$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa File: 0fa138cc-579e-337f-844b-d4a832c956c9.roa (raw, json) Hash identifier: /tcklbrY/PAZUQokue6BWiyg26rA77NIQPor6RYOE00= Subject key identifier: D8:C0:10:6A:45:B0:B7:AC:37:9F:A0:2E:1C:34:C6:8C:F6:59:08:86 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584F20F7A5E6B49A652B33F9BAC0 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 55039 IP address blocks: 208.66.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a5:e6:b4:9a:65:2b:33:f9:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=414d8082-0173-42e9-baa4-a78fe68b8ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:87:60:3c:8b:b5:09:8e:c6:54:31:27:b8: cc:82:cd:5f:8a:97:6d:2a:aa:c0:0b:03:e0:72:c5: 90:64:d6:28:e2:02:f1:df:9d:18:c9:67:fa:37:7a: 7e:31:46:bb:66:80:79:3d:d5:79:55:21:7b:73:f7: 52:78:58:22:4f:5e:37:76:0e:d6:2b:3d:c9:ee:af: 5c:32:41:61:ec:95:a1:fb:a8:6a:78:df:b4:a2:2b: 8c:4d:cf:e5:d1:bc:3f:62:b7:35:84:cd:19:e1:19: 39:30:d0:e5:a6:8c:55:e5:41:2c:56:0b:b7:17:29: fc:58:27:6f:ad:aa:d0:56:bc:3b:67:56:3d:2c:7b: 42:47:f2:09:a0:5f:80:6f:eb:55:ab:fc:60:42:a3: b7:4b:f7:91:f0:11:da:18:0e:26:fb:a4:1c:04:9c: 84:60:76:03:6b:60:3c:33:69:94:b2:3b:bb:da:e8: e9:6d:42:e0:11:34:50:5b:75:1a:8e:ed:ef:29:43: 78:28:43:2c:69:83:84:ec:d1:a3:25:42:bc:c3:bd: ce:54:ac:db:d8:a3:d0:96:10:ca:c2:8e:a4:62:34: 99:76:85:ac:33:6a:a4:b7:97:d4:f4:01:c3:12:5b: ba:2a:81:7c:73:33:8b:59:67:a0:5c:e5:99:57:fc: a7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C0:10:6A:45:B0:B7:AC:37:9F:A0:2E:1C:34:C6:8C:F6:59:08:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 208.66.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5e:20:e5:61:ef:39:a3:fc:1d:f7:31:a2:94:26:80:33:20: 56:27:b8:38:e3:70:8c:92:73:b4:f3:db:2f:8f:a4:49:76:06: 93:08:82:8a:c0:e0:fb:23:3f:1e:bd:ea:b0:c9:92:69:b6:e4: ca:69:97:5e:e5:63:cd:45:4b:5a:fa:3e:da:3c:3a:2c:b4:f5: e3:71:84:99:8c:af:1a:ad:68:b5:a0:57:db:7d:5e:5f:4e:58: e7:37:89:c3:aa:c9:08:ad:22:64:b8:44:f4:22:07:b7:72:86: 9c:e3:c3:e0:02:94:e9:b1:c1:1c:4d:20:59:6d:1e:47:1d:19: b5:02:9f:79:ca:5c:70:83:63:7f:d3:4f:35:04:11:65:fa:e1: 0f:af:a8:5e:48:69:df:b1:bf:32:77:c3:40:c5:03:68:39:61: 3c:37:eb:a7:11:36:e8:c3:83:67:e0:97:30:ab:4b:a2:cd:1c: 6a:c8:87:30:be:7e:ee:cf:0b:51:80:f4:7b:9f:1f:f6:fb:bc: 8f:1d:b6:f0:1b:e0:ae:08:a8:e1:c1:ff:e8:15:aa:67:34:d9: b0:2f:f0:9e:9d:c2:1c:3d:63:85:73:a2:0d:3c:96:01:ea:c0: bf:16:b3:d7:d1:db:68:ec:47:b5:f6:b4:5c:b2:f4:04:f3:36: ec:04:c2:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96XmtJplKzP5usAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDE0ZDgwODItMDE3My00MmU5LWJhYTQtYTc4ZmU2OGI4ZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA6HYDyLtQmOxlQxJ7jMgs1fipdtKqrACwPg csWQZNYo4gLx350YyWf6N3p+MUa7ZoB5PdV5VSF7c/dSeFgiT143dg7WKz3J7q9c MkFh7JWh+6hqeN+0oiuMTc/l0bw/Yrc1hM0Z4Rk5MNDlpoxV5UEsVgu3Fyn8WCdv rarQVrw7Z1Y9LHtCR/IJoF+Ab+tVq/xgQqO3S/eR8BHaGA4m+6QcBJyEYHYDa2A8 M2mUsju72ujpbULgETRQW3Uaju3vKUN4KEMsaYOE7NGjJUK8w73OVKzb2KPQlhDK wo6kYjSZdoWsM2qkt5fU9AHDElu6KoF8czOLWWegXOWZV/ynJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjAEGpFsLesN5+gLhw0xoz2WQiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMGZhMTM4Y2MtNTc5ZS0z MzdmLTg0NGItZDRhODMyYzk1NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1eIOVh7zmj/B33MaKUJoAzIFYnuDjjcIySc7Tz2y+PpEl2BpMIgorA 4PsjPx696rDJkmm25Mppl17lY81FS1r6Pto8Oiy09eNxhJmMrxqtaLWgV9t9Xl9O WOc3icOqyQitImS4RPQiB7dyhpzjw+AClOmxwRxNIFltHkcdGbUCn3nKXHCDY3/T TzUEEWX64Q+vqF5Iad+xvzJ3w0DFA2g5YTw366cRNujDg2fglzCrS6LNHGrIhzC+ fu7PC1GA9HufH/b7vI8dtvAb4K4IqOHB/+gVqmc02bAv8J6dwhw9Y4Vzog08lgHq wL8Ws9fR22jsR7X2tFyy9ATzNuwEwiw= -----END CERTIFICATE-----Generated at Sat Oct 3 08:27:52 2026 by rpki-client