$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa File: 8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa (raw, json) Hash identifier: sxcMn5IiyaauEAJJkOwGZU8mzjBGBMJEQ2910kmxMJ4= Subject key identifier: A8:3B:E9:50:97:5F:4F:55:1A:FC:07:40:1E:DB:9A:B3:45:72:32:AE Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584E4129DE068760BF83AB4EFB80 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 14618 IP address blocks: 207.202.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:de:06:87:60:bf:83:ab:4e:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=baf59c06-aed9-4376-bcff-483f7a698e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:80:4e:5a:1c:a9:1c:70:d7:68:39:87:a0: 75:82:89:5e:3c:bf:13:89:72:09:9e:2c:1c:4c:37: cd:b6:87:05:11:97:be:c4:9a:81:31:43:98:de:62: 36:d3:82:0c:4a:a4:40:cf:61:32:67:66:8a:2d:e5: be:d1:c6:e8:32:2e:e3:93:e9:72:c1:02:b8:79:07: 46:cc:f7:1a:e9:df:e4:b8:05:79:27:03:0f:21:cb: 5d:0c:f1:7b:a7:a9:62:88:ea:5d:2d:f3:71:bf:c7: 45:19:d3:44:d8:ba:f6:01:57:e5:92:46:b2:12:da: 7b:8c:bf:e3:4c:e8:21:d3:74:5b:b6:7f:b9:54:d6: f9:05:33:a4:be:7c:51:af:3c:3e:83:d1:29:e4:2c: ee:ee:e9:fa:cb:a4:e0:36:da:e4:50:26:3d:82:38: 2c:39:fe:8e:88:1c:8c:c0:2b:07:1b:05:6c:fa:0c: 43:71:56:43:90:ef:8a:fb:54:43:8f:3b:c7:44:34: a6:44:5c:8f:0e:24:e2:da:06:69:df:75:32:d0:f4: 0d:c4:54:e5:87:16:39:2e:75:77:24:b2:bb:9f:cb: ac:0b:c9:2b:63:f1:3a:0a:97:31:b6:1b:36:35:7d: 32:97:47:95:08:61:f9:97:70:b2:40:47:82:ea:55: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3B:E9:50:97:5F:4F:55:1A:FC:07:40:1E:DB:9A:B3:45:72:32:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a9:89:ff:52:fd:66:cd:65:3b:2a:be:af:e9:8d:41:1e:4f: 07:e3:c8:73:9a:36:92:d1:8d:2a:36:3a:8e:08:10:78:cc:a0: 66:b7:96:37:cb:87:66:36:05:a2:36:69:25:7e:e3:8d:36:4e: 26:1e:fd:c0:d7:05:eb:11:3f:3a:48:2a:3d:fb:1c:df:17:17: 0c:36:ab:d1:a6:61:2f:3a:0e:18:1c:80:e7:00:76:22:73:94: 1d:57:e6:73:82:9e:54:70:58:73:86:7d:74:df:6b:85:fd:2d: 66:d0:77:f0:5f:59:72:2f:01:8b:86:ba:e9:c3:04:5e:d0:b7: 2c:4c:66:b7:ab:1a:28:6e:5c:b0:40:c0:93:9d:f4:04:68:df: 7b:51:bd:41:d1:3c:81:65:51:0e:2f:01:25:82:e0:f5:2c:a1: 1b:b5:66:d0:83:1d:a7:06:56:ad:e6:3c:ef:54:29:59:04:51: ca:80:8a:c6:2e:c5:f0:66:5c:91:58:a0:5d:9d:94:b9:1d:fa: 19:51:06:67:03:91:c2:b0:63:91:ca:c0:4d:fc:63:40:73:53: c8:79:70:a8:da:3f:35:f3:c3:df:60:93:59:8f:73:66:51:32: 2a:5a:3c:07:c9:f7:74:bd:12:ad:21:bb:0f:00:0a:1d:33:5b: 24:38:18:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKd4Gh2C/g6tO+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk YmFmNTljMDYtYWVkOS00Mzc2LWJjZmYtNDgzZjdhNjk4ZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD+ATlocqRxw12g5h6B1golePL8TiXIJniwc TDfNtocFEZe+xJqBMUOY3mI204IMSqRAz2EyZ2aKLeW+0cboMi7jk+lywQK4eQdG zPca6d/kuAV5JwMPIctdDPF7p6liiOpdLfNxv8dFGdNE2Lr2AVflkkayEtp7jL/j TOgh03Rbtn+5VNb5BTOkvnxRrzw+g9Ep5Czu7un6y6TgNtrkUCY9gjgsOf6OiByM wCsHGwVs+gxDcVZDkO+K+1RDjzvHRDSmRFyPDiTi2gZp33Uy0PQNxFTlhxY5LnV3 JLK7n8usC8krY/E6Cpcxths2NX0yl0eVCGH5l3CyQEeC6lVilQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg76VCXX09VGvwHQB7bmrNFcjKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvOGMyMjM0ZWMtYjNkNC0z OGViLWIwZjItYzI3NTVlNzc0MTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADupif9S/WbNZTsqvq/pjUEeTwfjyHOaNpLRjSo2Oo4IEHjMoGa3ljfL h2Y2BaI2aSV+4402TiYe/cDXBesRPzpIKj37HN8XFww2q9GmYS86DhgcgOcAdiJz lB1X5nOCnlRwWHOGfXTfa4X9LWbQd/BfWXIvAYuGuunDBF7QtyxMZrerGihuXLBA wJOd9ARo33tRvUHRPIFlUQ4vASWC4PUsoRu1ZtCDHacGVq3mPO9UKVkEUcqAisYu xfBmXJFYoF2dlLkd+hlRBmcDkcKwY5HKwE38Y0BzU8h5cKjaPzXzw99gk1mPc2ZR MipaPAfJ93S9Eq0huw8ACh0zWyQ4GJ8= -----END CERTIFICATE-----Generated at Tue Jul 21 22:44:13 2026 by rpki-client