$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa File: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (raw, json) Hash identifier: FdgcLu5c6DKRkOgzbYxHM4aNkQITSncejoa1UlvpVXk= Subject key identifier: 5F:D9:87:5E:28:B1:3D:3D:0F:69:76:E7:13:D6:56:28:71:3E:1C:6A Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584D19B4AE5651CB64720DE82500 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 400564 IP address blocks: 207.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:ae:56:51:cb:64:72:0d:e8:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=948a80ff-af58-4e6d-ae81-7924bd8e8f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:d6:6b:f8:1a:00:be:0b:44:4b:35:36:c4: 43:9c:c6:c8:a4:fc:fd:a9:30:75:ac:d0:cc:44:87: 94:41:6f:0b:91:0a:ab:00:67:82:59:0a:c7:31:39: 5f:5b:68:cf:5f:d6:8d:ea:a2:82:88:b5:a5:32:d0: 4d:65:d2:96:61:4c:95:81:b8:66:f4:43:a5:5e:c8: 94:59:49:4d:f8:87:dd:c4:14:c0:35:1b:c4:e0:18: 13:a8:af:0f:d2:ba:0c:b3:cf:d7:1e:66:31:23:c2: b9:f3:cb:3c:1a:36:b1:ff:33:c7:ce:f3:8d:5a:95: 98:b6:e0:c7:69:14:c2:16:80:ec:4a:12:ae:4e:17: 4d:61:ba:59:9c:57:0a:91:c5:ab:0b:20:ae:71:af: 8c:a1:bb:4b:74:b5:48:77:38:75:b9:e8:16:b0:94: ce:80:8b:15:f5:9c:ca:32:4c:22:fe:74:fa:7c:2f: 2a:e3:e4:f6:19:22:61:44:95:7c:a0:32:11:16:d3: 97:aa:60:59:20:5c:04:ca:d8:71:b6:35:42:d3:a0: 40:f7:5e:99:65:45:98:76:81:d6:64:79:5d:2a:54: 11:dc:b7:5a:46:6a:de:4f:b4:aa:a2:ad:5b:87:5f: 56:7d:39:84:b5:dd:4f:12:02:38:08:1e:ff:dd:7c: 8e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D9:87:5E:28:B1:3D:3D:0F:69:76:E7:13:D6:56:28:71:3E:1C:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 207.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6d:b0:50:dc:9e:d8:e1:9c:06:26:a7:50:ee:34:cf:43:d0: 99:b5:f1:b1:6d:f2:37:31:18:bb:1b:7b:d6:50:15:23:de:f4: b3:b4:d9:cf:4b:7f:4e:b5:78:b1:85:5f:11:6c:4a:e0:c5:4c: 60:23:ce:bf:1b:83:67:72:c6:6a:65:0a:84:67:fd:88:6c:64: 28:c7:5b:07:5a:b3:ff:2f:67:f8:5f:33:e8:c8:7d:28:0e:e1: 3f:fc:49:33:37:a2:d9:84:06:13:f8:ae:b6:43:f7:15:b4:6a: d5:e9:d9:01:bf:e1:b4:16:12:b8:1e:bf:3e:1d:84:f0:16:31: af:7b:52:cc:c2:ad:ce:c2:4e:89:01:54:7a:d1:2e:bf:9c:e0: 15:1c:cd:6d:45:05:7e:e0:cc:4f:8c:63:ab:01:82:d9:49:ee: 5d:75:c9:1b:02:50:ef:b3:8f:05:37:c3:db:da:45:11:dd:c9: 37:1a:60:2e:88:bb:9f:8c:65:70:0f:b9:a2:92:e0:3b:c2:fc: e1:97:2e:2a:87:6b:8e:79:41:c7:3f:3d:66:76:89:42:d7:50: 6b:40:1c:22:cc:18:d3:04:cd:13:40:c8:26:9f:d0:83:3e:77: e9:a1:9f:fe:00:cd:a1:40:ac:b5:3e:0c:c7:6b:37:9a:a7:b8: 31:9c:69:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtK5WUctkcg3oJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk OTQ4YTgwZmYtYWY1OC00ZTZkLWFlODEtNzkyNGJkOGU4ZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveTWa/gaAL4LREs1NsRDnMbIpPz9qTB1rNDM RIeUQW8LkQqrAGeCWQrHMTlfW2jPX9aN6qKCiLWlMtBNZdKWYUyVgbhm9EOlXsiU WUlN+IfdxBTANRvE4BgTqK8P0roMs8/XHmYxI8K588s8Gjax/zPHzvONWpWYtuDH aRTCFoDsShKuThdNYbpZnFcKkcWrCyCuca+MobtLdLVIdzh1uegWsJTOgIsV9ZzK Mkwi/nT6fC8q4+T2GSJhRJV8oDIRFtOXqmBZIFwEythxtjVC06BA916ZZUWYdoHW ZHldKlQR3LdaRmreT7Sqoq1bh19WfTmEtd1PEgI4CB7/3XyOfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/Zh14osT09D2l25xPWVihxPhxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvMjhkYjUzODgtMzAyOC0z MzcyLTgyYjctMGU1MWY3ZjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz64UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxtsFDcntjhnAYmp1DuNM9D0Jm18bFt8jcxGLsbe9ZQFSPe9LO02c9L f061eLGFXxFsSuDFTGAjzr8bg2dyxmplCoRn/YhsZCjHWwdas/8vZ/hfM+jIfSgO 4T/8STM3otmEBhP4rrZD9xW0atXp2QG/4bQWErgevz4dhPAWMa97UszCrc7CTokB VHrRLr+c4BUczW1FBX7gzE+MY6sBgtlJ7l11yRsCUO+zjwU3w9vaRRHdyTcaYC6I u5+MZXAPuaKS4DvC/OGXLiqHa455Qcc/PWZ2iULXUGtAHCLMGNMEzRNAyCaf0IM+ d+mhn/4AzaFArLU+DMdrN5qnuDGcaVA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:27:54 2026 by rpki-client