$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/1d18a596-fbc2-32c3-954c-651b5514bf65.roa File: 1d18a596-fbc2-32c3-954c-651b5514bf65.roa (raw, json) Hash identifier: AbREfhGOHTQXzn7/LrMei/liTaDHdj/HXqJyO5hYN+g= Subject key identifier: 4A:A6:1D:8E:AC:BC:CB:6A:AD:AC:68:0A:E5:65:1C:B8:99:4F:10:30 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584D39CF809F52776A5443468070 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/1d18a596-fbc2-32c3-954c-651b5514bf65.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 207.202.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:80:9f:52:77:6a:54:43:46:80:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=41c55f96-b9da-4542-ac79-919d3d89fa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:d6:bc:98:59:3e:dd:05:cb:e2:ab:e6:90: b6:b8:12:53:37:f0:87:dd:e4:ce:b7:46:f8:50:92: af:81:37:6d:f8:44:90:8c:66:19:ce:e3:fa:11:b0: f3:cd:d5:53:3e:3b:13:4f:fe:29:46:a9:74:6f:a9: 98:0b:65:61:bf:a7:ac:eb:9c:ed:4f:b5:8b:30:66: 41:9e:b1:a1:6b:4f:b6:38:e7:fa:3d:10:73:81:45: 90:2e:db:28:3d:10:5d:2e:e9:ce:cf:5e:f7:c8:2e: 12:9a:ed:3f:f6:a8:09:63:1a:5b:b4:d6:5e:d0:c2: 63:02:73:e7:8c:41:1d:90:ae:ea:fd:2f:ce:c8:e8: 6b:f6:ad:42:20:db:c6:48:af:4c:f8:08:61:11:4a: 08:df:ec:c6:9d:48:d1:6f:bc:7b:4a:d3:92:b3:41: 8a:ba:4e:53:a9:be:16:86:71:66:36:68:a7:5b:7a: 8f:0b:86:23:4e:0a:70:3a:e8:21:21:5d:85:d4:b1: 27:9e:07:a9:52:dd:b5:bb:dc:f1:61:7a:e1:3c:62: bd:cb:67:38:e1:a0:a1:65:5e:fc:7c:56:be:78:69: 6f:af:11:55:69:99:0e:23:06:8c:c2:1e:44:3a:f6: 68:df:55:38:e4:96:de:ff:d6:8d:08:a7:cc:13:1f: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A6:1D:8E:AC:BC:CB:6A:AD:AC:68:0A:E5:65:1C:B8:99:4F:10:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/1d18a596-fbc2-32c3-954c-651b5514bf65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:47:b5:ba:3e:19:6b:ef:84:c2:aa:b4:42:96:40:16:49:16: 80:6f:e5:c9:e5:8e:69:26:81:4d:ff:b1:f1:1b:28:cd:9c:98: 8a:c1:da:c5:a8:5e:50:f7:f1:f7:bd:eb:92:cf:42:a6:a1:04: e2:e0:f8:52:56:26:62:73:ec:2b:b1:e3:4d:9f:14:45:99:c8: 26:11:c9:3c:9e:a8:ef:b6:60:82:46:bb:46:e5:69:38:41:1f: ab:6a:8c:1d:0e:19:7f:98:9c:fc:99:27:6f:e1:a6:19:2c:89: f6:9c:40:fb:18:10:14:56:ff:6f:40:3d:bc:b7:12:0f:8d:da: dd:80:dc:8a:f0:27:37:7e:38:d7:76:e2:ba:08:3e:d1:78:62: 5c:55:81:e3:8a:b8:07:e8:74:6a:41:42:4b:fd:ac:72:99:3d: 2e:b0:f6:97:2e:83:ee:bf:0c:63:43:ce:7f:9e:1b:c2:29:6f: 59:d0:1c:5a:90:6e:ea:11:51:55:ce:45:b5:dd:6c:aa:7e:f3: 9a:a6:e0:8e:70:4f:32:e0:d8:5e:07:91:a1:68:19:3d:bf:92: d8:2d:b2:32:98:96:d5:48:22:a6:f0:f6:78:86:d0:12:ae:95: bd:24:97:16:56:25:78:b1:b3:f7:05:23:f8:74:53:21:e1:ff: d8:f6:01:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4CfUndqVENGgHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NDFjNTVmOTYtYjlkYS00NTQyLWFjNzktOTE5ZDNkODlmYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkLWvJhZPt0Fy+Kr5pC2uBJTN/CH3eTOt0b4 UJKvgTdt+ESQjGYZzuP6EbDzzdVTPjsTT/4pRql0b6mYC2Vhv6es65ztT7WLMGZB nrGha0+2OOf6PRBzgUWQLtsoPRBdLunOz173yC4Smu0/9qgJYxpbtNZe0MJjAnPn jEEdkK7q/S/OyOhr9q1CINvGSK9M+AhhEUoI3+zGnUjRb7x7StOSs0GKuk5Tqb4W hnFmNminW3qPC4YjTgpwOughIV2F1LEnngepUt21u9zxYXrhPGK9y2c44aChZV78 fFa+eGlvrxFVaZkOIwaMwh5EOvZo31U45Jbe/9aNCKfMEx958QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqmHY6svMtqraxoCuVlHLiZTxAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMWQxOGE1OTYtZmJjMi0z MmMzLTk1NGMtNjUxYjU1MTRiZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlHtbo+GWvvhMKqtEKWQBZJFoBv5cnljmkmgU3/sfEbKM2cmIrB2sWo XlD38fe965LPQqahBOLg+FJWJmJz7Cux402fFEWZyCYRyTyeqO+2YIJGu0blaThB H6tqjB0OGX+YnPyZJ2/hphksifacQPsYEBRW/29APby3Eg+N2t2A3IrwJzd+ONd2 4roIPtF4YlxVgeOKuAfodGpBQkv9rHKZPS6w9pcug+6/DGNDzn+eG8Ipb1nQHFqQ buoRUVXORbXdbKp+85qm4I5wTzLg2F4HkaFoGT2/ktgtsjKYltVIIqbw9niG0BKu lb0klxZWJXixs/cFI/h0UyHh/9j2ASw= -----END CERTIFICATE-----Generated at Thu Mar 26 21:03:22 2026 by rpki-client