$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cd8f9856-a28e-3e09-a787-5862b11f776f.roa File: cd8f9856-a28e-3e09-a787-5862b11f776f.roa (raw, json) Hash identifier: Gc24DHeTGrbWDyoOegkBOMUnjRyIPoKSii98TU9L6ZQ= Subject key identifier: BC:29:26:A2:9D:D6:69:50:AF:AF:E6:BF:87:22:DF:8C:EC:CB:E5:3B Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F6292C8C57BA572BEE048C900 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cd8f9856-a28e-3e09-a787-5862b11f776f.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 16509 IP address blocks: 207.202.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:c8:c5:7b:a5:72:be:e0:48:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=8a8c4568-350f-4990-a63b-757705b047e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:e2:f7:30:22:5c:58:08:c1:3c:8a:49:7a: 11:de:29:75:9f:02:1b:27:fc:d7:5a:28:76:cd:94: 19:8f:10:35:c2:f0:80:b7:cf:eb:d6:29:dd:f7:7e: 19:a2:56:3d:b2:72:45:c0:db:48:de:6e:65:e2:49: 01:0e:8e:f4:32:63:24:22:09:a8:1e:c8:6d:40:5b: 41:2f:65:52:ca:54:0e:c1:0c:fb:84:92:03:0c:26: 25:0b:cb:c4:f3:df:d9:ff:83:53:bc:dc:db:d4:36: b2:4c:e5:7a:d5:41:b9:f4:48:83:68:95:ea:36:4b: e6:6a:3e:7f:b7:7e:42:aa:3f:c8:18:31:23:f3:fa: 26:89:e7:88:61:d7:c2:1b:cd:22:97:9c:03:f4:c3: 4d:9c:16:c2:c2:7d:79:d2:19:13:43:00:57:7b:97: 60:2b:2e:a7:5a:e0:27:27:09:04:1c:f8:f2:1d:78: 9d:c1:64:60:8c:27:27:5c:7d:17:e4:ef:5d:94:b1: a9:91:ca:9a:c9:d6:67:13:97:59:aa:b1:45:c2:ee: a6:32:bc:a8:36:f2:a3:60:db:fe:01:46:e9:5e:ab: 24:70:f3:f6:7a:a2:4f:d1:dd:fd:f0:61:49:db:c4: 24:e7:cf:61:77:7e:a2:f8:93:2e:32:c7:f5:d9:87: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:29:26:A2:9D:D6:69:50:AF:AF:E6:BF:87:22:DF:8C:EC:CB:E5:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cd8f9856-a28e-3e09-a787-5862b11f776f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ee:e3:47:af:38:5d:65:af:fa:8b:7b:b1:ef:f3:76:74:4c: 41:ec:32:27:a8:e8:3a:b4:8c:e8:32:2f:89:47:55:6b:cd:ca: 29:5e:e6:08:ab:42:11:0f:6c:e9:2f:ce:fa:a3:ab:0a:01:06: 12:40:2a:b7:b8:6b:aa:71:4f:c5:2c:e8:0a:02:27:c0:5d:e6: 27:3b:f1:ef:30:1d:59:58:af:74:81:cb:94:2b:a4:79:46:f6: 25:38:aa:b8:06:83:2b:79:34:6b:b4:63:9c:37:bc:dd:94:bd: 99:aa:9a:4c:2d:13:4a:b8:03:ba:e3:3d:59:be:bf:ed:a6:33: 93:3f:cf:2f:7e:12:9d:75:ab:53:a5:b9:a6:6a:d8:d4:57:52: 13:f9:bb:98:bb:6e:19:81:a4:67:a2:94:33:70:74:ef:4c:92: 85:1b:2d:ad:82:7b:50:6a:6a:64:c3:a9:8f:14:32:90:4f:0d: 32:13:c7:fb:f4:72:cb:e0:02:da:3b:5a:e6:47:9a:ac:26:a8: 48:f7:db:e3:c4:75:6e:aa:00:2b:50:b0:2e:41:5d:79:c5:64: 1e:e3:0f:21:7a:23:9c:1a:d9:e5:19:cd:b6:cb:3e:ba:f0:b8: 53:2a:81:62:4b:c8:84:b2:c5:b8:f3:8b:f2:c7:c5:d3:ff:a0: 48:52:03:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iksjFe6VyvuBIyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OGE4YzQ1NjgtMzUwZi00OTkwLWE2M2ItNzU3NzA1YjA0N2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv57i9zAiXFgIwTyKSXoR3il1nwIbJ/zXWih2 zZQZjxA1wvCAt8/r1ind934ZolY9snJFwNtI3m5l4kkBDo70MmMkIgmoHshtQFtB L2VSylQOwQz7hJIDDCYlC8vE89/Z/4NTvNzb1DayTOV61UG59EiDaJXqNkvmaj5/ t35Cqj/IGDEj8/omieeIYdfCG80il5wD9MNNnBbCwn150hkTQwBXe5dgKy6nWuAn JwkEHPjyHXidwWRgjCcnXH0X5O9dlLGpkcqaydZnE5dZqrFFwu6mMryoNvKjYNv+ AUbpXqskcPP2eqJP0d398GFJ28Qk589hd36i+JMuMsf12Ycc/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwpJqKd1mlQr6/mv4ci34zsy+U7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvY2Q4Zjk4NTYtYTI4ZS0z ZTA5LWE3ODctNTg2MmIxMWY3NzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ofMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvu40evOF1lr/qLe7Hv83Z0TEHsMieo6Dq0jOgyL4lHVWvNyile5gir QhEPbOkvzvqjqwoBBhJAKre4a6pxT8Us6AoCJ8Bd5ic78e8wHVlYr3SBy5QrpHlG 9iU4qrgGgyt5NGu0Y5w3vN2UvZmqmkwtE0q4A7rjPVm+v+2mM5M/zy9+Ep11q1Ol uaZq2NRXUhP5u5i7bhmBpGeilDNwdO9MkoUbLa2Ce1BqamTDqY8UMpBPDTITx/v0 csvgAto7WuZHmqwmqEj32+PEdW6qACtQsC5BXXnFZB7jDyF6I5wa2eUZzbbLPrrw uFMqgWJLyISyxbjzi/LHxdP/oEhSA9g= -----END CERTIFICATE-----Generated at Thu Oct 8 13:45:39 2026 by rpki-client