$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa File: bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa (raw, json) Hash identifier: J48PkTtaRHKGBfqlWFQq4Mvizfyza1Gd8rzPMVPO7YE= Subject key identifier: BD:3D:6C:2D:1B:C2:86:0E:C2:A6:1C:29:01:18:34:17:BD:77:21:85 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584E86F4FF002DC8B200283C3100 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 16509 IP address blocks: 207.202.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:ff:00:2d:c8:b2:00:28:3c:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=5943ae5e-d620-4dc0-be64-1fa9ab60f864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:85:61:23:4e:2a:cd:26:a8:19:ca:92:d8: f6:3d:8d:17:67:20:02:e8:17:1d:48:79:1c:17:f0: 31:12:81:91:5d:dc:8e:39:e2:6d:e6:67:a3:36:5b: 0d:e8:b6:d8:07:f0:6a:dd:e5:fa:44:f9:02:79:82: 45:34:bc:63:29:12:07:2f:d6:8a:de:16:60:49:29: e9:61:dc:e2:c2:30:c2:05:c7:40:bc:58:34:da:34: 8a:22:9a:c4:c2:fa:ff:e8:34:06:54:bf:c4:6e:c8: 92:e9:1c:14:8a:9e:7b:f5:75:3e:5c:f1:af:5f:c7: bb:38:6e:ca:6e:a5:b0:32:c3:30:06:eb:c6:b0:ac: 33:ab:48:06:6c:dc:f3:54:7c:e2:db:b1:cd:6a:cb: c8:b8:b2:47:c5:ea:7d:6a:f3:05:f1:21:bb:d5:70: 79:2f:ad:6a:02:e0:4a:76:43:c7:e6:8d:77:48:be: d1:8a:2f:a0:8d:6c:8b:58:0f:07:8a:7b:18:b9:d1: cb:1c:dc:47:47:59:e5:d4:3e:14:98:63:c9:15:68: b8:7c:8c:fd:a5:21:7d:7e:b4:17:9a:fe:88:f9:8d: da:10:ab:2d:ad:67:21:cc:58:b5:d2:09:f6:e9:fd: 3b:f3:4c:64:74:f9:c5:17:f1:a9:0d:27:f2:9d:27: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3D:6C:2D:1B:C2:86:0E:C2:A6:1C:29:01:18:34:17:BD:77:21:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:41:d0:9e:86:a1:9c:d4:c2:5a:9e:4b:d0:a3:ec:98:dc:d3: 89:2a:23:09:e1:b1:1b:57:4a:64:3f:76:55:80:3b:00:82:ac: ee:18:6b:cd:f9:39:18:5d:4b:b1:71:d0:0b:5a:55:ad:35:42: 3c:fc:ed:78:b9:f8:db:ec:1f:55:90:56:48:2b:63:62:98:bc: 20:be:74:ae:de:23:8c:af:f0:65:32:cf:45:2b:c8:91:34:04: 88:fa:9c:8b:a9:c1:3f:c9:a5:4a:b7:c1:62:06:53:c4:87:be: 0b:09:c4:f1:f5:e5:0e:89:c4:63:1a:7b:92:5d:5e:6a:8d:48: 62:d6:02:e8:95:42:fe:83:d3:94:f3:ab:c2:e1:84:b7:04:16: ff:22:f0:7f:e0:b2:28:3b:81:90:c3:9b:a6:d4:f4:84:52:63: 8b:a6:41:c4:d8:a8:e7:28:15:94:54:44:a7:82:dd:a4:83:87: 5c:d4:2b:1a:e3:d2:cd:f1:33:e9:95:8f:2f:1c:11:da:79:13: 63:46:2c:64:7f:01:8f:f1:99:55:11:57:ff:17:d8:1b:8a:8d: 83:11:fe:2b:77:95:d8:8a:3b:6f:61:7e:d1:86:8a:5b:6b:5e: bc:2a:b8:2f:b0:16:41:1f:0e:fe:63:fd:da:9f:df:87:8c:be: a8:7a:0b:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9P8ALciyACg8MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NTk0M2FlNWUtZDYyMC00ZGMwLWJlNjQtMWZhOWFiNjBmODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufiFYSNOKs0mqBnKktj2PY0XZyAC6BcdSHkc F/AxEoGRXdyOOeJt5mejNlsN6LbYB/Bq3eX6RPkCeYJFNLxjKRIHL9aK3hZgSSnp YdziwjDCBcdAvFg02jSKIprEwvr/6DQGVL/EbsiS6RwUip579XU+XPGvX8e7OG7K bqWwMsMwBuvGsKwzq0gGbNzzVHzi27HNasvIuLJHxep9avMF8SG71XB5L61qAuBK dkPH5o13SL7Rii+gjWyLWA8HinsYudHLHNxHR1nl1D4UmGPJFWi4fIz9pSF9frQX mv6I+Y3aEKstrWchzFi10gn26f0780xkdPnFF/GpDSfynSeGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL09bC0bwoYOwqYcKQEYNBe9dyGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYmRiZWMzZmYtYmFjNi0z MTNjLTg1ODAtYmE3MWY2MWRmYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtB0J6GoZzUwlqeS9Cj7Jjc04kqIwnhsRtXSmQ/dlWAOwCCrO4Ya835 ORhdS7Fx0AtaVa01Qjz87Xi5+NvsH1WQVkgrY2KYvCC+dK7eI4yv8GUyz0UryJE0 BIj6nIupwT/JpUq3wWIGU8SHvgsJxPH15Q6JxGMae5JdXmqNSGLWAuiVQv6D05Tz q8LhhLcEFv8i8H/gsig7gZDDm6bU9IRSY4umQcTYqOcoFZRURKeC3aSDh1zUKxrj 0s3xM+mVjy8cEdp5E2NGLGR/AY/xmVURV/8X2BuKjYMR/it3ldiKO29hftGGiltr XrwquC+wFkEfDv5j/dqf34eMvqh6Czs= -----END CERTIFICATE-----Generated at Tue Jul 21 23:47:15 2026 by rpki-client