$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa File: fc862717-a664-3367-88cf-5e0ecaaad117.roa (raw, json) Hash identifier: Xi6CAoBtlabAPh2XwAMHQCOFEjoKURNNEONsuKyDySU= Subject key identifier: 42:B2:DE:6D:01:89:E8:DB:90:FF:8E:3B:5B:53:C9:63:FC:43:AB:24 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584D4D5A4E83475B3D6694BBB6AA Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 46408 IP address blocks: 207.191.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4e:83:47:5b:3d:66:94:bb:b6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=043b0350-a8cd-4412-8574-71eda44b7355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:0b:53:1d:0a:74:4d:0f:97:76:e4:12:63: 24:ec:ee:85:56:4e:82:f3:bf:d3:ba:c9:04:9b:ac: 11:84:31:6f:d5:46:62:e9:07:ef:44:b3:23:ff:4b: 0e:1e:5b:83:e2:9e:13:1a:fb:36:3d:c6:c2:83:14: 1c:e9:ae:de:da:15:a5:07:eb:bb:69:4b:0e:d9:8b: b9:93:73:e0:8a:f8:cf:0c:62:b2:bb:8c:49:33:4a: 11:be:af:2d:3b:0f:ea:34:d0:a3:52:29:b9:92:e5: fa:50:5c:40:64:79:c7:e7:28:13:d9:61:99:6c:fa: 53:ab:d7:88:81:2a:2e:67:5b:7a:42:b9:0a:e1:d1: d3:01:8f:45:69:dd:fb:fd:9b:70:c5:fa:0a:91:27: b4:af:b1:07:38:cc:33:2f:fb:fc:33:0d:6b:8c:7f: 0f:b3:94:71:bb:e7:9d:b1:69:64:a9:54:59:96:95: ec:09:bb:de:f9:92:2b:6f:91:2d:de:cb:e6:73:b5: 3c:3d:58:ba:a7:c1:8c:e3:f7:06:e1:1e:e0:19:21: 1e:da:34:24:07:9e:e7:60:67:56:37:36:8f:18:c5: 45:4b:33:55:44:03:82:34:73:55:0f:b2:4a:9f:ef: cd:81:6e:43:74:93:58:bb:99:7e:34:20:5f:98:c1: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B2:DE:6D:01:89:E8:DB:90:FF:8E:3B:5B:53:C9:63:FC:43:AB:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 207.191.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:0b:0a:71:ca:65:08:31:55:75:95:d5:2e:84:71:a0:f6:8a: 73:63:30:51:44:90:5f:73:7a:d2:02:7e:af:1a:a8:17:17:c5: fd:0d:8b:b4:e9:68:25:c2:a0:fa:e0:77:ef:37:e2:75:20:17: 42:b1:d1:8c:31:fa:c4:6d:13:a9:22:c6:37:ea:9a:21:64:12: 26:73:46:5a:83:d1:13:5d:f6:f2:97:58:3c:47:8f:2c:6b:ea: 8e:5e:7e:d5:5b:94:a7:77:e5:00:d4:59:4c:f6:fe:58:ae:19: 07:7b:b4:a7:cf:5d:d5:4f:b2:43:a4:8b:83:72:a7:19:a8:66: b6:22:06:d6:48:0f:df:09:c1:c5:f4:65:e1:bc:b3:c8:83:45: 7d:0b:bc:4d:eb:05:2b:19:63:98:be:61:74:a6:99:6d:9b:81: 5b:41:b7:67:28:72:32:d1:e5:89:3a:f7:9b:d3:9a:20:4c:2a: f8:5e:6c:4c:9b:c7:41:b5:eb:a8:14:08:7a:d2:bb:81:3e:71: 81:46:35:03:80:01:09:76:b8:18:a4:6e:45:8c:cc:ca:16:1f: 72:7e:2a:c0:54:41:07:0f:65:42:0a:0d:48:9c:13:1c:81:75: d9:43:14:65:d6:6c:37:e0:56:2f:14:b6:00:bb:be:96:64:c5: dc:f9:e4:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWk6DR1s9ZpS7tqowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MDQzYjAzNTAtYThjZC00NDEyLTg1NzQtNzFlZGE0NGI3MzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BoLUx0KdE0Pl3bkEmMk7O6FVk6C87/TuskE m6wRhDFv1UZi6QfvRLMj/0sOHluD4p4TGvs2PcbCgxQc6a7e2hWlB+u7aUsO2Yu5 k3PgivjPDGKyu4xJM0oRvq8tOw/qNNCjUim5kuX6UFxAZHnH5ygT2WGZbPpTq9eI gSouZ1t6QrkK4dHTAY9Fad37/ZtwxfoKkSe0r7EHOMwzL/v8Mw1rjH8Ps5Rxu+ed sWlkqVRZlpXsCbve+ZIrb5Et3svmc7U8PVi6p8GM4/cG4R7gGSEe2jQkB57nYGdW NzaPGMVFSzNVRAOCNHNVD7JKn+/NgW5DdJNYu5l+NCBfmMHS+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKy3m0BiejbkP+OO1tTyWP8Q6skMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvZmM4NjI3MTctYTY2NC0z MzY3LTg4Y2YtNWUwZWNhYWFkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz7/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0LCnHKZQgxVXWV1S6EcaD2inNjMFFEkF9zetICfq8aqBcXxf0Ni7Tp aCXCoPrgd+834nUgF0Kx0Ywx+sRtE6kixjfqmiFkEiZzRlqD0RNd9vKXWDxHjyxr 6o5eftVblKd35QDUWUz2/liuGQd7tKfPXdVPskOki4NypxmoZrYiBtZID98JwcX0 ZeG8s8iDRX0LvE3rBSsZY5i+YXSmmW2bgVtBt2cocjLR5Yk695vTmiBMKvhebEyb x0G166gUCHrSu4E+cYFGNQOAAQl2uBikbkWMzMoWH3J+KsBUQQcPZUIKDUicExyB ddlDFGXWbDfgVi8UtgC7vpZkxdz55HY= -----END CERTIFICATE-----Generated at Sun Apr 19 15:32:46 2026 by rpki-client