$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcf80343-8ddf-3f7f-8cd1-b44f56a6dfec.roa File: dcf80343-8ddf-3f7f-8cd1-b44f56a6dfec.roa (raw, json) Hash identifier: N8B/qZ0qvcAViwxPuRHM8m6EbJ4Dz8CHEmHw7k7AWY8= Subject key identifier: BD:A3:46:5E:CA:6E:36:2F:6E:E4:49:E1:2F:DC:12:71:01:1C:9E:F9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D100CF69DA514BCD735269D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcf80343-8ddf-3f7f-8cd1-b44f56a6dfec.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 31898 IP address blocks: 207.211.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:f6:9d:a5:14:bc:d7:35:26:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=1422c646-7250-4395-8001-045ae9d1bc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:75:bc:48:48:99:5d:ab:3e:dd:96:9a:e3: cc:b0:85:3f:23:f5:f5:52:79:d0:53:6b:28:49:8d: e9:b4:e4:70:70:f9:f6:87:1f:2c:d2:09:ba:d2:3e: 7d:a7:4f:60:0a:0a:88:e9:96:a0:e2:74:55:76:90: 65:5e:c2:1c:bb:ad:f1:36:81:4a:84:80:b3:75:aa: df:e5:e0:ef:db:71:58:3d:82:03:e4:8b:b8:7d:06: bd:34:30:7f:7c:dc:7a:0e:75:68:9c:19:1f:6d:d3: 6e:15:e8:be:00:0d:ad:04:ca:8c:4d:56:b5:fc:a1: 1c:03:1d:90:ba:84:f1:79:72:ae:e3:ad:ba:b9:cd: fe:dd:35:33:fe:ff:8e:86:0b:eb:de:39:3e:9e:89: a6:57:e2:5d:d5:2a:0e:6f:a2:9f:30:61:77:84:ac: 38:ef:d4:b2:20:72:12:d7:62:11:12:1d:10:1f:a6: 57:50:cf:b0:6a:4e:69:02:07:21:78:a6:c8:54:13: a5:bb:16:28:c7:57:dc:be:a1:8e:a9:25:53:3e:9b: ea:d1:bc:07:3e:db:72:34:49:a6:7c:d1:d1:dd:d8: 31:95:12:f1:08:b1:ed:dd:eb:f9:6b:66:5e:48:43: c3:32:67:c6:76:01:cf:80:4e:8f:11:46:cf:0a:af: 0e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A3:46:5E:CA:6E:36:2F:6E:E4:49:E1:2F:DC:12:71:01:1C:9E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcf80343-8ddf-3f7f-8cd1-b44f56a6dfec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.211.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b7:12:a3:fb:e8:05:ab:c1:2f:3e:a7:49:bd:97:19:ad:62: 58:54:76:fd:a7:9c:9a:d5:7e:15:f5:fc:ad:f6:fc:fa:ab:70: ae:93:ab:9b:a5:a2:24:dc:8a:9c:f3:e4:0a:bc:03:08:c1:8e: 59:91:e6:b9:da:86:82:4c:30:2a:fa:6c:12:40:4e:44:81:e8: f6:e8:ac:d7:f6:14:eb:f7:62:c2:b9:54:94:0a:2f:68:fc:2a: 44:d2:20:81:46:ea:27:c1:04:a1:03:1b:c1:ca:6e:15:c3:1b: ab:93:7e:dc:8e:59:70:c8:92:9c:db:77:26:8b:62:95:a5:75: 67:8d:6c:07:ff:6c:ba:cf:81:97:f5:f5:4e:e8:ff:f4:57:f7: a0:3f:ac:c7:7a:ed:ae:11:8f:a7:e3:a7:a4:11:0a:3e:d3:35: 00:24:cd:da:2f:78:6a:5e:e8:70:94:a6:d7:1b:6c:e8:04:16: 7a:ab:33:c6:2b:e7:3e:81:83:77:2a:9b:cf:5b:49:79:f0:2e: de:e1:38:e6:20:7d:7d:74:20:89:07:7f:7c:7e:45:71:18:84: 4b:82:3a:93:ef:bc:39:ee:18:a7:28:bf:04:6b:22:08:f2:38: 5e:fc:0c:d8:30:bb:f9:a2:66:34:21:a6:98:05:5f:3e:fa:b2: a7:af:30:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDPadpRS81zUmnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk MTQyMmM2NDYtNzI1MC00Mzk1LTgwMDEtMDQ1YWU5ZDFiYzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF91vEhImV2rPt2WmuPMsIU/I/X1UnnQU2so SY3ptORwcPn2hx8s0gm60j59p09gCgqI6Zag4nRVdpBlXsIcu63xNoFKhICzdarf 5eDv23FYPYID5Iu4fQa9NDB/fNx6DnVonBkfbdNuFei+AA2tBMqMTVa1/KEcAx2Q uoTxeXKu4626uc3+3TUz/v+Ohgvr3jk+nommV+Jd1SoOb6KfMGF3hKw479SyIHIS 12IREh0QH6ZXUM+wak5pAgcheKbIVBOluxYox1fcvqGOqSVTPpvq0bwHPttyNEmm fNHR3dgxlRLxCLHt3ev5a2ZeSEPDMmfGdgHPgE6PEUbPCq8OgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2jRl7KbjYvbuRJ4S/cEnEBHJ75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGNmODAzNDMtOGRkZi0z ZjdmLThjZDEtYjQ0ZjU2YTZkZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz9OgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi3EqP76AWrwS8+p0m9lxmtYlhUdv2nnJrVfhX1/K32/PqrcK6Tq5ul oiTcipzz5Aq8AwjBjlmR5rnahoJMMCr6bBJATkSB6PborNf2FOv3YsK5VJQKL2j8 KkTSIIFG6ifBBKEDG8HKbhXDG6uTftyOWXDIkpzbdyaLYpWldWeNbAf/bLrPgZf1 9U7o//RX96A/rMd67a4Rj6fjp6QRCj7TNQAkzdoveGpe6HCUptcbbOgEFnqrM8Yr 5z6Bg3cqm89bSXnwLt7hOOYgfX10IIkHf3x+RXEYhEuCOpPvvDnuGKcovwRrIgjy OF78DNgwu/miZjQhppgFXz76sqevMAs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:55:33 2026 by rpki-client