$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa File: c432c5a4-ed04-3547-9d82-8353164b23d8.roa (raw, json) Hash identifier: 5ezWu7m7pZ+TGae6GYNhlxJ4UvbzYOND55bzLxamYqg= Subject key identifier: 40:0F:A4:07:59:14:58:07:3E:39:14:7D:C7:10:F1:F5:A6:82:BE:D5 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584F49740F98E30BF817BFBAA5A0 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16409 IP address blocks: 207.114.24.0/24 maxlen: 24 207.114.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0f:98:e3:0b:f8:17:bf:ba:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b580a8bf-5ed4-4db9-aa31-ca02567e76af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:6b:69:01:0b:e6:c5:39:41:7c:c0:51:59: 16:94:b6:b7:e0:80:1d:9d:4e:dd:f5:d7:0a:3d:0d: c7:c4:3b:3e:85:3d:f4:66:cb:41:54:9b:17:bd:b0: 5e:6a:62:04:16:ec:e4:51:b4:be:46:dc:46:fa:b2: c6:41:75:e9:eb:82:40:6c:ba:db:ad:3a:05:9b:50: 67:03:54:aa:ac:62:bc:1a:01:0d:39:72:93:04:39: 14:04:c4:2b:19:85:a9:1e:82:ad:18:68:46:0d:6b: 0b:d7:ac:4c:f6:7d:f8:ba:21:f8:21:c4:72:7c:67: ae:e7:92:e5:0f:a0:2f:d7:40:69:99:66:52:57:92: ad:0f:e5:bf:48:c2:19:d7:1a:f5:c2:7c:3a:e4:81: c7:1e:06:71:de:21:56:06:6e:3e:43:30:0a:9b:b9: 17:2a:c7:ed:ed:17:3f:e4:31:c9:6d:e6:79:22:48: 74:11:41:f6:05:06:3b:af:ca:21:d0:9a:e4:a8:27: 6c:44:fb:40:0f:d8:ba:3b:7d:d9:83:f1:ea:16:58: 56:2f:3e:19:de:16:1e:2b:8f:b8:6e:cd:fd:3a:fa: 07:30:31:c2:e3:ce:83:2f:68:1d:ad:82:d7:1a:8c: 41:ad:55:7a:20:4a:db:41:cd:d2:3f:97:cb:05:63: b4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0F:A4:07:59:14:58:07:3E:39:14:7D:C7:10:F1:F5:A6:82:BE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 207.114.24.0/24 207.114.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:0c:e4:41:7d:d9:de:73:19:af:8f:a5:7a:12:7b:a8:6c:b7: 53:01:86:36:19:f7:fc:5e:5d:61:04:c1:aa:4c:de:1d:9c:64: ce:1f:d9:1b:d7:44:d0:c2:ad:aa:47:9b:29:de:57:c3:07:13: 01:e3:45:f9:5e:d3:0a:5f:5f:29:e1:14:80:53:3a:df:99:11: de:5a:f3:05:01:8c:0f:7b:bb:64:ce:62:0b:cf:99:90:3d:8e: 8d:65:ec:42:42:12:a7:3c:79:98:b2:42:a3:6b:ce:73:43:7d: b5:eb:1e:53:b4:52:6e:82:98:2f:e2:16:e5:c2:c0:1e:38:f5: 3e:62:38:ae:ec:f5:ea:19:9a:2c:6e:00:f5:f8:3f:3a:9f:af: 35:b4:5e:86:0b:24:79:1c:96:67:41:64:db:a1:25:5d:c0:97: 59:69:68:77:c9:8d:e2:15:65:fb:8c:cd:32:4f:49:e0:2b:c0: 3f:28:01:dd:75:92:96:d9:1d:be:ce:92:c9:88:d8:1f:1c:c5: 1c:ba:6f:5c:db:46:4a:7b:b1:16:37:59:a4:b4:fd:76:ca:08: 5a:8c:0b:62:43:aa:e6:e1:84:d4:7d:2d:e5:7c:46:08:9e:e4: 9e:1a:99:2b:f4:cb:22:b5:e4:70:b3:e4:95:ba:66:a8:de:d6: 35:f0:81:1e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdA+Y4wv4F7+6paAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjU4MGE4YmYtNWVkNC00ZGI5LWFhMzEtY2EwMjU2N2U3NmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9VraQEL5sU5QXzAUVkWlLa34IAdnU7d9dcK PQ3HxDs+hT30ZstBVJsXvbBeamIEFuzkUbS+RtxG+rLGQXXp64JAbLrbrToFm1Bn A1SqrGK8GgENOXKTBDkUBMQrGYWpHoKtGGhGDWsL16xM9n34uiH4IcRyfGeu55Ll D6Av10BpmWZSV5KtD+W/SMIZ1xr1wnw65IHHHgZx3iFWBm4+QzAKm7kXKsft7Rc/ 5DHJbeZ5Ikh0EUH2BQY7r8oh0JrkqCdsRPtAD9i6O33Zg/HqFlhWLz4Z3hYeK4+4 bs39OvoHMDHC486DL2gdrYLXGoxBrVV6IErbQc3SP5fLBWO0GwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEAPpAdZFFgHPjkUfccQ8fWmgr7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYzQzMmM1YTQtZWQwNC0z NTQ3LTlkODItODM1MzE2NGIyM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz3IYAwQD z3IgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH4M5EF92d5zGa+PpXoSe6hst1MBhjYZ9/xeXWEEwapM3h2c ZM4f2RvXRNDCrapHmyneV8MHEwHjRfle0wpfXynhFIBTOt+ZEd5a8wUBjA97u2TO YgvPmZA9jo1l7EJCEqc8eZiyQqNrznNDfbXrHlO0Um6CmC/iFuXCwB449T5iOK7s 9eoZmixuAPX4PzqfrzW0XoYLJHkclmdBZNuhJV3Al1lpaHfJjeIVZfuMzTJPSeAr wD8oAd11kpbZHb7OksmI2B8cxRy6b1zbRkp7sRY3WaS0/XbKCFqMC2JDqubhhNR9 LeV8Rgie5J4amSv0yyK15HCz5JW6Zqje1jXwgR4= -----END CERTIFICATE-----Generated at Sat Oct 10 17:03:53 2026 by rpki-client