$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa File: bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa (raw, json) Hash identifier: XXb66pud00kVNrY814M1Luz16t2GNupr0NPZ689U3/0= Subject key identifier: FE:71:ED:A3:58:BD:2F:70:F2:1D:58:8B:A2:FE:29:16:DE:F2:0E:D0 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584DA6B02359F33FD501EADAAB40 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 207.202.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:23:59:f3:3f:d5:01:ea:da:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=2c584d7a-b95c-4d59-8ad1-b9d3b2088707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6a:14:34:fb:ce:92:82:d7:3f:9d:29:d1:c0: d6:b4:80:4d:4d:e6:8b:16:51:2c:27:6b:37:1c:72: 80:95:70:9c:35:67:4a:e6:a6:d1:38:cf:1d:ca:c6: 42:ad:5f:6e:c0:4a:79:bf:1f:66:73:cc:67:32:3a: 8a:8e:1b:54:7c:b3:3b:ea:7f:f3:33:e9:3d:c2:a7: cb:67:26:2c:9e:8f:f1:b8:c3:87:79:3e:33:39:5c: f8:fb:a7:22:10:c9:26:ed:5e:a5:61:32:21:cb:51: 1d:23:62:38:2a:79:0b:c1:b7:c8:12:67:2f:b9:16: 45:c5:28:cf:60:11:a7:1d:50:d7:4c:ba:29:fd:72: 15:c3:91:49:24:aa:d1:b0:a6:5c:f6:fd:00:9a:8f: c0:7c:3f:be:1f:7f:48:ab:4e:ec:a9:3b:7e:d9:78: e8:ed:8d:d1:ee:bd:68:60:9f:a6:c1:6f:0e:aa:37: 20:71:1f:58:bf:56:4c:a7:18:c3:25:0d:a0:32:18: f7:ee:a2:65:16:d0:12:71:e7:8a:0b:88:86:45:69: 3e:49:17:99:d4:65:62:34:4f:2e:a2:14:88:be:e2: 4d:70:a3:2d:00:e5:46:64:86:d4:9e:1f:a3:31:51: 69:d4:e2:89:33:aa:93:0f:3a:8c:39:7a:49:b9:71: dd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:71:ED:A3:58:BD:2F:70:F2:1D:58:8B:A2:FE:29:16:DE:F2:0E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a0:2b:36:cd:df:b3:5e:60:a8:4e:58:db:9c:31:63:0f:a8: 28:63:5c:7f:7a:a1:09:50:9a:d8:ba:2d:dc:f4:c1:62:09:9c: 0d:11:be:98:7b:f3:c2:1c:d4:99:a9:61:45:71:3e:b5:78:0c: bd:f2:13:e1:6b:62:c2:3b:0c:17:ff:15:82:74:2e:f6:4b:7b: a7:d1:2c:c7:72:59:d1:bb:5b:99:62:bb:e6:e9:fe:03:78:8d: 3b:5e:9d:4d:4b:a0:fd:05:63:21:f1:8c:e7:1e:27:5d:3c:9b: 72:83:44:84:b2:7c:30:c9:35:d7:75:57:40:a1:43:6e:4e:17: 21:dc:84:db:b2:99:a8:89:4f:00:da:36:d7:b3:57:ca:b3:95: 50:b6:3d:7e:3e:d7:58:f6:8d:ef:30:ce:0c:5c:1a:a6:98:a0: 4d:43:5c:bb:83:a0:f7:47:88:c9:9f:b7:ca:f8:68:3f:60:07: e4:22:03:da:07:90:74:3e:00:d0:57:c9:50:cf:3a:8e:f7:af: 92:24:54:f8:6b:8b:1e:e5:df:b0:5b:ea:36:a5:c1:f8:02:a6: be:86:c1:36:19:69:45:fb:70:c5:6d:17:ac:65:9f:84:ea:20: 75:a3:e3:41:75:bd:94:ec:d4:97:bd:55:21:db:6b:ea:c2:6b: f5:f2:57:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCNZ8z/VAeraq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MmM1ODRkN2EtYjk1Yy00ZDU5LThhZDEtYjlkM2IyMDg4NzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmoUNPvOkoLXP50p0cDWtIBNTeaLFlEsJ2s3 HHKAlXCcNWdK5qbROM8dysZCrV9uwEp5vx9mc8xnMjqKjhtUfLM76n/zM+k9wqfL ZyYsno/xuMOHeT4zOVz4+6ciEMkm7V6lYTIhy1EdI2I4KnkLwbfIEmcvuRZFxSjP YBGnHVDXTLop/XIVw5FJJKrRsKZc9v0Amo/AfD++H39Iq07sqTt+2Xjo7Y3R7r1o YJ+mwW8OqjcgcR9Yv1ZMpxjDJQ2gMhj37qJlFtASceeKC4iGRWk+SReZ1GViNE8u ohSIvuJNcKMtAOVGZIbUnh+jMVFp1OKJM6qTDzqMOXpJuXHdawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5x7aNYvS9w8h1Yi6L+KRbe8g7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYmRiZWMzZmYtYmFjNi0z MTNjLTg1ODAtYmE3MWY2MWRmYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKgKzbN37NeYKhOWNucMWMPqChjXH96oQlQmti6Ldz0wWIJnA0Rvph7 88Ic1JmpYUVxPrV4DL3yE+FrYsI7DBf/FYJ0LvZLe6fRLMdyWdG7W5liu+bp/gN4 jTtenU1LoP0FYyHxjOceJ108m3KDRISyfDDJNdd1V0ChQ25OFyHchNuymaiJTwDa NtezV8qzlVC2PX4+11j2je8wzgxcGqaYoE1DXLuDoPdHiMmft8r4aD9gB+QiA9oH kHQ+ANBXyVDPOo73r5IkVPhrix7l37Bb6jalwfgCpr6GwTYZaUX7cMVtF6xln4Tq IHWj40F1vZTs1Je9VSHba+rCa/XyV+s= -----END CERTIFICATE-----Generated at Wed May 13 13:07:32 2026 by rpki-client