$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/7af1e2d5-ec85-3162-b3f4-4673ee2dd434.roa File: 7af1e2d5-ec85-3162-b3f4-4673ee2dd434.roa (raw, json) Hash identifier: hAogov5SsGDRIfwqaX1P42WJwKWsFwKVTOCi187sq1k= Subject key identifier: 3D:2C:3D:67:56:68:51:B5:DE:A7:59:52:93:3B:93:89:9F:C6:7C:B3 Certificate issuer: /CN=6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b Certificate serial: 010D0C9F4328584F4C3DE0F8A6092323697D0B40 Authority key identifier: 7D:56:C4:5C:48:3C:C8:54:D0:77:55:A7:1A:AA:53:50:F7:D1:38:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/7af1e2d5-ec85-3162-b3f4-4673ee2dd434.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 400515 IP address blocks: 207.174.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e0:f8:a6:09:23:23:69:7d:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f93cb25b-e47e-49b2-bace-be0bef252f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:a3:2d:33:95:0f:ab:0c:07:70:62:29:01: 3a:0f:b6:4f:bf:1e:7c:11:1c:89:74:00:c8:24:7f: c2:8c:35:a0:ed:96:e8:73:ee:d1:07:21:fa:b9:df: 8f:19:82:0d:c5:f6:91:f1:a1:e4:ee:71:39:22:d7: ac:2a:2b:46:a9:55:c5:b8:e0:94:5c:00:39:ae:b3: 94:aa:3b:1e:a6:bb:dd:e5:ea:ef:eb:f0:ea:cc:3d: f8:11:46:ec:72:9f:25:fd:95:55:f7:4b:14:b8:e3: 29:23:06:ca:25:c5:aa:60:ef:1b:09:67:bb:19:10: 91:54:ad:d4:80:f8:71:22:a7:16:8e:39:d8:83:f9: 86:5f:ee:e7:cc:6a:4d:9f:88:b4:91:bd:91:5b:4a: 5f:56:99:4e:cd:b6:39:14:fe:f8:af:a7:98:27:f2: 0c:13:d8:82:9b:1f:35:ea:a9:b9:c3:32:82:cc:50: 4e:f7:6f:cc:fe:11:31:b2:f4:b1:ac:d3:a0:9b:74: 93:75:bc:f9:a3:f0:79:96:35:f3:99:92:1d:37:3c: 1c:1e:b9:87:9d:65:05:75:7a:44:45:72:dc:55:04: 84:15:8f:51:43:42:e9:33:11:9f:58:6e:71:f4:32: dd:5a:41:57:56:4c:ca:38:fe:c9:d6:91:bc:b8:e7: e9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2C:3D:67:56:68:51:B5:DE:A7:59:52:93:3B:93:89:9F:C6:7C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/7af1e2d5-ec85-3162-b3f4-4673ee2dd434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.crl X509v3 Authority Key Identifier: keyid:7D:56:C4:5C:48:3C:C8:54:D0:77:55:A7:1A:AA:53:50:F7:D1:38:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer sbgp-ipAddrBlock: critical IPv4: 207.174.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:04:54:86:93:9f:00:55:af:fc:5b:32:fc:53:d8:0e:4c:c4: 8d:ef:b7:42:0f:60:17:52:09:b8:6b:b6:7e:76:fc:4f:02:6a: ba:4a:63:c9:17:28:13:83:c3:76:ff:a3:da:21:5f:ac:10:57: 44:b2:a3:a7:f6:7f:f1:ab:dc:4e:1e:9f:3e:75:95:b0:c3:c3: af:5c:17:96:22:12:55:82:c8:4e:18:99:f6:26:98:76:da:d1: 19:79:20:60:a5:e0:f6:1d:68:24:9c:41:36:8e:23:c8:99:8e: 29:5a:a1:0d:18:54:09:ba:b5:f6:98:23:73:1c:ed:55:e0:dd: de:f8:9a:83:29:5c:ae:e3:bb:6c:26:2b:22:07:f7:84:50:d8: 35:20:54:17:5b:76:37:f3:b4:d8:40:c7:5b:8a:20:40:2a:6a: d1:1e:47:ab:f0:2d:05:20:e6:a8:6f:7f:1b:1f:d7:6a:86:0d: 55:9a:0a:7f:6f:4b:3e:bc:79:64:2f:d8:fe:41:ed:0f:b3:81: 09:a3:f2:6e:a6:d4:ba:8f:04:5d:4f:f2:18:ad:19:e5:b1:6e: 2c:5e:b4:3f:d3:65:bd:44:4e:08:7b:e1:0b:c6:b6:61:e0:47: 0e:57:94:16:af:c5:67:a9:eb:fb:1a:93:40:3f:78:e6:e5:26: ca:9e:cd:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeD4pgkjI2l9C0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVjZjkwZWMtN2NiNS00NzY1LWJjYzMtYTQzOWIwY2Ji NzJiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjkzY2IyNWItZTQ3ZS00OWIyLWJhY2UtYmUwYmVmMjUyZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA+jLTOVD6sMB3BiKQE6D7ZPvx58ERyJdADI JH/CjDWg7Zboc+7RByH6ud+PGYINxfaR8aHk7nE5ItesKitGqVXFuOCUXAA5rrOU qjseprvd5erv6/DqzD34EUbscp8l/ZVV90sUuOMpIwbKJcWqYO8bCWe7GRCRVK3U gPhxIqcWjjnYg/mGX+7nzGpNn4i0kb2RW0pfVplOzbY5FP74r6eYJ/IME9iCmx81 6qm5wzKCzFBO92/M/hExsvSxrNOgm3STdbz5o/B5ljXzmZIdNzwcHrmHnWUFdXpE RXLcVQSEFY9RQ0LpMxGfWG5x9DLdWkFXVkzKOP7J1pG8uOfpZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0sPWdWaFG13qdZUpM7k4mfxnyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZWNm OTBlYy03Y2I1LTQ3NjUtYmNjMy1hNDM5YjBjYmI3MmIvN2FmMWUyZDUtZWM4NS0z MTYyLWIzZjQtNDY3M2VlMmRkNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmVjZjkwZWMtN2NiNS00NzY1LWJj YzMtYTQzOWIwY2JiNzJiLzZlY2Y5MGVjLTdjYjUtNDc2NS1iY2MzLWE0MzliMGNi YjcyYi5jcmwwHwYDVR0jBBgwFoAUfVbEXEg8yFTQd1WnGqpTUPfROLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ZWNmOTBlYy03Y2I1LTQ3NjUtYmNjMy1hNDM5 YjBjYmI3MmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsEVIaTnwBVr/xbMvxT2A5MxI3vt0IPYBdSCbhrtn52/E8CarpKY8kX KBODw3b/o9ohX6wQV0Syo6f2f/Gr3E4enz51lbDDw69cF5YiElWCyE4YmfYmmHba 0Rl5IGCl4PYdaCScQTaOI8iZjilaoQ0YVAm6tfaYI3Mc7VXg3d74moMpXK7ju2wm KyIH94RQ2DUgVBdbdjfztNhAx1uKIEAqatEeR6vwLQUg5qhvfxsf12qGDVWaCn9v Sz68eWQv2P5B7Q+zgQmj8m6m1LqPBF1P8hitGeWxbixetD/TZb1ETgh74QvGtmHg Rw5XlBavxWep6/sak0A/eOblJsqezY0= -----END CERTIFICATE-----Generated at Sat Oct 3 19:46:44 2026 by rpki-client