a: a4:0f:e4:2a:c1:98:4c:95:f6:27:28:05:28:49:81: dc:d0:2d:ce:21:27:5e:98:e8:6f:9b:93:4c:e6:d8: 8b:38:c0:f7:89:ed:94:3c:ea:23:8c:db:f3:df:1a: 1c:17:bc:43:1d:3f:67:47:76:f3:af:91:ab:7d:2f: 8f:4b:77:5d:b9:c7:6a:3b:93:08:ea:71:00:13:aa: 39:22:a0:a8:5c:bb:71:f8:1b:8e:24:11:cc:15:01: 25:fd:db:21:83:4e:5f:6d:69:20:75:30:bc:76:20: 2b:45:60:43:8f:5a:94:a3:cb:bd:82:91:24:34:ee: b2:4a:45:31:06:51:c1:80:49:c2:58:da:f6:d6:24: 82:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4C:47:F8:56:21:8C:2B:15:C0:8F:46:D3:7C:B4:7E:F3:B3:2F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e4:65:e3:4c:d7:4a:39:bc:81:42:3c:c5:78:1b:fd:30:76: 80:ef:ae:ff:a4:53:fc:8b:00:c5:c4:64:78:eb:97:d9:ba:1b: dc:51:8d:20:92:4a:1d:48:11:86:ee:ea:b7:24:75:f6:39:e0: 48:3d:df:a6:77:39:fd:e6:15:e5:4c:97:29:f3:68:2f:a3:d2: b5:e4:86:0e:db:f9:08:6a:ce:9a:2d:2d:3a:ec:2c:37:92:f0: 0f:dc:bb:57:13:c5:80:a0:35:21:66:11:fd:d2:3e:2d:6f:c8: d2:a5:44:5f:85:7e:09:2f:d2:ab:4d:01:14:67:24:ef:67:9e: cf:1c:ea:39:6c:5d:e3:f7:07:2c:9c:2a:3f:99:d7:15:0c:9b: 6c:e4:92:0f:83:8d:76:3f:e5:94:d1:17:36:d6:ff:77:d4:b4: ab:73:82:8a:2e:d5:2e:72:48:5f:86:70:72:c1:f4:5c:5a:5d: e7:78:66:2d:3b:a9:46:d1:7b:9c:43:39:f7:fd:30:83:a7:38: c1:43:8c:a4:0b:a0:fb:a5:c5:ae:45:91:b3:82:28:16:39:32: 16:69:61:8d:24:55:9b:1a:d1:41:9d:15:57:d8:23:0e:54:80: 6c:58:92:c6:3d:fb:f0:a8:29:ee:18:10:03:d0:ef:57:66:f2: 77:d0:9c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl8+BN5j0LcjO2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmU2NjAxYzgtMzRlYy00NDYxLWI3NDMtOWZjNDE1ZmE2MWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsirkD3/KdNIt7i82zBYNupP+vRA3ubSRhhtM rV7LHYyMWvbByp1234MdmFVMJ6iUbE1KoIV3pm1wuMEBWm3bVjJ3NXhiMWKftQy3 PwcADdtpcSf75pXRiLMTcM6mcRcV9Jbl5Zh2i+i16MJvVbpy6Ap/h3oeIHqkD+Qq wZhMlfYnKAUoSYHc0C3OISdemOhvm5NM5tiLOMD3ie2UPOojjNvz3xocF7xDHT9n R3bzr5GrfS+PS3dducdqO5MI6nEAE6o5IqCoXLtx+BuOJBHMFQEl/dshg05fbWkg dTC8diArRWBDj1qUo8u9gpEkNO6ySkUxBlHBgEnCWNr21iSCvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxMR/hWIYwrFcCPRtN8tH7zsy/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvM2JjYWZjZGUtZGRkMy0z ZGEyLTkyOTMtZjRlNWNiOThiYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/kZeNM10o5vIFCPMV4G/0wdoDvrv+kU/yLAMXEZHjrl9m6G9xRjSCS Sh1IEYbu6rckdfY54Eg936Z3Of3mFeVMlynzaC+j0rXkhg7b+QhqzpotLTrsLDeS 8A/cu1cTxYCgNSFmEf3SPi1vyNKlRF+Ffgkv0qtNARRnJO9nns8c6jlsXeP3Byyc Kj+Z1xUMm2zkkg+DjXY/5ZTRFzbW/3fUtKtzgoou1S5ySF+GcHLB9FxaXed4Zi07 qUbRe5xDOff9MIOnOMFDjKQLoPulxa5FkbOCKBY5MhZpYY0kVZsa0UGdFVfYIw5U gGxYksY9+/CoKe4YEAPQ71dm8nfQnJ4= -----END CERTIFICATE-----Generated at Sat Sep 5 06:31:15 2026 by rpki-client