$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/be10d715-cde8-370b-b1a5-ab9f3ca6a409.roa File: be10d715-cde8-370b-b1a5-ab9f3ca6a409.roa (raw, json) Hash identifier: FNiwL/WBhnNwg2VogSHTtUeWEdQFXH+03dXGVYNmVmU= Subject key identifier: 28:BA:58:B5:AA:07:CE:65:AE:54:22:D6:26:15:66:E0:5E:60:F5:92 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F5689DE001347F533B747FC80 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/be10d715-cde8-370b-b1a5-ab9f3ca6a409.roa Signing time: Tue 29 Sep 2026 17:32:45 +0000 ROA not before: Tue 29 Sep 2026 17:32:45 +0000 ROA not after: Mon 28 Dec 2026 18:32:45 +0000 asID: 16509 IP address blocks: 207.202.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:89:de:00:13:47:f5:33:b7:47:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 29 17:32:45 2026 GMT Not After : Dec 28 18:32:45 2026 GMT Subject: CN=8c8d2f4f-d0fe-40aa-b181-3a7931463503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:79:5f:d0:bc:ea:52:0a:33:61:64:1c:0e: bb:b0:aa:4f:56:34:9f:23:ef:10:77:5a:ab:6e:90: 83:9b:bc:d8:96:c0:d9:1c:ec:8d:bb:ba:27:6b:da: 14:de:1f:92:c3:1c:9e:64:4d:7e:ac:e3:7e:ce:66: 78:95:ee:32:39:87:07:fe:4d:77:03:2d:07:ae:8f: 66:a4:20:07:67:b6:7f:06:ad:e6:f3:ee:15:f2:4e: 8a:13:31:3b:ee:cf:f5:8c:c2:b4:c5:38:0f:1b:ff: d2:ce:33:a3:c2:29:14:79:55:0f:5e:1a:39:12:c9: 26:19:3a:8b:e1:2b:20:7a:b1:36:81:92:77:78:18: 57:8c:39:91:f5:e9:f8:72:1b:e6:3f:56:35:6b:93: 8a:d2:14:3b:17:5d:11:42:4b:f6:25:25:2d:e9:f1: 5d:1a:5a:ce:da:e0:49:e7:75:50:4b:82:c5:bd:9f: 67:f9:2b:81:a0:bb:bf:3c:6f:64:e3:7a:07:6a:ee: 1c:b5:02:08:38:7a:0d:19:d5:e7:75:90:a8:51:b9: 56:56:b1:a0:6e:88:c1:c6:0a:34:ef:1c:e0:51:91: d0:aa:31:a4:4f:3e:e4:b0:8d:76:a4:10:18:c6:3f: 3a:6d:40:cc:99:1e:04:a4:92:2f:44:66:9a:3d:74: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BA:58:B5:AA:07:CE:65:AE:54:22:D6:26:15:66:E0:5E:60:F5:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/be10d715-cde8-370b-b1a5-ab9f3ca6a409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:20:be:bf:0a:47:b3:22:e5:d4:ca:a4:9d:78:fa:6e:5e:ea: a0:fb:e6:3d:b0:5b:24:10:6a:d3:bd:76:c1:b7:c3:00:9d:34: 58:f3:66:51:53:51:85:ba:4e:01:9e:75:dc:5a:49:ea:d8:b4: a9:12:f4:06:90:84:64:c6:f0:4a:12:44:db:4c:b9:32:46:aa: 83:b4:9c:d9:f9:7b:2d:fa:80:46:66:63:fc:cc:2d:3e:f4:6b: 91:9e:7d:a5:e6:b0:df:cb:24:ce:62:f9:d5:86:48:01:c7:c8: 4d:da:b0:0d:2f:39:cc:ee:c8:ad:25:bc:45:59:a2:78:d6:0e: 99:85:45:17:90:f3:bc:1e:00:11:55:51:8e:e6:0a:2d:8f:fb: 70:15:67:aa:26:63:ca:06:d6:1a:f4:1b:4c:54:0b:44:55:6e: 76:8e:52:76:ed:bd:21:5e:c8:e3:96:5d:df:95:36:c5:3a:9f: b7:e8:3e:ce:6f:91:21:86:9f:60:99:ce:5b:84:c5:5e:9b:a5: 1c:7b:3b:48:ca:e7:f6:ed:3b:79:50:53:62:b4:06:3d:73:f3: 05:02:3d:2f:15:1b:56:aa:63:b2:fe:49:97:b0:cc:29:d1:b2: 5c:a9:72:15:a4:70:b1:b5:97:6f:ee:f1:95:5f:5e:a1:b7:22: ac:50:3b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Wid4AE0f1M7dH/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkyOTE3MzI0NVoXDTI2MTIyODE4MzI0NVowLzEtMCsGA1UEAxMk OGM4ZDJmNGYtZDBmZS00MGFhLWIxODEtM2E3OTMxNDYzNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0J5X9C86lIKM2FkHA67sKpPVjSfI+8Qd1qr bpCDm7zYlsDZHOyNu7ona9oU3h+SwxyeZE1+rON+zmZ4le4yOYcH/k13Ay0Hro9m pCAHZ7Z/Bq3m8+4V8k6KEzE77s/1jMK0xTgPG//SzjOjwikUeVUPXho5EskmGTqL 4SsgerE2gZJ3eBhXjDmR9en4chvmP1Y1a5OK0hQ7F10RQkv2JSUt6fFdGlrO2uBJ 53VQS4LFvZ9n+SuBoLu/PG9k43oHau4ctQIIOHoNGdXndZCoUblWVrGgbojBxgo0 7xzgUZHQqjGkTz7ksI12pBAYxj86bUDMmR4EpJIvRGaaPXQkCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi6WLWqB85lrlQi1iYVZuBeYPWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYmUxMGQ3MTUtY2RlOC0z NzBiLWIxYTUtYWI5ZjNjYTZhNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ojMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIgvr8KR7Mi5dTKpJ14+m5e6qD75j2wWyQQatO9dsG3wwCdNFjzZlFT UYW6TgGeddxaSerYtKkS9AaQhGTG8EoSRNtMuTJGqoO0nNn5ey36gEZmY/zMLT70 a5GefaXmsN/LJM5i+dWGSAHHyE3asA0vOczuyK0lvEVZonjWDpmFRReQ87weABFV UY7mCi2P+3AVZ6omY8oG1hr0G0xUC0RVbnaOUnbtvSFeyOOWXd+VNsU6n7foPs5v kSGGn2CZzluExV6bpRx7O0jK5/btO3lQU2K0Bj1z8wUCPS8VG1aqY7L+SZewzCnR slypchWkcLG1l2/u8ZVfXqG3IqxQO90= -----END CERTIFICATE-----Generated at Thu Oct 8 12:21:01 2026 by rpki-client