$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c4e3a435-c1ed-348b-a0b7-5dd613dce4e8.roa File: c4e3a435-c1ed-348b-a0b7-5dd613dce4e8.roa (raw, json) Hash identifier: 3ltf3Ky8BjXLeDfqMuLqn/hnDMKp7tZa60Ey3MGwjKY= Subject key identifier: 89:D2:52:98:FC:EB:5F:2F:F6:BE:F7:11:FC:1F:58:59:38:EC:BC:F3 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584DF210BAC5284047ED48795700 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c4e3a435-c1ed-348b-a0b7-5dd613dce4e8.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 14618 IP address blocks: 207.202.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:ba:c5:28:40:47:ed:48:79:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=28cdafbc-d549-45f5-8d98-a29d319a9714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:5f:fe:4a:49:3d:39:01:3e:4b:87:ef:da: 45:98:0a:d0:80:9d:1f:6a:6f:d1:1d:f1:72:58:96: b5:eb:15:33:76:4f:e3:02:c3:42:13:b4:05:71:2e: bc:d4:db:a7:69:88:1a:f7:0d:32:c9:2b:7a:f0:64: 76:a8:27:f9:04:1a:95:4b:da:c1:b4:24:c4:a1:b2: 78:1a:31:8a:10:62:ad:26:55:2b:04:17:85:cb:68: c4:59:6c:12:df:0e:c2:ea:59:62:67:9c:33:dc:19: 4f:6b:5d:28:31:ee:a0:34:8b:2b:dc:07:04:16:8d: b1:e6:4b:96:96:28:5c:a0:6b:c8:2e:33:ed:6d:86: 3b:cd:ad:77:f9:ad:b0:9e:cb:15:10:ee:a4:bc:27: 25:43:1e:86:06:23:56:95:17:a7:9b:40:bc:a3:b4: 60:95:d9:5f:4e:1e:d8:43:18:30:1a:95:ba:1c:6e: 57:1d:14:e7:38:fd:36:d9:6a:2f:83:24:fd:93:4d: 0d:61:01:05:1c:82:40:fa:5f:42:80:60:15:35:03: 4c:f5:02:d1:bc:ff:ed:7a:b0:31:e3:01:de:1d:9d: cb:0d:89:ec:a5:e2:ca:a6:66:d4:f6:9b:87:b3:9c: 71:25:0a:53:ec:6c:96:92:66:b3:b1:d9:a2:5c:56: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D2:52:98:FC:EB:5F:2F:F6:BE:F7:11:FC:1F:58:59:38:EC:BC:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c4e3a435-c1ed-348b-a0b7-5dd613dce4e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d2:e1:8a:ef:cd:6c:39:a6:75:f9:c6:8a:74:bc:34:27:6c: c5:21:40:92:c6:4e:83:e5:3c:1e:f4:08:de:05:0f:4e:a3:45: fc:c8:8c:05:53:7c:2e:77:1d:c2:dc:2d:ea:30:91:b2:c9:b5: d3:9c:66:6f:21:6e:6f:17:26:17:c6:49:0e:55:32:f9:6c:8b: 9f:47:71:00:54:f8:3b:89:03:3c:ce:69:6e:5c:38:da:82:df: 64:b1:bf:e4:ac:6e:6a:e6:4c:d5:7a:5c:5b:9a:8a:79:a6:e5: 4e:d2:c2:02:6c:68:aa:cc:ff:f3:af:9e:83:81:8d:b4:8a:69: 6a:8d:94:e2:8b:86:70:a8:5a:a4:07:75:26:81:2d:46:97:90: 79:0e:73:af:58:56:73:a5:14:34:78:48:d5:bd:2d:65:45:bb: 5f:f9:52:44:81:a7:c5:2d:1e:ce:33:2a:7a:38:90:28:48:2a: 46:1e:1b:71:61:30:06:2b:ab:75:a5:c7:77:97:6e:6a:e6:eb: 33:55:45:99:4a:a8:fe:7d:a9:c1:d6:09:b5:f2:c0:21:a3:5b: e8:0a:6b:87:05:48:12:1a:e2:3c:3d:04:48:10:28:c8:0a:45: e9:f9:b1:55:b4:17:5b:c1:ee:59:28:b6:c7:7d:f1:69:4c:32: 6f:65:0a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yELrFKEBH7Uh5VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk MjhjZGFmYmMtZDU0OS00NWY1LThkOTgtYTI5ZDMxOWE5NzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aZf/kpJPTkBPkuH79pFmArQgJ0fam/RHfFy WJa16xUzdk/jAsNCE7QFcS681NunaYga9w0yySt68GR2qCf5BBqVS9rBtCTEobJ4 GjGKEGKtJlUrBBeFy2jEWWwS3w7C6lliZ5wz3BlPa10oMe6gNIsr3AcEFo2x5kuW lihcoGvILjPtbYY7za13+a2wnssVEO6kvCclQx6GBiNWlRenm0C8o7RgldlfTh7Y QxgwGpW6HG5XHRTnOP022WovgyT9k00NYQEFHIJA+l9CgGAVNQNM9QLRvP/terAx 4wHeHZ3LDYnspeLKpmbU9puHs5xxJQpT7GyWkmazsdmiXFaeyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInSUpj8618v9r73EfwfWFk47LzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYzRlM2E0MzUtYzFlZC0z NDhiLWEwYjctNWRkNjEzZGNlNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTS4YrvzWw5pnX5xop0vDQnbMUhQJLGToPlPB70CN4FD06jRfzIjAVT fC53HcLcLeowkbLJtdOcZm8hbm8XJhfGSQ5VMvlsi59HcQBU+DuJAzzOaW5cONqC 32Sxv+SsbmrmTNV6XFuainmm5U7SwgJsaKrM//OvnoOBjbSKaWqNlOKLhnCoWqQH dSaBLUaXkHkOc69YVnOlFDR4SNW9LWVFu1/5UkSBp8UtHs4zKno4kChIKkYeG3Fh MAYrq3Wlx3eXbmrm6zNVRZlKqP59qcHWCbXywCGjW+gKa4cFSBIa4jw9BEgQKMgK Ren5sVW0F1vB7lkotsd98WlMMm9lCmE= -----END CERTIFICATE-----Generated at Sat Jun 6 17:08:31 2026 by rpki-client