$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/ef9f336f-f59d-3b94-bc22-669390d4517a.roa File: ef9f336f-f59d-3b94-bc22-669390d4517a.roa (raw, json) Hash identifier: r3J+nicKlXRhYPEHc4CGetsFwgmaG45CRqs2M2RZUiw= Subject key identifier: 03:13:01:8F:F2:F8:75:FE:F4:6C:C6:EA:8F:74:60:A1:69:7F:2C:7E Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584D225BAF32ED31935A984D8100 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/ef9f336f-f59d-3b94-bc22-669390d4517a.roa Signing time: Wed 11 Mar 2026 15:23:47 +0000 ROA not before: Wed 11 Mar 2026 15:23:47 +0000 ROA not after: Tue 09 Jun 2026 15:23:47 +0000 asID: 16509 IP address blocks: 207.202.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:22:5b:af:32:ed:31:93:5a:98:4d:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 11 15:23:47 2026 GMT Not After : Jun 9 15:23:47 2026 GMT Subject: CN=1a3632d0-dafe-4967-be5b-86c2892c5409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:45:30:11:18:27:65:f8:b9:c6:54:ec:09:f5: da:ba:2d:ee:9b:4a:99:82:c0:25:45:74:15:4a:d9: 11:74:bd:04:b8:a3:73:8b:5b:59:55:00:52:3f:5d: 35:c1:1e:71:47:66:ae:5e:15:12:96:9a:a3:bc:77: 0f:f5:8a:6f:53:65:3d:7d:51:d8:9e:c6:9f:dd:4a: e7:7b:13:b1:b9:16:60:79:08:fe:f3:0c:7e:9b:76: bc:20:48:85:16:df:15:ab:40:35:0b:7f:8c:37:b3: 27:b5:1e:f6:4d:d9:0b:fc:f4:16:7a:27:cc:bc:d2: 08:6d:13:b2:b6:65:b3:cd:0e:1d:11:22:13:f8:d7: 1b:9e:9d:db:21:c2:f1:54:fc:e6:54:74:bd:30:03: 6d:54:43:f5:67:43:df:d9:d9:a0:be:44:81:6f:b0: 2b:cd:ab:30:11:1b:8f:89:b3:dc:16:40:0c:f3:f0: aa:69:0a:ac:14:b1:46:9a:b8:14:89:40:31:76:54: 51:4d:96:37:df:26:05:55:29:e2:f4:b6:84:ea:b0: 86:10:e3:4a:96:5d:60:ec:62:7c:2b:51:1d:d3:c6: bb:ff:23:ff:2e:7e:4d:78:9b:57:89:c0:02:f3:70: bf:48:6f:82:f3:d0:8d:a7:68:57:23:5d:25:0e:64: 57:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:13:01:8F:F2:F8:75:FE:F4:6C:C6:EA:8F:74:60:A1:69:7F:2C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/ef9f336f-f59d-3b94-bc22-669390d4517a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f9:f0:5f:ea:57:b8:9b:7d:09:96:80:30:46:b7:e8:ee:ed: d1:44:b9:9c:5b:d9:de:c5:6f:3d:8d:fc:2a:be:67:7f:0d:8d: 50:90:24:74:91:c1:d4:d5:a8:d2:e7:86:d8:4e:ab:b2:c5:b5: 83:eb:b7:89:66:49:8d:fe:b0:37:50:62:9f:0f:ca:2d:99:f9: 7a:27:de:ba:ab:5a:84:9c:0b:1e:df:ad:ee:20:8d:7b:8a:3d: 8e:01:0a:7f:a9:93:03:de:5a:12:87:bb:4d:61:42:d7:8b:d2: 67:7e:f7:47:18:cf:d6:83:53:f1:f8:18:86:25:27:6e:6e:2a: 6c:4e:46:fa:bc:e6:d3:b2:a1:6f:b3:d2:04:e1:eb:69:c5:df: fc:c6:90:71:aa:f0:a0:af:f4:1f:ee:42:29:ab:e3:65:b9:75: 54:60:c8:77:67:6b:d1:48:3a:60:54:09:9c:0c:ed:cc:db:3d: 17:23:11:e4:05:60:a5:1c:bc:4a:ba:1c:d1:f9:da:b9:e5:9a: dd:57:e4:67:89:b3:58:8d:36:62:bc:43:be:ee:1d:54:94:55: c3:01:15:b3:e2:c8:80:9b:c2:36:36:29:3f:db:a4:05:b7:7e: fb:5d:35:ae:42:08:4c:e0:60:f7:df:98:64:ec:24:41:f7:35: 4b:bd:77:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0iW68y7TGTWphNgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDMxMTE1MjM0N1oXDTI2MDYwOTE1MjM0N1owLzEtMCsGA1UEAxMk MWEzNjMyZDAtZGFmZS00OTY3LWJlNWItODZjMjg5MmM1NDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEUwERgnZfi5xlTsCfXaui3um0qZgsAlRXQV StkRdL0EuKNzi1tZVQBSP101wR5xR2auXhUSlpqjvHcP9YpvU2U9fVHYnsaf3Urn exOxuRZgeQj+8wx+m3a8IEiFFt8Vq0A1C3+MN7MntR72TdkL/PQWeifMvNIIbROy tmWzzQ4dESIT+Ncbnp3bIcLxVPzmVHS9MANtVEP1Z0Pf2dmgvkSBb7ArzaswERuP ibPcFkAM8/CqaQqsFLFGmrgUiUAxdlRRTZY33yYFVSni9LaE6rCGEONKll1g7GJ8 K1Ed08a7/yP/Ln5NeJtXicAC83C/SG+C89CNp2hXI10lDmRXkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMTAY/y+HX+9GzG6o90YKFpfyx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZWY5ZjMzNmYtZjU5ZC0z Yjk0LWJjMjItNjY5MzkwZDQ1MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8odMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF758F/qV7ibfQmWgDBGt+ju7dFEuZxb2d7Fbz2N/Cq+Z38NjVCQJHSR wdTVqNLnhthOq7LFtYPrt4lmSY3+sDdQYp8Pyi2Z+Xon3rqrWoScCx7fre4gjXuK PY4BCn+pkwPeWhKHu01hQteL0md+90cYz9aDU/H4GIYlJ25uKmxORvq85tOyoW+z 0gTh62nF3/zGkHGq8KCv9B/uQimr42W5dVRgyHdna9FIOmBUCZwM7czbPRcjEeQF YKUcvEq6HNH52rnlmt1X5GeJs1iNNmK8Q77uHVSUVcMBFbPiyICbwjY2KT/bpAW3 fvtdNa5CCEzgYPffmGTsJEH3NUu9d+I= -----END CERTIFICATE-----Generated at Thu Mar 19 12:31:08 2026 by rpki-client