$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa File: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (raw, json) Hash identifier: 0xeo9DJ6J3gdInMEDv8ws8UL00fbmngOrk0YYv6QYcA= Subject key identifier: E6:1E:72:42:CB:A4:3C:C7:6E:A8:D9:94:02:20:2D:C7:03:33:26:AA Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584DFA7077BAE68D7D684BC57C20 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 400564 IP address blocks: 207.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:77:ba:e6:8d:7d:68:4b:c5:7c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=150f7b7d-56c6-4f6b-9f1d-ef2264649475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:85:5c:ce:98:a2:d7:26:ee:5f:a3:7b:b9: e3:06:48:47:69:f2:1f:a7:1b:76:5f:46:7d:f4:67: 97:f5:cf:f3:5f:1e:a9:56:5d:98:30:02:92:09:f1: b2:53:f8:dd:2f:ca:56:7c:d8:72:a2:30:08:e6:ae: 82:61:26:89:76:8f:39:f9:9d:77:6a:c4:b5:ec:31: 7f:0c:76:3e:a2:51:e5:d6:94:ea:20:01:c0:22:c4: 01:de:bb:06:a7:b8:61:ee:55:d9:22:46:c8:21:c6: 40:1e:e3:35:bf:10:cc:aa:f1:62:38:9b:4d:a4:6e: 9c:cf:ba:c3:54:74:32:53:85:10:5d:fe:e5:34:63: 24:d8:e1:2e:20:c2:01:e8:9d:06:18:64:f1:8e:43: ff:41:26:5c:c5:b0:0a:f5:85:d4:1a:fe:01:98:3f: 90:68:83:19:6d:cb:59:7c:2e:df:8c:f8:03:f2:e0: 9e:2b:3b:4f:ad:09:36:cf:bf:0b:a4:31:84:b7:a5: 37:02:9c:c8:9e:93:52:c1:db:37:b9:61:52:68:43: 18:9f:44:5b:97:d1:41:8f:6f:ab:b1:3e:98:14:4c: 1d:89:52:aa:82:96:a8:bc:e5:3b:fe:ff:60:12:ca: c2:94:73:3f:39:f2:32:c3:a3:b6:c5:17:06:48:c2: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1E:72:42:CB:A4:3C:C7:6E:A8:D9:94:02:20:2D:C7:03:33:26:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 207.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:72:fd:1e:89:9c:47:9f:7f:d1:fa:f8:6e:ae:8f:9a:dc:1a: 2b:57:d7:53:5f:7c:6b:7d:50:00:07:4d:5a:43:25:4d:c6:a6: dd:51:9a:20:cb:7c:f8:2b:26:f5:0e:31:ae:4e:22:5a:4c:20: 2b:a3:c3:c2:a4:f0:bb:7b:fe:24:15:a3:eb:d2:2f:a5:92:5d: c3:fa:f5:34:3c:89:49:77:54:2d:45:78:8d:70:77:cd:9d:53: c4:bf:28:a4:06:68:6a:9e:65:9a:b8:1d:25:5b:4f:71:df:6a: 14:50:b7:cb:8b:1a:3b:bd:ee:95:5b:91:05:50:fe:7a:8c:c6: a9:75:97:99:41:64:14:eb:b1:dd:c3:96:94:0d:6e:6f:68:8b: a7:b8:c4:df:64:7e:ba:12:f3:6a:d7:55:aa:c0:a5:03:52:16: f0:8d:93:74:ad:cb:b9:a0:54:31:4a:08:61:f5:77:02:e5:8c: 36:7e:d8:44:e5:5d:0f:22:c7:38:40:08:4e:43:12:76:c6:78: b6:82:bd:17:07:61:51:d9:5c:99:06:7f:2e:34:f6:34:95:11: 50:48:5a:7d:92:9f:47:b4:bc:24:4a:4f:88:88:d3:c6:bd:2e: b4:e7:24:98:24:fe:ad:78:f5:79:28:40:87:bc:cb:9b:9c:13: a2:05:db:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHe65o19aEvFfCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MTUwZjdiN2QtNTZjNi00ZjZiLTlmMWQtZWYyMjY0NjQ5NDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheaFXM6Yotcm7l+je7njBkhHafIfpxt2X0Z9 9GeX9c/zXx6pVl2YMAKSCfGyU/jdL8pWfNhyojAI5q6CYSaJdo85+Z13asS17DF/ DHY+olHl1pTqIAHAIsQB3rsGp7hh7lXZIkbIIcZAHuM1vxDMqvFiOJtNpG6cz7rD VHQyU4UQXf7lNGMk2OEuIMIB6J0GGGTxjkP/QSZcxbAK9YXUGv4BmD+QaIMZbctZ fC7fjPgD8uCeKztPrQk2z78LpDGEt6U3ApzInpNSwds3uWFSaEMYn0Rbl9FBj2+r sT6YFEwdiVKqgpaovOU7/v9gEsrClHM/OfIyw6O2xRcGSMJteQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYeckLLpDzHbqjZlAIgLccDMyaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvMjhkYjUzODgtMzAyOC0z MzcyLTgyYjctMGU1MWY3ZjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz64UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFy/R6JnEeff9H6+G6uj5rcGitX11NffGt9UAAHTVpDJU3Gpt1RmiDL fPgrJvUOMa5OIlpMICujw8Kk8Lt7/iQVo+vSL6WSXcP69TQ8iUl3VC1FeI1wd82d U8S/KKQGaGqeZZq4HSVbT3HfahRQt8uLGju97pVbkQVQ/nqMxql1l5lBZBTrsd3D lpQNbm9oi6e4xN9kfroS82rXVarApQNSFvCNk3Sty7mgVDFKCGH1dwLljDZ+2ETl XQ8ixzhACE5DEnbGeLaCvRcHYVHZXJkGfy409jSVEVBIWn2Sn0e0vCRKT4iI08a9 LrTnJJgk/q149XkoQIe8y5ucE6IF21g= -----END CERTIFICATE-----Generated at Sat Jun 13 20:40:00 2026 by rpki-client