$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa File: f559045e-4405-39ab-8824-3e21d81e1ce2.roa (raw, json) Hash identifier: kaQ6SKIGZ8FAwtyl3vVm+oGLPUqv14ubJ09q7TuziNM= Subject key identifier: EE:01:9A:12:56:1A:53:D5:75:54:6A:93:27:14:1C:81:4B:C1:00:20 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584D359FDDA5C33E87D11AEFF280 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 207.202.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:dd:a5:c3:3e:87:d1:1a:ef:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=8bc098ab-fd99-4a12-bacf-87fbc933c0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c4:24:87:50:80:7b:18:27:81:f8:e5:d8:c4: 81:e9:40:4b:ec:ef:06:bc:30:a8:c6:0b:a4:cf:da: 2c:ad:b6:1f:40:48:d8:38:56:7a:83:78:2f:c5:44: 93:56:f9:25:60:15:86:d0:46:fd:cf:56:5b:b0:c2: 78:13:d4:da:13:01:0c:62:ac:32:84:bf:b3:ea:8f: 90:4c:ba:9d:de:5f:3d:9b:92:09:c3:35:38:71:74: 01:2c:a2:a1:87:57:57:18:03:97:82:aa:1c:25:09: f9:28:69:46:a4:e3:73:f0:07:cf:6f:ec:d4:2c:00: fd:81:71:b0:03:d0:eb:1a:23:8b:3b:70:df:ae:b7: 4f:9f:9d:b6:55:91:38:dc:77:16:1e:d2:4a:72:2b: 21:7b:88:3a:5e:a4:9e:11:57:3c:b2:6f:8f:a8:cf: 61:c8:e8:10:d4:68:e2:4c:04:c6:dc:38:95:6b:1e: 14:44:c8:26:29:63:ab:42:aa:eb:f3:e6:c2:4e:b9: 11:6d:86:c8:1e:40:cc:94:11:64:ed:f2:7b:ac:6f: bd:44:f6:d1:0e:0d:e3:ba:f6:66:71:c3:70:1a:c0: 8f:30:d5:d1:60:1a:18:72:df:3e:19:5e:3e:40:8e: f6:49:da:b5:4d:75:4d:21:7b:2d:97:eb:0f:f3:1f: ee:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:01:9A:12:56:1A:53:D5:75:54:6A:93:27:14:1C:81:4B:C1:00:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ed:6a:42:15:96:e9:11:d4:21:60:fb:b8:e7:fb:22:d3:96: fa:82:71:7f:88:09:06:4e:ca:58:fd:72:1d:be:8a:1f:0c:a3: 8f:97:4a:a7:be:04:2a:6e:51:b5:87:77:77:8d:34:52:6a:e5: 8a:cc:d5:4b:0b:9d:a1:5a:2e:a9:f1:f3:ea:95:f7:a5:73:1c: 5a:0a:e9:fd:a8:cb:49:64:f8:80:2d:36:8d:7f:4d:45:0d:03: a1:02:91:48:01:ba:0e:6d:4d:83:e9:37:df:a3:f4:0b:76:d2: a3:2f:be:a2:7b:f9:a1:6f:ef:d8:b2:9b:56:a1:a3:3b:e3:ba: e1:ce:69:b0:63:bb:ff:3f:26:06:14:91:ee:ff:10:78:12:44: f5:92:8e:31:b7:ea:af:d7:d4:2c:51:e4:f5:79:d7:11:0c:fb: a9:6a:db:f6:ec:d9:6e:a0:aa:da:38:14:4b:e3:d5:f5:45:3e: 57:8f:76:a9:33:5b:40:e7:d9:29:41:ce:45:60:3b:93:11:2b: 18:cc:a9:5f:60:ef:4d:ec:db:69:7e:13:fd:60:75:b7:13:47: 26:c5:7f:c4:32:27:9f:8c:f6:f5:8a:a9:df:65:4c:f8:b8:11: d2:1f:66:5b:d7:db:aa:f6:70:fa:13:15:df:f6:bc:61:1e:24: b5:d4:f0:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n92lwz6H0Rrv8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk OGJjMDk4YWItZmQ5OS00YTEyLWJhY2YtODdmYmM5MzNjMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncQkh1CAexgngfjl2MSB6UBL7O8GvDCoxguk z9osrbYfQEjYOFZ6g3gvxUSTVvklYBWG0Eb9z1ZbsMJ4E9TaEwEMYqwyhL+z6o+Q TLqd3l89m5IJwzU4cXQBLKKhh1dXGAOXgqocJQn5KGlGpONz8AfPb+zULAD9gXGw A9DrGiOLO3DfrrdPn522VZE43HcWHtJKcishe4g6XqSeEVc8sm+PqM9hyOgQ1Gji TATG3DiVax4URMgmKWOrQqrr8+bCTrkRbYbIHkDMlBFk7fJ7rG+9RPbRDg3juvZm ccNwGsCPMNXRYBoYct8+GV4+QI72Sdq1TXVNIXstl+sP8x/uhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4BmhJWGlPVdVRqkycUHIFLwQAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZjU1OTA0NWUtNDQwNS0z OWFiLTg4MjQtM2UyMWQ4MWUxY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3takIVlukR1CFg+7jn+yLTlvqCcX+ICQZOylj9ch2+ih8Mo4+XSqe+ BCpuUbWHd3eNNFJq5YrM1UsLnaFaLqnx8+qV96VzHFoK6f2oy0lk+IAtNo1/TUUN A6ECkUgBug5tTYPpN9+j9At20qMvvqJ7+aFv79iym1ahozvjuuHOabBju/8/JgYU ke7/EHgSRPWSjjG36q/X1CxR5PV51xEM+6lq2/bs2W6gqto4FEvj1fVFPlePdqkz W0Dn2SlBzkVgO5MRKxjMqV9g703s22l+E/1gdbcTRybFf8QyJ5+M9vWKqd9lTPi4 EdIfZlvX26r2cPoTFd/2vGEeJLXU8G0= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:48 2026 by rpki-client