$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/7c521967-f162-3831-bc38-e8e4dfd32842.roa File: 7c521967-f162-3831-bc38-e8e4dfd32842.roa (raw, json) Hash identifier: R1XTRkL1KPOQ86v1xKo4a2rWYiv1OaxAH6aGtY81jYU= Subject key identifier: 8B:C5:F9:F9:68:A0:34:64:D6:45:05:67:F8:B1:11:36:AC:92:FD:87 Certificate issuer: /CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Certificate serial: 010D0C9F4328584F542EEB514BAEAD7A721F1980 Authority key identifier: A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/7c521967-f162-3831-bc38-e8e4dfd32842.roa Signing time: Mon 28 Sep 2026 21:17:53 +0000 ROA not before: Mon 28 Sep 2026 21:17:53 +0000 ROA not after: Sun 27 Dec 2026 22:17:53 +0000 asID: 32586 IP address blocks: 204.58.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:2e:eb:51:4b:ae:ad:7a:72:1f:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Validity Not Before: Sep 28 21:17:53 2026 GMT Not After : Dec 27 22:17:53 2026 GMT Subject: CN=22f83fec-5373-4128-b00b-87cfbed48744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a5:62:45:b9:18:6f:8f:b1:ee:e5:e7:e1:19: 57:0b:8f:f0:e3:ac:08:7c:bb:dc:a0:a9:c1:c3:d7: 62:93:fd:12:c4:4a:2c:ad:3d:98:c6:5a:2c:a6:37: 5f:d1:d8:b1:64:aa:3b:37:60:37:f9:76:d4:06:b9: fb:89:7e:9e:97:76:e2:a4:1f:e1:01:03:d2:a9:c8: 31:9f:cf:d8:1a:32:c4:30:d4:42:2f:39:6f:f2:e4: 86:e3:09:9a:3d:38:36:52:f7:41:f2:a1:e7:c9:bd: db:14:86:1f:8e:3d:91:75:cd:e9:74:8c:9d:f9:dc: a8:53:34:ad:f7:40:9f:8a:a6:97:ad:0c:0e:21:69: 86:69:16:18:80:e1:47:7e:f0:b5:8e:23:68:d2:53: 56:f4:d2:f5:f1:ca:91:d2:0a:68:d4:74:3c:fe:c7: 86:6d:44:97:40:5f:56:2e:44:24:31:82:1e:63:e7: 88:e0:b2:cc:55:e0:90:69:85:e5:b1:20:b0:e3:1d: cd:36:c4:41:41:ab:41:09:ad:33:2f:ab:63:8d:25: a0:b0:f7:74:12:56:fb:7a:3a:c6:53:26:c3:69:fc: 47:64:98:83:37:f2:7c:ca:da:fe:4f:26:d2:b6:f5: 56:2b:f0:5b:09:68:8e:20:28:c1:8a:1f:e4:92:da: 24:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C5:F9:F9:68:A0:34:64:D6:45:05:67:F8:B1:11:36:AC:92:FD:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/7c521967-f162-3831-bc38-e8e4dfd32842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl X509v3 Authority Key Identifier: keyid:A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer sbgp-ipAddrBlock: critical IPv4: 204.58.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2a:1c:f5:1f:a5:3a:f3:22:5b:d7:fb:7c:7c:48:97:5d:aa: 3a:9e:fc:b0:01:46:8d:9f:09:cb:8a:4c:7a:61:e8:8d:b9:68: b2:2d:3f:71:e0:bd:c0:be:09:9a:bd:8e:23:8d:3e:42:61:09: 3c:b0:cc:a1:67:64:71:0a:14:c9:f8:75:18:94:15:90:c0:fe: 12:9f:ed:33:bc:65:cc:6d:70:dc:00:2d:ae:6e:cf:8e:73:b7: 46:9a:d0:5e:7c:50:41:c4:2b:89:46:ac:1c:b3:ce:0d:98:0d: 07:62:94:79:90:37:2b:f9:76:55:c1:b3:8e:b8:79:ca:d9:a0: bf:65:98:70:39:09:8e:d6:8f:34:86:da:e5:25:54:35:24:f2: 88:c1:e7:d6:0a:52:1e:eb:67:3a:b2:fc:9c:1f:e1:a9:ed:a4: fe:3a:27:6f:b3:fd:a8:0d:73:c5:ac:07:f6:bc:67:e4:98:b0: 9d:7a:46:7e:b4:bc:10:3f:44:ae:1a:b3:12:63:c6:81:1b:87: ea:6b:e1:56:08:4e:ba:25:24:ce:68:34:ea:1c:72:4d:d8:8d: c0:c7:e7:29:29:2c:e7:2a:55:44:d8:ed:c3:ce:a5:58:a9:39: f8:56:58:ab:d9:13:76:18:4b:e2:90:68:9c:fa:7a:b8:da:b5: 44:b3:b6:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ULutRS66tenIfGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQwN2Y1OGQtMjdhOC00MmE1LWI3M2UtMWZlMzUwODFj NmRmMB4XDTI2MDkyODIxMTc1M1oXDTI2MTIyNzIyMTc1M1owLzEtMCsGA1UEAxMk MjJmODNmZWMtNTM3My00MTI4LWIwMGItODdjZmJlZDQ4NzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKViRbkYb4+x7uXn4RlXC4/w46wIfLvcoKnB w9dik/0SxEosrT2Yxlospjdf0dixZKo7N2A3+XbUBrn7iX6el3bipB/hAQPSqcgx n8/YGjLEMNRCLzlv8uSG4wmaPTg2UvdB8qHnyb3bFIYfjj2Rdc3pdIyd+dyoUzSt 90CfiqaXrQwOIWmGaRYYgOFHfvC1jiNo0lNW9NL18cqR0gpo1HQ8/seGbUSXQF9W LkQkMYIeY+eI4LLMVeCQaYXlsSCw4x3NNsRBQatBCa0zL6tjjSWgsPd0Elb7ejrG UybDafxHZJiDN/J8ytr+TybStvVWK/BbCWiOICjBih/kktoksQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvF+flooDRk1kUFZ/ixETaskv2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3 ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUzNTA4MWM2ZGYvN2M1MjE5NjctZjE2Mi0z ODMxLWJjMzgtZThlNGRmZDMyODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTQwN2Y1OGQtMjdhOC00MmE1LWI3 M2UtMWZlMzUwODFjNmRmLzE0MDdmNThkLTI3YTgtNDJhNS1iNzNlLTFmZTM1MDgx YzZkZi5jcmwwHwYDVR0jBBgwFoAUqXHCIBuAdC31fIHIgg2qq+D9GyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUz NTA4MWM2ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDoPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQqHPUfpTrzIlvX+3x8SJddqjqe/LABRo2fCcuKTHph6I25aLItP3Hg vcC+CZq9jiONPkJhCTywzKFnZHEKFMn4dRiUFZDA/hKf7TO8ZcxtcNwALa5uz45z t0aa0F58UEHEK4lGrByzzg2YDQdilHmQNyv5dlXBs464ecrZoL9lmHA5CY7WjzSG 2uUlVDUk8ojB59YKUh7rZzqy/Jwf4antpP46J2+z/agNc8WsB/a8Z+SYsJ16Rn60 vBA/RK4asxJjxoEbh+pr4VYITrolJM5oNOocck3YjcDH5ykpLOcqVUTY7cPOpVip OfhWWKvZE3YYS+KQaJz6erjatUSztn8= -----END CERTIFICATE-----Generated at Mon Oct 5 16:38:11 2026 by rpki-client