$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa File: 3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa (raw, json) Hash identifier: mMSNelNfMZFYjp/gcsbrphPpsG17JCBad4wAiVEI13o= Subject key identifier: 44:B1:24:7A:D4:F3:7D:C2:A4:F6:5A:0F:66:D9:B0:23:83:8A:44:AC Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584D186CFC8498E99825BA77CD80 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa Signing time: Sun 08 Mar 2026 02:00:31 +0000 ROA not before: Sun 08 Mar 2026 02:00:31 +0000 ROA not after: Sat 06 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 207.202.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:18:6c:fc:84:98:e9:98:25:ba:77:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 8 02:00:31 2026 GMT Not After : Jun 6 01:00:31 2026 GMT Subject: CN=1469c8dc-b76b-43aa-a5d3-a54542daef76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:63:ef:02:06:5d:05:eb:66:7e:89:a2:0a:ad: 2e:91:38:c8:7b:9a:eb:d0:4f:ce:96:c3:59:03:cc: a7:14:5f:ae:29:5c:b6:c4:ef:e1:36:7c:9e:42:92: e6:7c:cc:bb:e5:b2:a7:df:65:2d:28:84:47:ec:b7: 93:df:c7:80:d6:7b:fc:d4:6c:99:a7:fc:56:0f:8d: 79:a3:33:ff:29:0f:ea:1c:02:2a:f2:05:15:bf:f9: c9:62:fe:ec:26:ef:c8:0d:c7:d2:e0:a4:4f:36:ba: 06:ab:53:b0:41:0d:d9:11:7b:eb:03:df:2e:75:c3: 24:4c:b4:f4:3a:87:76:82:27:c0:75:de:1f:bc:01: 20:16:32:fc:23:75:35:f6:fd:c2:60:c7:99:0b:44: c0:b3:3e:5c:52:e1:6b:9e:b9:8d:a2:dd:00:9f:3b: 80:0d:67:55:9c:00:65:de:23:53:70:16:07:0f:01: 9d:13:49:5a:e6:9b:bf:f6:eb:a3:0d:a6:25:c1:82: 43:d1:79:80:bb:9e:5e:ce:2b:8a:0e:e1:9a:d0:b3: 56:53:f5:0a:5e:2a:c8:06:08:90:1f:b6:7d:b7:02: 26:11:95:06:7d:8c:5d:5f:ac:b3:a3:14:90:3b:44: b9:2b:a5:13:40:34:99:86:36:c1:b4:39:ee:f6:ed: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B1:24:7A:D4:F3:7D:C2:A4:F6:5A:0F:66:D9:B0:23:83:8A:44:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:52:09:54:6c:73:dd:bb:fc:96:dd:34:54:c2:51:68:9e:c2: 67:10:98:d5:25:f4:59:8b:7a:73:42:ae:78:b2:52:c5:a7:73: e1:0f:2e:36:c0:3f:f7:5d:92:47:8c:1b:a3:08:8f:fe:7a:b6: 69:a3:b0:4a:2a:75:20:8c:9d:c2:a4:c7:a7:60:8c:a0:c3:1f: b1:ae:00:b6:5b:a8:23:87:60:d8:fd:4f:54:4a:87:3d:8f:eb: 4e:41:ec:2a:30:18:b0:e0:ce:b6:8a:b8:5c:fa:dd:2f:92:60: 50:d6:4e:96:44:7b:3f:86:6b:0e:8c:4c:2a:56:f0:3e:d6:ff: 44:4f:2a:bc:0d:de:a2:e8:fb:0b:45:c5:69:c9:f1:7c:bc:f8: 89:4a:6b:f1:78:de:94:d3:20:e7:87:43:ef:2d:65:9c:ed:3d: 2c:6c:8e:95:ba:23:83:3b:1d:b6:63:f4:83:83:20:75:08:35: ef:dd:d9:d6:ae:6f:4d:38:01:6e:da:c4:53:a0:88:5e:2d:79: 6c:09:42:ad:8c:56:78:05:b3:bd:cd:2b:7c:0e:40:5e:aa:a3: a6:5a:a9:7c:75:8b:da:e9:94:26:2c:c2:a0:13:cd:e9:24:e7: 8a:54:ed:45:ca:f1:7b:8f:ce:c3:ea:9b:5f:81:65:6c:67:9c: d3:50:eb:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0YbPyEmOmYJbp3zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDMwODAyMDAzMVoXDTI2MDYwNjAxMDAzMVowLzEtMCsGA1UEAxMk MTQ2OWM4ZGMtYjc2Yi00M2FhLWE1ZDMtYTU0NTQyZGFlZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGPvAgZdBetmfomiCq0ukTjIe5rr0E/OlsNZ A8ynFF+uKVy2xO/hNnyeQpLmfMy75bKn32UtKIRH7LeT38eA1nv81GyZp/xWD415 ozP/KQ/qHAIq8gUVv/nJYv7sJu/IDcfS4KRPNroGq1OwQQ3ZEXvrA98udcMkTLT0 Ood2gifAdd4fvAEgFjL8I3U19v3CYMeZC0TAsz5cUuFrnrmNot0AnzuADWdVnABl 3iNTcBYHDwGdE0la5pu/9uujDaYlwYJD0XmAu55eziuKDuGa0LNWU/UKXirIBgiQ H7Z9twImEZUGfYxdX6yzoxSQO0S5K6UTQDSZhjbBtDnu9u0DZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESxJHrU833CpPZaD2bZsCODikSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvM2JjYWZjZGUtZGRkMy0z ZGEyLTkyOTMtZjRlNWNiOThiYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdSCVRsc927/JbdNFTCUWiewmcQmNUl9FmLenNCrniyUsWnc+EPLjbA P/ddkkeMG6MIj/56tmmjsEoqdSCMncKkx6dgjKDDH7GuALZbqCOHYNj9T1RKhz2P 605B7CowGLDgzraKuFz63S+SYFDWTpZEez+Gaw6MTCpW8D7W/0RPKrwN3qLo+wtF xWnJ8Xy8+IlKa/F43pTTIOeHQ+8tZZztPSxsjpW6I4M7HbZj9IODIHUINe/d2dau b004AW7axFOgiF4teWwJQq2MVngFs73NK3wOQF6qo6ZaqXx1i9rplCYswqATzekk 54pU7UXK8XuPzsPqm1+BZWxnnNNQ62I= -----END CERTIFICATE-----Generated at Thu Mar 26 02:02:40 2026 by rpki-client