$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa File: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (raw, json) Hash identifier: NF4okbmdhvs6XDmqdzURYyVig6i0FtAdH+1Q9jyPq8I= Subject key identifier: 2F:80:B3:E8:22:99:2E:C9:2F:1A:2E:AA:03:F1:D6:EA:0A:DD:5F:9E Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584EA797FD836D64EC3A1A2714D0 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400564 IP address blocks: 207.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:fd:83:6d:64:ec:3a:1a:27:14:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b7bc2977-574b-475b-8511-6b5a8a57a34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b9:73:fd:91:0c:7c:83:46:05:26:c1:23:8d: f7:3f:84:ff:0d:a9:50:dc:de:41:89:0b:f0:c5:63: eb:33:ac:a3:34:72:ea:95:7e:08:a4:36:ca:1c:5f: 56:80:ec:53:4e:9f:41:aa:b6:99:cb:2d:cc:a0:a4: 17:82:50:e0:b7:76:d0:11:58:dd:2d:48:0f:dc:a2: 4f:55:aa:52:1b:38:46:03:49:f7:f3:a5:08:4b:68: 18:ec:bc:fe:9e:9d:9a:04:9f:e6:f2:9d:89:c6:6f: 67:0a:9d:24:b4:a0:b9:ed:d8:13:52:98:51:5e:5e: 27:73:8b:97:71:c8:91:66:15:27:bb:d9:c1:96:36: d0:be:2e:7a:a7:f3:50:c5:40:f7:bc:b0:37:8c:2e: 02:74:ca:c3:8d:65:e5:21:5f:bc:da:53:38:31:55: 74:eb:c4:99:74:4c:eb:c8:01:3b:f3:25:f1:a2:bd: 35:57:a1:95:6c:5c:96:4a:b5:aa:53:ba:ac:98:e8: 0b:4f:f5:12:97:89:1c:83:6f:f7:08:68:33:18:bb: ee:28:f5:59:46:50:12:9e:f7:45:8f:5b:cc:4b:ba: c0:97:3b:64:86:96:ca:2e:95:18:b8:37:75:bf:b6: 61:c6:e4:fb:75:78:d3:89:33:72:a2:da:b2:e7:90: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:80:B3:E8:22:99:2E:C9:2F:1A:2E:AA:03:F1:D6:EA:0A:DD:5F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 207.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:4e:53:91:4b:26:4a:f1:ca:ac:9a:55:20:d3:d7:2a:17:3d: bb:61:47:80:8f:b4:09:35:6b:c6:c5:0f:41:7e:a0:20:87:28: 37:37:fa:8d:5c:ef:3f:28:4f:09:1c:73:43:f1:bf:68:a3:6e: 3b:12:00:82:99:fd:40:ac:74:12:09:08:f3:7a:2d:c5:2b:0a: 31:4c:f7:3c:0e:c7:23:20:80:5e:54:86:e7:4a:3e:56:2a:8e: fc:1e:73:89:6d:8e:4a:c8:48:5e:12:d1:c9:ac:09:ea:e2:ce: b4:5a:e8:6f:26:0e:4a:97:8b:30:9d:ea:99:32:63:c4:df:0c: af:60:ea:c9:8b:bd:12:2c:fc:89:d4:a0:8e:e4:61:3b:4b:fb: 7a:91:6e:44:6f:33:6e:1b:89:4c:2b:24:39:67:f7:f6:6a:fc: b3:be:b6:37:35:bb:04:0e:d0:07:d4:b9:6b:d8:df:da:e7:cc: 98:74:49:c7:c7:15:41:75:6d:00:6c:bb:6a:cb:03:07:5f:7d: 3c:26:58:53:34:af:ef:a9:e5:3e:c7:9e:bc:36:ff:94:a4:39: 89:f2:ac:cb:f9:62:4e:b5:fe:22:12:d3:91:68:9f:83:2a:4a: bf:96:44:81:44:f5:ad:4a:8d:57:20:66:11:5c:f8:1d:a8:c8: 83:fe:4d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl/2DbWTsOhonFNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjdiYzI5NzctNTc0Yi00NzViLTg1MTEtNmI1YThhNTdhMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjblz/ZEMfINGBSbBI433P4T/DalQ3N5BiQvw xWPrM6yjNHLqlX4IpDbKHF9WgOxTTp9BqraZyy3MoKQXglDgt3bQEVjdLUgP3KJP VapSGzhGA0n386UIS2gY7Lz+np2aBJ/m8p2Jxm9nCp0ktKC57dgTUphRXl4nc4uX cciRZhUnu9nBljbQvi56p/NQxUD3vLA3jC4CdMrDjWXlIV+82lM4MVV068SZdEzr yAE78yXxor01V6GVbFyWSrWqU7qsmOgLT/USl4kcg2/3CGgzGLvuKPVZRlASnvdF j1vMS7rAlztkhpbKLpUYuDd1v7ZhxuT7dXjTiTNyotqy55Bb4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+As+gimS7JLxouqgPx1uoK3V+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvMjhkYjUzODgtMzAyOC0z MzcyLTgyYjctMGU1MWY3ZjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz64UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9OU5FLJkrxyqyaVSDT1yoXPbthR4CPtAk1a8bFD0F+oCCHKDc3+o1c 7z8oTwkcc0Pxv2ijbjsSAIKZ/UCsdBIJCPN6LcUrCjFM9zwOxyMggF5UhudKPlYq jvwec4ltjkrISF4S0cmsCerizrRa6G8mDkqXizCd6pkyY8TfDK9g6smLvRIs/InU oI7kYTtL+3qRbkRvM24biUwrJDln9/Zq/LO+tjc1uwQO0AfUuWvY39rnzJh0ScfH FUF1bQBsu2rLAwdffTwmWFM0r++p5T7Hnrw2/5SkOYnyrMv5Yk61/iIS05Fon4Mq Sr+WRIFE9a1KjVcgZhFc+B2oyIP+TcE= -----END CERTIFICATE-----Generated at Wed Jul 29 07:15:38 2026 by rpki-client