$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa File: b7f49026-ae81-329a-8ec0-a16f2a074f88.roa (raw, json) Hash identifier: xSc+XedmzDxOckwwbKNjMg9FUw1eD9IgHX7bNHlIorU= Subject key identifier: 4E:2B:0B:29:46:00:03:43:9E:94:85:BB:3A:03:FD:16:69:F4:5C:91 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584CC61200E676CFCA463E021D00 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 14618 IP address blocks: 207.202.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:00:e6:76:cf:ca:46:3e:02:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=cb798982-2d49-4098-a041-177eb154ac89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9c:ee:2b:e2:76:2d:79:67:95:cb:79:e1:30: 4d:34:2b:1c:4b:2a:e0:87:1f:ab:66:fb:a4:ca:d4: 82:e5:59:7c:9a:a1:4f:a6:79:59:09:6e:ee:ea:5b: 48:c0:62:43:a4:d0:0a:0b:e3:aa:71:25:b6:45:a6: ab:24:24:37:fa:10:25:68:c5:ba:b0:00:4c:4b:28: 4a:81:ab:b8:70:d7:02:93:b9:be:eb:cc:bb:63:2b: 28:4b:d9:ea:ca:7d:30:bd:20:9f:76:02:c6:4b:ba: 56:a5:5d:52:6a:9f:e6:aa:04:35:59:6c:cb:51:28: 14:30:c2:4b:bf:1a:5b:14:35:49:f7:11:22:74:b7: 7b:1a:0d:8b:44:ba:15:2e:4d:48:2d:08:ba:cb:2d: a9:68:dc:ff:83:e8:93:4a:2b:d7:de:47:ac:bb:c6: e0:7e:21:e3:6a:78:72:4e:82:14:a0:c5:7c:2c:1f: db:5c:0d:eb:83:7a:15:e8:29:0a:2f:a5:e2:98:83: 0f:82:83:7e:59:3a:c7:16:0f:95:a5:4a:dc:67:44: 07:38:1d:e0:52:90:9d:85:52:04:02:d6:4a:38:c9: 9a:3a:42:e7:04:82:0a:60:a1:88:68:49:c1:6b:cf: db:bd:a3:50:83:2a:6b:2f:67:1b:7d:38:00:e3:46: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2B:0B:29:46:00:03:43:9E:94:85:BB:3A:03:FD:16:69:F4:5C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:17:63:d8:97:56:d4:24:43:98:8a:83:ec:f0:45:d8:1a:a9: c0:44:9c:3e:07:58:b2:e7:73:29:de:f4:8b:da:29:cb:01:50: a8:ab:93:d6:cf:b2:3e:41:a9:8c:e4:b0:bb:24:5b:32:b3:4b: af:3c:3d:db:4e:c2:f4:b9:41:81:3c:0c:63:6a:05:d3:3b:88: ec:b0:62:3d:71:04:96:d0:f5:9a:75:95:61:e1:0f:94:41:50: 73:95:5d:f1:d4:fc:65:a5:ef:b6:76:6d:11:e7:ec:c1:5a:3f: 41:12:1f:25:4c:34:00:cd:3d:3a:f0:e3:61:1e:b5:8c:98:ed: d8:65:e7:fb:46:6f:07:bf:b7:b5:15:fb:aa:25:f0:3d:90:61: 52:10:37:ea:c3:a5:c4:d3:49:d9:01:2f:58:68:7b:50:4e:68: 82:ed:cf:24:05:1e:44:65:e5:72:f0:60:71:cb:d5:86:ca:78: 79:2d:b4:96:bd:12:7a:f7:dd:e5:cf:16:0d:e8:5c:4a:89:0b: d7:af:91:42:b3:70:dd:59:e4:b0:44:b7:3c:13:74:16:f3:b1: ba:18:c5:57:f9:77:76:a8:e8:c2:31:6b:3e:98:55:ef:0d:89: 2f:2b:09:f3:e4:70:c8:77:67:e0:3e:93:e6:94:2a:6d:1b:74: c8:ec:26:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEgDmds/KRj4CHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk Y2I3OTg5ODItMmQ0OS00MDk4LWEwNDEtMTc3ZWIxNTRhYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZzuK+J2LXlnlct54TBNNCscSyrghx+rZvuk ytSC5Vl8mqFPpnlZCW7u6ltIwGJDpNAKC+OqcSW2RaarJCQ3+hAlaMW6sABMSyhK gau4cNcCk7m+68y7YysoS9nqyn0wvSCfdgLGS7pWpV1Sap/mqgQ1WWzLUSgUMMJL vxpbFDVJ9xEidLd7Gg2LRLoVLk1ILQi6yy2paNz/g+iTSivX3kesu8bgfiHjanhy ToIUoMV8LB/bXA3rg3oV6CkKL6XimIMPgoN+WTrHFg+VpUrcZ0QHOB3gUpCdhVIE AtZKOMmaOkLnBIIKYKGIaEnBa8/bvaNQgyprL2cbfTgA40apnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4rCylGAANDnpSFuzoD/RZp9FyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYjdmNDkwMjYtYWU4MS0z MjlhLThlYzAtYTE2ZjJhMDc0Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEXY9iXVtQkQ5iKg+zwRdgaqcBEnD4HWLLncyne9IvaKcsBUKirk9bP sj5BqYzksLskWzKzS688PdtOwvS5QYE8DGNqBdM7iOywYj1xBJbQ9Zp1lWHhD5RB UHOVXfHU/GWl77Z2bRHn7MFaP0ESHyVMNADNPTrw42EetYyY7dhl5/tGbwe/t7UV +6ol8D2QYVIQN+rDpcTTSdkBL1hoe1BOaILtzyQFHkRl5XLwYHHL1YbKeHkttJa9 Enr33eXPFg3oXEqJC9evkUKzcN1Z5LBEtzwTdBbzsboYxVf5d3ao6MIxaz6YVe8N iS8rCfPkcMh3Z+A+k+aUKm0bdMjsJpI= -----END CERTIFICATE-----Generated at Mon Mar 2 18:50:10 2026 by rpki-client