$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa File: 0fa138cc-579e-337f-844b-d4a832c956c9.roa (raw, json) Hash identifier: STDZfnUox3qvNQNUPs1Kh85ee8+LDJcsB8nZ6oyd8so= Subject key identifier: 59:FF:93:AE:66:2F:34:EE:52:89:7F:CC:67:42:7B:FE:99:74:9C:31 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584E7E94E0CB79F3A0D3AA61B280 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 55039 IP address blocks: 208.66.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e0:cb:79:f3:a0:d3:aa:61:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=798c023a-3958-44f0-acc8-44c3113844b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:a5:44:84:02:c8:f3:b2:58:11:25:5d:fd: ec:d7:d3:bd:60:65:24:da:55:18:2e:26:cd:34:cc: c0:97:fc:7b:44:b3:12:ad:bf:d1:6e:38:06:a0:a9: c2:d1:6c:bb:d3:14:e9:b6:b0:7a:6e:c2:74:44:0e: cc:03:79:1d:36:e5:6b:05:7f:02:1f:db:c8:43:2e: 5b:46:f2:91:64:42:52:2e:60:02:2a:bc:45:6f:a2: 83:6f:b7:d1:77:cd:27:45:92:a3:72:9a:b3:37:3b: 34:32:bd:61:35:48:2e:63:b4:b8:94:34:23:3b:b5: ef:06:5e:da:7a:66:91:67:f2:64:78:51:f0:6d:6a: 81:20:c6:aa:a3:8b:d6:5a:49:29:12:41:7f:03:dc: c1:a2:64:ca:4e:40:4f:04:97:c0:2d:16:40:a5:5a: 5d:49:aa:11:6a:93:46:c3:af:71:c1:7c:35:20:18: c7:ae:8b:8c:fe:e9:84:3c:e1:92:8b:de:55:f4:44: e5:10:74:af:40:33:f5:b5:06:fe:87:df:b6:2b:3c: 41:c9:77:9d:48:24:bb:97:22:64:90:62:26:bd:b9: 62:63:94:13:a2:18:9d:de:08:e3:7e:ed:54:f1:78: a0:df:35:79:0f:5a:69:c7:43:54:4d:4f:53:56:ab: cd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FF:93:AE:66:2F:34:EE:52:89:7F:CC:67:42:7B:FE:99:74:9C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 208.66.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:22:bf:63:68:7c:a4:67:ee:07:65:c0:4b:30:a3:07:0d:92: 4d:ef:10:5d:3e:f5:2e:a2:ec:81:3f:6e:bb:9c:6d:f7:d6:bb: 87:6f:1a:1d:27:76:20:07:bf:d3:2a:f3:da:87:1d:37:27:39: 60:47:ea:38:9b:95:50:e7:a2:83:1c:a7:6c:42:4d:97:6c:9d: f1:17:ed:ab:72:eb:64:d7:3c:5a:d5:99:20:15:89:99:26:67: 42:0d:7b:b0:59:f4:32:91:d4:0d:e4:40:11:e4:fc:32:52:d7: 67:f1:39:8a:be:d2:b1:4e:d6:c3:97:00:ad:56:76:45:34:73: 9c:f9:2f:67:3f:2e:98:c7:0a:a4:d3:ed:2b:b7:f3:b1:5e:6a: f8:f8:d1:3c:4d:90:fd:be:42:9a:5a:ac:4c:8f:82:f9:1d:88: d0:75:33:35:75:95:ba:0e:64:69:28:d5:2d:1d:53:1e:7e:e8: e1:84:5f:4a:0d:46:67:72:95:2b:6e:46:81:e6:7a:54:6f:0f: 62:e1:bf:c3:09:e6:dd:35:6f:4e:65:de:a9:88:d5:2b:08:0a: 44:d8:7b:fd:67:91:b9:af:32:8a:b0:bd:82:67:fc:8b:6d:95: 3c:4f:07:00:51:0e:e1:35:1c:03:45:23:0c:36:57:1a:cb:cf: ba:07:9e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lODLefOg06phsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk Nzk4YzAyM2EtMzk1OC00NGYwLWFjYzgtNDRjMzExMzg0NGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTSlRIQCyPOyWBElXf3s19O9YGUk2lUYLibN NMzAl/x7RLMSrb/RbjgGoKnC0Wy70xTptrB6bsJ0RA7MA3kdNuVrBX8CH9vIQy5b RvKRZEJSLmACKrxFb6KDb7fRd80nRZKjcpqzNzs0Mr1hNUguY7S4lDQjO7XvBl7a emaRZ/JkeFHwbWqBIMaqo4vWWkkpEkF/A9zBomTKTkBPBJfALRZApVpdSaoRapNG w69xwXw1IBjHrouM/umEPOGSi95V9ETlEHSvQDP1tQb+h9+2KzxByXedSCS7lyJk kGImvbliY5QTohid3gjjfu1U8Xig3zV5D1ppx0NUTU9TVqvNXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn/k65mLzTuUol/zGdCe/6ZdJwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMGZhMTM4Y2MtNTc5ZS0z MzdmLTg0NGItZDRhODMyYzk1NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8iv2NofKRn7gdlwEswowcNkk3vEF0+9S6i7IE/brucbffWu4dvGh0n diAHv9Mq89qHHTcnOWBH6jiblVDnooMcp2xCTZdsnfEX7aty62TXPFrVmSAViZkm Z0INe7BZ9DKR1A3kQBHk/DJS12fxOYq+0rFO1sOXAK1WdkU0c5z5L2c/LpjHCqTT 7Su387Feavj40TxNkP2+QpparEyPgvkdiNB1MzV1lboOZGko1S0dUx5+6OGEX0oN RmdylStuRoHmelRvD2Lhv8MJ5t01b05l3qmI1SsICkTYe/1nkbmvMoqwvYJn/Itt lTxPBwBRDuE1HANFIww2VxrLz7oHnqg= -----END CERTIFICATE-----Generated at Fri Jul 24 18:33:50 2026 by rpki-client