$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5748654d-bbf8-3d85-a88e-2dea81de3f77.roa File: 5748654d-bbf8-3d85-a88e-2dea81de3f77.roa (raw, json) Hash identifier: 2ivAqJsztEQTHHZHIIk9m0QfNgbdsZW1r4By6vEfWYQ= Subject key identifier: 22:86:95:BF:F2:6F:95:9C:1A:99:4B:CC:61:E8:CD:9B:68:B2:BD:E9 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584E885A4A102C2A08A17BC6C080 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5748654d-bbf8-3d85-a88e-2dea81de3f77.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 14618 IP address blocks: 207.202.16.0/24 maxlen: 24 207.202.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4a:10:2c:2a:08:a1:7b:c6:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=328f0ef3-4cda-4806-b4c6-17e1d86145dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a2:83:66:ae:4c:92:59:cc:63:16:df:c9:99: 84:bb:57:30:a9:9b:09:17:65:96:3e:6f:48:a6:8e: 1d:88:26:e6:3d:67:13:97:c8:0c:b9:c3:63:6c:09: ac:b4:f9:84:84:60:49:c9:49:a1:94:67:80:5c:1e: 1a:eb:e1:5f:f2:a6:1d:fa:01:4a:1a:d8:18:b4:51: 68:7f:1c:28:b5:69:09:b4:53:b0:80:3e:8d:a2:00: 24:6d:25:b7:99:0a:75:21:71:23:61:93:cb:18:3e: 6b:0e:7f:a3:55:aa:39:95:4d:10:cf:2b:cf:b7:ea: 51:cd:1e:63:39:d1:f8:f7:55:1e:bd:8b:0b:5c:bb: 12:e7:55:56:26:b1:fe:da:ba:f9:94:98:c9:94:e4: 95:94:36:97:fb:7f:99:63:5d:c2:e7:91:45:0a:63: bc:29:69:af:91:34:bb:31:1e:53:99:aa:28:16:58: aa:35:5a:17:0d:89:eb:e6:4e:96:84:bf:38:86:24: 23:74:47:43:0d:e9:50:aa:39:75:2a:57:c2:6b:20: a1:43:aa:f7:ca:38:80:81:8a:65:97:1a:9b:c1:34: 70:30:e3:63:06:5e:4e:ec:f9:3e:10:85:70:06:e6: 05:60:d7:51:f8:7c:fa:01:3e:94:21:51:54:01:05: 0a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:86:95:BF:F2:6F:95:9C:1A:99:4B:CC:61:E8:CD:9B:68:B2:BD:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5748654d-bbf8-3d85-a88e-2dea81de3f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b5:09:a0:ae:ec:7e:7d:3f:74:e4:c9:84:e8:bf:a7:c0:50: fc:5a:68:56:70:46:aa:56:fb:de:63:99:00:53:d2:a3:39:70: ad:ab:a5:68:eb:00:b3:0f:f3:72:07:a8:14:67:69:7a:88:fb: da:53:0d:de:7d:de:25:5f:85:2c:ef:83:13:d5:2f:71:c3:46: a1:2d:f6:ba:f0:23:19:cc:23:d1:91:8b:39:b7:e3:cd:b1:e8: 11:57:73:1d:a5:80:5a:c9:0f:b3:59:8b:44:56:31:54:cf:fb: 79:4b:3c:90:a7:87:78:2e:0b:ab:08:4e:68:5f:d3:fb:ef:d0: 89:8d:6f:c7:a3:54:3d:1c:84:0b:a8:1c:4c:97:b9:f0:d1:4e: 63:25:8f:97:87:0b:30:27:14:c7:3d:45:ac:71:83:e7:ab:43: ca:01:05:fe:7c:ee:ec:3f:4b:a4:ad:07:5b:c1:40:c2:96:fd: 5c:de:08:b9:16:70:d0:b4:52:5d:9e:3e:63:61:8b:7b:4e:2a: 5d:03:ed:ac:21:ce:df:c7:cd:cf:74:56:79:48:d5:ac:bb:a2: a3:33:48:d3:00:70:ca:09:d0:a4:e8:75:da:e6:d2:78:36:34: 02:a4:a6:59:c9:68:32:04:21:1d:c1:a2:25:88:1d:02:4c:8a: 9f:97:c0:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWkoQLCoIoXvGwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk MzI4ZjBlZjMtNGNkYS00ODA2LWI0YzYtMTdlMWQ4NjE0NWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6KDZq5MklnMYxbfyZmEu1cwqZsJF2WWPm9I po4diCbmPWcTl8gMucNjbAmstPmEhGBJyUmhlGeAXB4a6+Ff8qYd+gFKGtgYtFFo fxwotWkJtFOwgD6NogAkbSW3mQp1IXEjYZPLGD5rDn+jVao5lU0QzyvPt+pRzR5j OdH491UevYsLXLsS51VWJrH+2rr5lJjJlOSVlDaX+3+ZY13C55FFCmO8KWmvkTS7 MR5TmaooFliqNVoXDYnr5k6WhL84hiQjdEdDDelQqjl1KlfCayChQ6r3yjiAgYpl lxqbwTRwMONjBl5O7Pk+EIVwBuYFYNdR+Hz6AT6UIVFUAQUKQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKGlb/yb5WcGplLzGHozZtosr3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNTc0ODY1NGQtYmJmOC0z ZDg1LWE4OGUtMmRlYTgxZGUzZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC1CaCu7H59P3TkyYTov6fAUPxaaFZwRqpW+95jmQBT0qM5cK2rpWjr ALMP83IHqBRnaXqI+9pTDd593iVfhSzvgxPVL3HDRqEt9rrwIxnMI9GRizm3482x 6BFXcx2lgFrJD7NZi0RWMVTP+3lLPJCnh3guC6sITmhf0/vv0ImNb8ejVD0chAuo HEyXufDRTmMlj5eHCzAnFMc9Raxxg+erQ8oBBf587uw/S6StB1vBQMKW/VzeCLkW cNC0Ul2ePmNhi3tOKl0D7awhzt/Hzc90VnlI1ay7oqMzSNMAcMoJ0KToddrm0ng2 NAKkplnJaDIEIR3BoiWIHQJMip+XwEE= -----END CERTIFICATE-----Generated at Tue Jul 21 23:47:17 2026 by rpki-client