$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/958e7b66-ec55-33ff-9ca6-345f7f687850.roa File: 958e7b66-ec55-33ff-9ca6-345f7f687850.roa (raw, json) Hash identifier: FNPkGcPkzuMkAlfNpd58gvZmVSUI/+V72d34RbaZ9oI= Subject key identifier: 56:6A:08:D7:B8:A3:9A:5E:67:81:DC:51:43:C5:6F:12:F8:C8:57:03 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F1D24CFAB003BAEB26127A600 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/958e7b66-ec55-33ff-9ca6-345f7f687850.roa Signing time: Wed 09 Sep 2026 04:08:04 +0000 ROA not before: Wed 09 Sep 2026 04:08:04 +0000 ROA not after: Tue 08 Dec 2026 05:06:15 +0000 asID: 7270 IP address blocks: 207.202.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1d:24:cf:ab:00:3b:ae:b2:61:27:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 9 04:08:04 2026 GMT Not After : Dec 8 05:06:15 2026 GMT Subject: CN=b7860a27-f1b2-48c0-999c-babf85c0863b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c5:cc:28:f7:63:e9:2b:1c:0e:ee:77:2d:4e: 5a:6a:65:a4:71:14:8e:d6:78:ad:67:37:36:ed:17: 64:28:d2:d0:55:9f:76:f0:6a:b8:48:1a:d7:a4:34: d7:42:71:a2:fe:07:a7:d1:7e:b0:ad:12:ef:ba:0c: 0a:87:b9:76:5f:15:29:e1:87:f7:0c:ca:35:0e:dc: f2:91:3b:46:b6:b3:09:5e:db:c7:14:65:8d:b7:54: 19:71:f1:5a:94:01:6f:6f:ca:9b:3b:06:ae:a1:06: 98:73:2a:67:2e:1a:d3:9f:6d:d4:23:8c:0b:03:cf: 06:06:61:5b:69:61:9e:ed:85:63:8e:df:90:e5:9b: 77:47:1c:02:fb:10:2f:0f:48:8c:28:2a:b7:9a:39: a1:9c:88:a6:2f:c5:5f:b2:07:d4:f1:23:bc:9e:ea: f1:33:36:3a:82:55:1c:37:47:5f:c6:0f:0b:ec:0d: 6f:50:7e:e7:fe:8c:53:29:ab:04:09:0d:89:a6:91: 46:b5:d7:41:d1:c2:7d:3c:da:a3:61:fe:8d:4f:0f: d1:09:65:a8:00:3b:75:75:6d:ad:08:b4:ab:01:a7: 96:2c:98:2c:23:5f:d6:23:8b:8b:eb:7c:a5:fd:ae: 2f:ee:4e:c2:c5:e8:83:d9:be:ea:2b:28:15:6e:71: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6A:08:D7:B8:A3:9A:5E:67:81:DC:51:43:C5:6F:12:F8:C8:57:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/958e7b66-ec55-33ff-9ca6-345f7f687850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:2d:26:68:10:d3:e9:c7:e5:7b:cb:90:27:15:d7:e7:04:de: de:bd:6e:ec:9c:e3:2f:ff:1c:33:da:1d:93:40:7f:01:5e:a1: 18:d6:a2:83:ea:19:88:c4:c4:ba:f6:54:67:a9:8a:43:5d:c6: 3c:b8:38:48:43:61:17:0a:07:fd:5b:af:af:a8:50:cb:01:e5: 7b:17:8b:21:86:24:c2:d5:9d:97:7e:4d:9e:b6:6f:f1:ca:0c: a7:63:92:e6:fc:f3:0d:c9:2b:dc:fb:b0:c5:00:29:4b:c3:5c: 8c:87:d4:f5:42:84:3e:3f:bc:60:f9:6b:6e:6c:06:92:b4:da: 06:70:94:f5:dc:b4:2b:a4:85:c2:c1:b3:e6:dc:db:fd:69:64: d9:5e:08:f1:32:b0:6d:3a:97:7b:45:86:73:ce:5d:88:39:1c: 43:ca:52:98:b7:d9:44:bf:e4:0c:89:3f:36:e4:dd:4b:f7:9d: a6:d1:b4:ec:ed:24:ba:52:86:b6:39:aa:54:b9:ba:f4:ae:a8: f1:6a:1c:25:17:f1:3b:24:04:b5:18:13:48:86:99:5b:22:56: 6c:69:22:2f:8d:4a:7c:f7:f5:0a:ec:e2:40:ef:2b:60:5a:82: c1:c6:f7:3e:c1:c2:bd:20:47:ba:39:c3:6e:75:34:46:4a:05: 97:00:79:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8dJM+rADuusmEnpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkwOTA0MDgwNFoXDTI2MTIwODA1MDYxNVowLzEtMCsGA1UEAxMk Yjc4NjBhMjctZjFiMi00OGMwLTk5OWMtYmFiZjg1YzA4NjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cXMKPdj6SscDu53LU5aamWkcRSO1nitZzc2 7RdkKNLQVZ928Gq4SBrXpDTXQnGi/gen0X6wrRLvugwKh7l2XxUp4Yf3DMo1Dtzy kTtGtrMJXtvHFGWNt1QZcfFalAFvb8qbOwauoQaYcypnLhrTn23UI4wLA88GBmFb aWGe7YVjjt+Q5Zt3RxwC+xAvD0iMKCq3mjmhnIimL8VfsgfU8SO8nurxMzY6glUc N0dfxg8L7A1vUH7n/oxTKasECQ2JppFGtddB0cJ9PNqjYf6NTw/RCWWoADt1dW2t CLSrAaeWLJgsI1/WI4uL63yl/a4v7k7CxeiD2b7qKygVbnHwHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZqCNe4o5peZ4HcUUPFbxL4yFcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvOTU4ZTdiNjYtZWM1NS0z M2ZmLTljYTYtMzQ1ZjdmNjg3ODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEtJmgQ0+nH5XvLkCcV1+cE3t69buyc4y//HDPaHZNAfwFeoRjWooPq GYjExLr2VGepikNdxjy4OEhDYRcKB/1br6+oUMsB5XsXiyGGJMLVnZd+TZ62b/HK DKdjkub88w3JK9z7sMUAKUvDXIyH1PVChD4/vGD5a25sBpK02gZwlPXctCukhcLB s+bc2/1pZNleCPEysG06l3tFhnPOXYg5HEPKUpi32US/5AyJPzbk3Uv3nabRtOzt JLpShrY5qlS5uvSuqPFqHCUX8TskBLUYE0iGmVsiVmxpIi+NSnz39Qrs4kDvK2Ba gsHG9z7Bwr0gR7o5w251NEZKBZcAeTs= -----END CERTIFICATE-----Generated at Sat Oct 3 06:11:29 2026 by rpki-client