$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1401b0c4-d91e-39e5-a284-5f7817afcaab.roa File: 1401b0c4-d91e-39e5-a284-5f7817afcaab.roa (raw, json) Hash identifier: wiD7nQ4g4p9HWTUpuGTjVLvR6DtY8DPrIlW3KglJe28= Subject key identifier: 6A:C1:B6:C7:75:1F:ED:8F:4E:B0:38:FB:3E:A1:BE:A2:E3:59:77:6F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CF6ECD0BB820C267B10BB23B0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1401b0c4-d91e-39e5-a284-5f7817afcaab.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 54801 IP address blocks: 207.56.0.0/17 maxlen: 24 207.56.128.0/18 maxlen: 24 207.56.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d0:bb:82:0c:26:7b:10:bb:23:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=0770a5d5-8e89-416b-8bc7-fd255f148ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:a9:20:64:77:9f:11:99:d9:2f:d3:f7:b6: db:68:52:60:4d:07:b5:b8:ba:22:86:43:48:9c:7e: de:51:81:1d:4a:99:21:dd:e7:f3:2a:f0:ee:30:d0: e7:c8:cf:b9:a3:53:df:04:d7:f7:3a:d2:ee:2f:a0: 94:48:0b:86:22:d4:66:82:87:7d:61:9b:f3:4d:38: a5:14:d6:8c:73:ef:54:45:5f:c6:33:d8:30:23:20: 03:d6:d0:60:04:a3:a3:0e:85:f9:e6:0f:31:35:57: d0:fa:40:a2:2a:61:2c:92:04:e4:96:3d:bd:6d:f4: d5:1b:e5:10:95:94:13:1d:96:ec:a6:ba:14:2d:60: 18:0c:eb:60:ff:ca:90:08:21:61:8b:a5:93:12:08: 7f:c7:80:03:a1:6b:e5:1e:c5:0d:39:7b:22:84:54: 60:a2:35:10:00:b6:ea:5c:ce:4e:a3:1f:41:55:16: 5e:2b:36:3b:86:b4:ad:fd:5f:50:8f:34:f3:9b:33: 8d:5b:b9:dd:44:35:d1:3d:6f:44:7d:3a:34:dc:84: bb:63:bb:18:60:1b:f6:d2:43:fe:b4:c4:14:11:ee: c5:3d:bc:10:22:65:7b:4d:a3:da:12:d0:f5:94:91: 02:c4:c4:15:05:16:ef:49:24:27:39:85:bc:10:68: 99:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C1:B6:C7:75:1F:ED:8F:4E:B0:38:FB:3E:A1:BE:A2:E3:59:77:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1401b0c4-d91e-39e5-a284-5f7817afcaab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.56.0.0-207.56.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:8b:8a:ba:ae:ea:df:2a:55:9a:39:5f:42:6c:02:f5:75:73: d6:ea:d3:32:c5:6b:17:78:05:78:81:c1:22:b0:4e:2e:22:cd: f1:3d:01:7a:98:6d:41:7e:3d:e5:00:99:72:e1:37:58:de:c9: 92:a4:22:eb:a6:db:ab:c0:6d:57:f2:aa:62:d2:1a:c2:5e:ed: e6:a5:22:fc:37:80:77:91:4a:09:fb:3e:96:d1:fb:be:c2:cd: b2:96:8d:2b:2f:6d:66:fa:b0:c3:71:7b:2a:5d:1c:94:e0:56: f3:67:a1:56:ba:2a:fa:f8:62:aa:1d:75:48:3e:53:ff:46:00: 06:7f:bc:69:67:b9:e9:b7:8b:3d:0f:53:51:33:31:9b:57:9a: 3c:6d:3f:f7:e7:7a:f1:4e:47:b2:45:f4:6e:3c:5b:11:21:fe: 12:84:af:1e:0b:ee:aa:40:dc:cc:18:22:ba:26:9b:74:5c:81: ee:2f:d6:9b:6e:2a:a1:35:0b:e3:00:1e:86:c7:3a:6e:0b:9d: 00:07:c4:a2:16:1c:b6:83:05:65:6d:4f:2a:0d:29:df:54:07: fc:93:6b:e7:ce:72:32:b2:53:41:ce:25:e8:a4:c4:b7:bf:55: 3e:2e:8a:02:24:78:c8:97:cf:f0:3f:91:b9:28:c7:91:02:30: 41:16:e4:08 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEz27NC7ggwmexC7I7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk MDc3MGE1ZDUtOGU4OS00MTZiLThiYzctZmQyNTVmMTQ4ZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPapIGR3nxGZ2S/T97bbaFJgTQe1uLoihkNI nH7eUYEdSpkh3efzKvDuMNDnyM+5o1PfBNf3OtLuL6CUSAuGItRmgod9YZvzTTil FNaMc+9URV/GM9gwIyAD1tBgBKOjDoX55g8xNVfQ+kCiKmEskgTklj29bfTVG+UQ lZQTHZbsproULWAYDOtg/8qQCCFhi6WTEgh/x4ADoWvlHsUNOXsihFRgojUQALbq XM5Oox9BVRZeKzY7hrSt/V9QjzTzmzONW7ndRDXRPW9EfTo03IS7Y7sYYBv20kP+ tMQUEe7FPbwQImV7TaPaEtD1lJECxMQVBRbvSSQnOYW8EGiZbwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFGrBtsd1H+2PTrA4+z6hvqLjWXdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTQwMWIwYzQtZDkxZS0z OWU1LWEyODQtNWY3ODE3YWZjYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwPPOAME Bc84wDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAti4q6rurfKlWaOV9CbAL1dXPW6tMyxWsXeAV4gcEisE4u Is3xPQF6mG1Bfj3lAJly4TdY3smSpCLrpturwG1X8qpi0hrCXu3mpSL8N4B3kUoJ +z6W0fu+ws2ylo0rL21m+rDDcXsqXRyU4FbzZ6FWuir6+GKqHXVIPlP/RgAGf7xp Z7npt4s9D1NRMzGbV5o8bT/353rxTkeyRfRuPFsRIf4ShK8eC+6qQNzMGCK6Jpt0 XIHuL9abbiqhNQvjAB6GxzpuC50AB8SiFhy2gwVlbU8qDSnfVAf8k2vnznIyslNB ziXopMS3v1U+LooCJHjIl8/wP5G5KMeRAjBBFuQI -----END CERTIFICATE-----Generated at Mon Mar 2 10:00:49 2026 by rpki-client