$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa File: c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa (raw, json) Hash identifier: ALyckocwa50EQAcYZlo+yHJpylYCgHWRT7qNC9ZsWJs= Subject key identifier: EC:E4:5C:6C:1A:88:3B:0B:7A:F0:E1:CE:FB:63:9F:96:D0:40:A2:0F Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584D39CF80B6AAADA66A86468680 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 207.202.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:80:b6:aa:ad:a6:6a:86:46:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=12de9c0e-ad2c-4ff2-b35a-589e9a13a435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a5:1c:0d:49:6b:97:7c:35:b7:df:6e:f5:1e: eb:78:fe:5c:24:c2:b3:3b:dc:7c:bd:d2:a2:47:ba: 50:a2:13:06:d1:74:79:66:9a:2b:ab:fc:64:68:4e: 8e:9c:cc:48:06:ae:ff:c4:85:3c:2a:71:69:d6:50: f2:80:b8:4f:65:f7:0e:92:99:7f:1b:9b:36:1e:0a: 69:67:02:b8:a2:e0:9b:55:0e:b1:54:54:25:5c:1a: 09:88:6a:ee:a3:36:f6:76:8d:32:17:57:1c:51:d6: 7b:fe:26:5a:4c:a9:86:14:a8:f5:a5:a6:9c:3b:2e: dc:6c:8b:33:3f:ff:14:01:f9:d4:35:a8:af:e1:a3: 50:28:ae:7b:80:b8:35:e6:45:b6:a4:b3:54:78:ba: c8:d0:c3:60:c1:4f:b2:c9:b6:fa:67:c9:25:48:6f: 08:a0:5f:41:e5:15:ee:6e:f6:1c:a9:08:e0:15:b8: a6:3e:17:ae:bb:08:d3:b7:0e:a1:44:a0:2a:03:60: 9a:d8:36:37:33:7d:8f:68:a4:b9:98:ea:f6:12:09: 0f:10:45:86:5c:e7:2a:28:03:1e:7f:24:a9:11:59: 26:bf:04:0b:6b:82:00:9a:67:b7:a5:e5:c7:87:51: e1:c2:b7:9b:70:4b:61:c9:3c:8a:df:74:2b:3d:8f: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E4:5C:6C:1A:88:3B:0B:7A:F0:E1:CE:FB:63:9F:96:D0:40:A2:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:1b:74:77:f6:90:ce:e2:69:95:3b:7b:3d:bf:1f:4f:7c:ce: 01:33:81:ed:32:9a:17:b3:b1:ec:8a:c4:13:8b:da:6b:ac:a5: a7:e5:fe:af:70:48:7a:76:a1:3e:ad:6c:0d:25:15:fb:05:17: 90:ae:b8:4b:00:0d:0a:ee:98:b2:2d:ed:da:93:91:25:24:17: 27:2a:20:26:b0:1c:f8:6a:50:87:a0:3b:0b:4f:3e:88:58:e7: 83:a1:a5:bb:96:82:4c:89:de:00:25:fc:4e:fd:d7:94:07:74: 8e:e9:35:f1:fa:47:00:d2:4f:e6:eb:e9:84:c9:da:0d:d8:34: 57:81:64:6f:31:4e:9f:66:a1:d9:30:4d:2a:83:20:d0:84:7d: 3c:c6:7d:eb:6d:70:34:95:22:38:49:4f:ad:69:2c:5f:13:a8: 39:d5:4b:d6:3c:38:53:9f:49:c2:d3:4a:7e:81:c7:e3:7a:18: 40:57:73:7c:f0:cf:10:a0:a3:8b:46:e3:39:7d:88:4e:28:7e: 66:20:f3:cb:7b:be:e5:4d:93:d2:2a:23:07:2d:db:47:43:55: 71:be:c2:7d:d9:c2:f3:b2:9e:e2:50:21:cd:c6:56:fa:34:14: b6:74:51:01:5f:72:ab:a0:89:d1:28:5d:f7:62:38:87:0e:3d: 89:d2:04:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4C2qq2maoZGhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MTJkZTljMGUtYWQyYy00ZmYyLWIzNWEtNTg5ZTlhMTNhNDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqUcDUlrl3w1t99u9R7reP5cJMKzO9x8vdKi R7pQohMG0XR5Zporq/xkaE6OnMxIBq7/xIU8KnFp1lDygLhPZfcOkpl/G5s2Hgpp ZwK4ouCbVQ6xVFQlXBoJiGruozb2do0yF1ccUdZ7/iZaTKmGFKj1paacOy7cbIsz P/8UAfnUNaiv4aNQKK57gLg15kW2pLNUeLrI0MNgwU+yybb6Z8klSG8IoF9B5RXu bvYcqQjgFbimPheuuwjTtw6hRKAqA2Ca2DY3M32PaKS5mOr2EgkPEEWGXOcqKAMe fySpEVkmvwQLa4IAmme3peXHh1HhwrebcEthyTyK33QrPY+tCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzkXGwaiDsLevDhzvtjn5bQQKIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYzZkYTQzZWYtMTNmYi0z YTE5LTkwMzUtYzQ2NWNjNDVlMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAbdHf2kM7iaZU7ez2/H098zgEzge0ymhezseyKxBOL2muspafl/q9w SHp2oT6tbA0lFfsFF5CuuEsADQrumLIt7dqTkSUkFycqICawHPhqUIegOwtPPohY 54OhpbuWgkyJ3gAl/E7915QHdI7pNfH6RwDST+br6YTJ2g3YNFeBZG8xTp9modkw TSqDINCEfTzGfettcDSVIjhJT61pLF8TqDnVS9Y8OFOfScLTSn6Bx+N6GEBXc3zw zxCgo4tG4zl9iE4ofmYg88t7vuVNk9IqIwct20dDVXG+wn3ZwvOynuJQIc3GVvo0 FLZ0UQFfcqugidEoXfdiOIcOPYnSBMk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:00 2026 by rpki-client