$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa File: dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa (raw, json) Hash identifier: aa8GnoI3zQ3ecWxVPgDJwvCJK5un+iCgOY/xH/OFJtQ= Subject key identifier: 52:72:12:FE:F2:E4:4D:6F:96:C8:77:1D:AB:AF:2F:28:8A:57:8C:17 Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Certificate serial: 010D0C9F4328584F480D3D7042269A71B4CEC0C0 Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 395915 IP address blocks: 207.2.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:3d:70:42:26:9a:71:b4:ce:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=bfd2d7c4-381b-45aa-a962-a476bbbc054d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b3:63:b6:4a:02:96:c3:50:81:5e:67:34:40: 5d:66:f9:aa:fd:cb:98:2d:00:ad:f4:e5:24:25:6b: 90:f6:45:51:47:d2:81:ce:42:cb:1c:f5:98:6b:82: df:b4:13:b4:86:0b:fb:22:5d:65:2a:0e:86:16:6d: dc:c9:e2:72:5d:75:3e:91:3c:4a:ed:35:65:17:59: 7c:09:27:b3:07:fe:6d:2e:4f:dc:79:02:de:06:0e: ad:63:c0:be:68:65:59:4b:6d:ec:41:d1:3c:8d:90: 4d:39:11:65:db:be:d8:11:91:4e:b5:ce:d1:e6:58: bb:1a:b8:07:00:4e:55:52:d9:64:df:31:73:26:aa: 0f:91:f3:58:ed:aa:6f:ae:ad:dd:88:d5:ca:c1:b4: cd:06:03:79:ec:de:29:3f:52:6f:9c:33:b7:83:86: 14:6b:fe:10:cc:e6:c8:33:7d:6b:0b:74:0e:2f:7e: db:1e:ac:af:bb:96:f5:0a:96:cf:49:42:77:8b:32: 22:8b:cc:dc:1f:92:24:15:89:e3:d1:26:f0:eb:71: 9e:71:ff:1a:b4:a4:ee:db:9f:9a:7f:fe:77:17:2e: 9e:a4:29:b0:90:a5:d1:60:99:ea:d4:4f:13:fc:0f: 96:a8:f9:49:22:4e:bc:8a:59:ae:2c:6e:29:20:b1: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:72:12:FE:F2:E4:4D:6F:96:C8:77:1D:AB:AF:2F:28:8A:57:8C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl X509v3 Authority Key Identifier: keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer sbgp-ipAddrBlock: critical IPv4: 207.2.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:81:f3:be:30:69:08:f9:f1:b1:96:6d:db:3a:0c:d3:71:eb: ec:24:84:dc:43:07:fe:0a:9e:02:ce:4a:4b:43:cf:0d:f7:41: 1e:f1:31:24:67:bd:6e:16:64:25:e1:77:21:a7:b3:74:22:17: 63:f1:d3:83:55:a8:16:3e:5f:91:73:22:3d:dd:90:e3:71:0d: 7b:e5:11:7d:c4:06:42:e6:ac:85:ef:fb:25:8d:5c:8f:10:31: fe:bc:7f:ea:7d:e5:f0:94:de:9d:50:a5:ae:38:cd:6a:d5:85: 3f:9f:e6:f1:fb:a0:ae:c8:69:c9:3b:82:eb:44:b7:18:84:72: 3a:3d:3f:0a:6c:7d:dc:ef:ed:5d:34:b3:80:90:60:a7:fe:de: 25:55:87:4c:ca:3c:7a:fd:99:32:72:20:30:0e:64:9b:25:37: 17:a1:7e:c5:5c:c0:4b:4d:b9:87:c3:9b:63:3f:35:39:bb:5c: 3a:80:54:ee:d0:ff:4d:f9:9e:40:a3:57:bb:0d:cd:f7:d6:c0: de:b2:f2:e7:9c:09:62:2b:0b:c1:87:08:c8:36:da:86:34:ab: e0:0c:29:d1:b6:61:48:47:7c:9c:30:d2:4f:bb:aa:66:4e:70: 77:e5:a1:d3:9b:53:12:fa:a3:8b:a3:83:20:84:8c:a5:b8:8c: d7:30:0f:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDT1wQiaacbTOwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx MWRkMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YmZkMmQ3YzQtMzgxYi00NWFhLWE5NjItYTQ3NmJiYmMwNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7NjtkoClsNQgV5nNEBdZvmq/cuYLQCt9OUk JWuQ9kVRR9KBzkLLHPWYa4LftBO0hgv7Il1lKg6GFm3cyeJyXXU+kTxK7TVlF1l8 CSezB/5tLk/ceQLeBg6tY8C+aGVZS23sQdE8jZBNORFl277YEZFOtc7R5li7GrgH AE5VUtlk3zFzJqoPkfNY7apvrq3diNXKwbTNBgN57N4pP1JvnDO3g4YUa/4QzObI M31rC3QOL37bHqyvu5b1CpbPSUJ3izIii8zcH5IkFYnj0Sbw63Gecf8atKTu25+a f/53Fy6epCmwkKXRYJnq1E8T/A+WqPlJIk68ilmuLG4pILG0RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJyEv7y5E1vlsh3HauvLyiKV4wXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvZGMyMzAwYTgtMDMzNC0z YWRiLWI3ZjEtM2MyZDE4MGQ0ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh YjYzYzExZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzwJ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2B874waQj58bGWbds6DNNx6+wkhNxDB/4KngLOSktDzw33QR7xMSRn vW4WZCXhdyGns3QiF2Px04NVqBY+X5FzIj3dkONxDXvlEX3EBkLmrIXv+yWNXI8Q Mf68f+p95fCU3p1Qpa44zWrVhT+f5vH7oK7Iack7gutEtxiEcjo9Pwpsfdzv7V00 s4CQYKf+3iVVh0zKPHr9mTJyIDAOZJslNxehfsVcwEtNuYfDm2M/NTm7XDqAVO7Q /035nkCjV7sNzffWwN6y8uecCWIrC8GHCMg22oY0q+AMKdG2YUhHfJww0k+7qmZO cHflodObUxL6o4ujgyCEjKW4jNcwDy4= -----END CERTIFICATE-----Generated at Tue Sep 29 21:18:45 2026 by rpki-client