$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/7f9abead-8c76-3de1-b30a-0f3951aed54a.roa File: 7f9abead-8c76-3de1-b30a-0f3951aed54a.roa (raw, json) Hash identifier: EL1+VJRTOnfWWRNDmTJo0nfoQOYeaIBoveccM8bZe44= Subject key identifier: 17:11:2F:8E:74:68:F6:A7:C9:42:64:7F:AA:E5:EF:DE:D5:51:44:EB Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F4328584D44FA2AB6E937C7A809044A8B Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/7f9abead-8c76-3de1-b30a-0f3951aed54a.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 400196 IP address blocks: 207.22.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:2a:b6:e9:37:c7:a8:09:04:4a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=3e07996d-7a5c-4344-8441-94bd0a06ce28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6c:35:b0:72:6d:b7:cd:cd:b4:96:3f:5f:fc: 78:12:37:22:37:10:40:11:68:76:35:e0:af:a7:bd: 96:57:33:d9:0c:5f:ef:cb:99:f6:57:23:e1:ed:8f: 68:1a:59:ce:d4:d4:bf:5d:99:8b:53:ac:0b:8f:79: e5:25:3e:a0:20:fa:e1:18:ad:40:1a:55:d6:cc:24: a7:ab:3c:a1:a8:cf:09:6e:58:b7:9e:57:f0:62:8c: e8:0f:bb:07:5e:35:60:2c:b1:bc:eb:a6:1f:6d:5c: 4e:46:5c:bb:ab:33:bf:0b:35:c3:74:dd:ed:0d:42: c1:10:27:8c:f7:fb:dc:75:65:c1:bd:0f:41:df:2d: 36:99:81:d8:be:fb:e4:7a:3d:84:54:01:5e:9c:a3: d9:b7:c3:0e:24:7f:0b:51:50:ef:05:f4:79:2a:e1: 65:2d:eb:e4:6b:e6:03:31:6d:7e:fb:cb:34:61:01: a5:0d:14:64:39:91:f1:d8:69:a5:27:ea:00:f2:50: 17:08:90:a6:89:96:f2:c3:c9:66:31:21:a3:b3:b9: 6d:df:d6:27:40:e5:98:53:3f:d4:a8:d5:d7:ee:6c: ce:43:29:16:6d:b0:69:71:3b:dc:54:17:75:44:13: e1:10:ee:47:81:ca:7c:3b:a4:ac:fc:0b:ae:42:75: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:11:2F:8E:74:68:F6:A7:C9:42:64:7F:AA:E5:EF:DE:D5:51:44:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/7f9abead-8c76-3de1-b30a-0f3951aed54a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv4: 207.22.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:2a:b6:fd:fa:32:b8:24:b3:4a:2a:11:9a:f1:06:82:0e:c8: 05:e9:bc:97:85:1d:a8:d7:10:78:da:89:30:b4:97:f7:fb:b9: ab:dd:d4:f0:8b:93:4b:15:52:73:28:7a:28:9a:69:1c:b5:c2: 2c:fc:27:56:25:b0:42:d5:8f:a6:c5:9d:9d:6f:80:24:9e:a1: f9:49:01:c1:0f:e7:99:15:2e:cb:c1:a9:86:00:59:e2:18:b6: cf:6a:8c:33:ed:73:20:ee:32:db:60:a7:a8:4d:46:73:b6:5e: f9:3d:8e:30:94:ab:d2:b7:87:97:4b:91:f5:5c:b3:c1:d8:fb: fc:97:d9:2e:64:d0:10:33:65:0a:98:d1:fd:e3:c1:e0:b8:55: 80:41:cf:06:ab:2e:db:f9:ad:64:ba:4a:71:7f:fd:16:bf:fb: 53:63:3d:53:04:38:6c:1d:6d:44:aa:00:f7:83:8b:63:8f:9b: 2c:55:e5:37:2b:98:bf:ab:b9:85:eb:c0:7d:d2:3d:08:88:90: e0:4f:70:9a:fa:b6:a5:5a:68:f6:37:b9:0c:0b:2e:cd:f6:75: 76:fc:f3:f4:b0:97:ae:1e:12:77:81:52:2d:28:c3:29:7b:5a: 28:60:ad:1a:34:f1:16:45:d4:e8:f3:d1:e8:3e:ca:64:09:32: 0d:04:fa:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+iq26TfHqAkESoswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk M2UwNzk5NmQtN2E1Yy00MzQ0LTg0NDEtOTRiZDBhMDZjZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWw1sHJtt83NtJY/X/x4EjciNxBAEWh2NeCv p72WVzPZDF/vy5n2VyPh7Y9oGlnO1NS/XZmLU6wLj3nlJT6gIPrhGK1AGlXWzCSn qzyhqM8Jbli3nlfwYozoD7sHXjVgLLG866YfbVxORly7qzO/CzXDdN3tDULBECeM 9/vcdWXBvQ9B3y02mYHYvvvkej2EVAFenKPZt8MOJH8LUVDvBfR5KuFlLevka+YD MW1++8s0YQGlDRRkOZHx2GmlJ+oA8lAXCJCmiZbyw8lmMSGjs7lt39YnQOWYUz/U qNXX7mzOQykWbbBpcTvcVBd1RBPhEO5Hgcp8O6Ss/AuuQnUXNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcRL450aPanyUJkf6rl797VUUTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvN2Y5YWJlYWQtOGM3Ni0z ZGUxLWIzMGEtMGYzOTUxYWVkNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEqtv36Mrgks0oqEZrxBoIOyAXpvJeFHajXEHjaiTC0l/f7uavd1PCL k0sVUnMoeiiaaRy1wiz8J1YlsELVj6bFnZ1vgCSeoflJAcEP55kVLsvBqYYAWeIY ts9qjDPtcyDuMttgp6hNRnO2Xvk9jjCUq9K3h5dLkfVcs8HY+/yX2S5k0BAzZQqY 0f3jweC4VYBBzwarLtv5rWS6SnF//Ra/+1NjPVMEOGwdbUSqAPeDi2OPmyxV5Tcr mL+ruYXrwH3SPQiIkOBPcJr6tqVaaPY3uQwLLs32dXb88/Swl64eEneBUi0owyl7 WihgrRo08RZF1Ojz0eg+ymQJMg0E+oo= -----END CERTIFICATE-----Generated at Thu Mar 26 06:06:49 2026 by rpki-client