$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c4e3a435-c1ed-348b-a0b7-5dd613dce4e8.roa File: c4e3a435-c1ed-348b-a0b7-5dd613dce4e8.roa (raw, json) Hash identifier: nrNXfDZ+RMxxi/UE5ewVgG0B+1j1Ium3KtAf2cqgOEs= Subject key identifier: 05:06:75:74:BE:A8:B8:D5:19:02:C6:42:80:37:1B:C3:9D:BD:7E:87 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584D126541BC036DE56FA8D0BAC0 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c4e3a435-c1ed-348b-a0b7-5dd613dce4e8.roa Signing time: Thu 05 Mar 2026 22:10:09 +0000 ROA not before: Thu 05 Mar 2026 22:10:09 +0000 ROA not after: Wed 03 Jun 2026 21:10:09 +0000 asID: 14618 IP address blocks: 207.202.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:12:65:41:bc:03:6d:e5:6f:a8:d0:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 5 22:10:09 2026 GMT Not After : Jun 3 21:10:09 2026 GMT Subject: CN=a0d4f9e7-6401-47dc-8c09-7d8dea94cedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b9:2e:90:01:b9:60:53:b6:cd:6e:e1:47:dc: 08:30:1a:e8:07:7c:80:c6:32:8d:ff:e3:f4:bd:0e: dd:42:37:a5:bc:46:53:d2:de:71:a4:b2:cb:3c:77: fe:49:1c:1d:c1:72:01:f8:0b:f5:ec:7c:2d:c5:bb: b7:4a:ee:d0:80:b5:74:46:3b:05:18:65:7a:a7:e1: 44:c1:2c:7c:94:74:bb:b0:4b:a6:c9:97:81:c2:89: 5f:c1:1e:e6:0e:3f:b8:97:f1:d1:76:81:1e:d0:e7: a6:16:6a:52:55:69:2b:b0:47:1b:76:15:e8:f7:26: f6:ea:ca:10:6c:b9:96:fd:0a:c4:af:1e:3a:0c:1d: 29:be:55:72:bc:b0:e5:b0:e5:7d:be:af:8a:03:12: f8:31:5c:1f:15:3f:c5:f1:b5:4e:c4:5d:a7:ee:62: 23:82:e7:c5:d2:f5:2c:a8:af:dc:2e:14:e4:86:5a: ee:fd:6d:4f:a9:97:35:e5:eb:c0:c5:26:13:7b:08: f4:b4:09:80:8f:1a:94:08:0c:15:fc:03:12:7f:8a: ba:fc:0f:0a:1c:6e:f8:61:53:4f:64:ed:47:ab:4c: 76:a0:a1:18:70:c8:82:5a:3e:db:88:d4:6f:97:13: 30:97:60:94:3a:b2:13:a6:29:08:7c:3c:ec:09:1b: 75:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:06:75:74:BE:A8:B8:D5:19:02:C6:42:80:37:1B:C3:9D:BD:7E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c4e3a435-c1ed-348b-a0b7-5dd613dce4e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ca:18:4e:18:f7:ba:84:e7:52:d6:0a:4b:bf:8f:33:ba:72: 80:09:26:4a:64:4e:4f:79:86:75:a6:d8:4b:7a:93:a2:81:46: fd:b3:43:43:20:2b:df:23:ea:22:21:e5:b2:bb:c0:fd:42:53: 7c:d4:35:0e:f7:06:6a:73:9c:ba:70:a5:e7:79:00:ac:2d:bf: 38:4c:7a:8b:f0:7a:ca:b4:f5:a6:e0:64:05:3e:82:16:8f:18: 42:ab:82:de:7f:a8:93:ee:d8:1f:2d:6d:9d:e5:08:72:d9:07: e9:b4:27:57:ba:da:2d:46:52:33:90:e3:43:95:e6:eb:35:fc: fa:4f:ab:02:db:5e:97:57:c0:58:b4:97:19:6f:bb:e1:a4:25: 14:9d:c3:9f:77:8b:20:ff:0c:32:44:76:be:90:49:cd:87:36: 89:82:31:05:84:02:23:80:ca:b1:f3:75:43:73:55:10:43:44: 28:b0:e3:1a:cb:cf:d1:21:40:ea:29:a2:b8:27:85:64:5f:ae: f0:88:63:97:fa:64:2d:50:7c:8e:73:94:74:ee:16:78:28:f7: fc:8b:7e:ef:8d:1f:ab:da:5f:0e:36:39:54:1a:b4:b8:d2:2b: c1:ea:bb:ff:69:fa:11:49:b1:fb:9b:f4:8b:2b:b8:51:d7:91: 52:11:f3:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0SZUG8A23lb6jQusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDMwNTIyMTAwOVoXDTI2MDYwMzIxMTAwOVowLzEtMCsGA1UEAxMk YTBkNGY5ZTctNjQwMS00N2RjLThjMDktN2Q4ZGVhOTRjZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7kukAG5YFO2zW7hR9wIMBroB3yAxjKN/+P0 vQ7dQjelvEZT0t5xpLLLPHf+SRwdwXIB+Av17Hwtxbu3Su7QgLV0RjsFGGV6p+FE wSx8lHS7sEumyZeBwolfwR7mDj+4l/HRdoEe0OemFmpSVWkrsEcbdhXo9yb26soQ bLmW/QrErx46DB0pvlVyvLDlsOV9vq+KAxL4MVwfFT/F8bVOxF2n7mIjgufF0vUs qK/cLhTkhlru/W1PqZc15evAxSYTewj0tAmAjxqUCAwV/AMSf4q6/A8KHG74YVNP ZO1Hq0x2oKEYcMiCWj7biNRvlxMwl2CUOrITpikIfDzsCRt1QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUGdXS+qLjVGQLGQoA3G8OdvX6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYzRlM2E0MzUtYzFlZC0z NDhiLWEwYjctNWRkNjEzZGNlNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLKGE4Y97qE51LWCku/jzO6coAJJkpkTk95hnWm2Et6k6KBRv2zQ0Mg K98j6iIh5bK7wP1CU3zUNQ73BmpznLpwped5AKwtvzhMeovwesq09abgZAU+ghaP GEKrgt5/qJPu2B8tbZ3lCHLZB+m0J1e62i1GUjOQ40OV5us1/PpPqwLbXpdXwFi0 lxlvu+GkJRSdw593iyD/DDJEdr6QSc2HNomCMQWEAiOAyrHzdUNzVRBDRCiw4xrL z9EhQOoporgnhWRfrvCIY5f6ZC1QfI5zlHTuFngo9/yLfu+NH6vaXw42OVQatLjS K8Hqu/9p+hFJsfub9IsruFHXkVIR8zI= -----END CERTIFICATE-----Generated at Sun Mar 8 00:40:59 2026 by rpki-client