$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/20f89f58-a102-31bc-85a6-30601b05ef8d.roa File: 20f89f58-a102-31bc-85a6-30601b05ef8d.roa (raw, json) Hash identifier: JcLp78OUyDdZCdRq72iBp8sgo2cJnBqH/D8rqebQYfU= Subject key identifier: 1F:3A:20:92:71:F9:A9:DC:12:6D:C0:DE:97:31:1B:26:C6:21:39:C1 Certificate issuer: /CN=b7b20b1a-439d-42a4-9436-b3efc58ba63b Certificate serial: 010D0C9F4328584F49733BEEAA96DB66BCEEF500 Authority key identifier: 0E:3E:F1:10:E9:A0:B9:EA:BC:3B:67:1B:CA:52:3D:2B:D2:0B:CB:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/20f89f58-a102-31bc-85a6-30601b05ef8d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53760 IP address blocks: 208.93.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3b:ee:aa:96:db:66:bc:ee:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b20b1a-439d-42a4-9436-b3efc58ba63b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fbf3e4f1-9b58-4f4f-83ae-e4e228d541b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5a:9d:69:8f:45:95:57:6e:7f:ce:9a:9c:25: 85:86:66:e0:0c:ef:48:6a:ee:04:c9:7d:24:be:b4: 3f:09:c0:23:93:fc:43:5d:f0:8f:8d:04:e0:dc:b2: 18:41:06:c4:8a:a6:27:1b:29:49:c6:9c:80:da:06: af:af:b8:09:e4:9f:07:d3:ac:67:b5:6c:3d:6c:60: 6a:36:de:f9:f2:88:b1:3f:04:5b:a0:e6:98:86:df: fe:69:df:6e:8f:64:57:10:36:fa:8b:0e:f2:a0:5f: 98:d5:84:d8:dd:22:ee:bf:22:7a:b5:a6:75:40:15: 02:b9:fa:fe:94:6e:bb:9b:7c:0c:1a:52:0c:e5:4f: ff:b9:44:d4:3f:45:18:81:9b:14:4b:df:f4:e3:ef: a7:af:d8:2b:63:44:1a:d0:e3:e6:6a:49:1a:f1:56: 4f:3e:81:71:e0:1e:36:c5:aa:a3:d2:68:59:dc:b2: 55:b3:1f:f2:ca:e4:73:ad:e5:61:49:9e:8f:3e:02: c4:37:7a:9d:57:4a:db:f1:a8:0c:27:6a:76:89:e6: 97:83:51:ad:b0:0a:82:19:09:fd:99:87:11:9c:c0: 9e:ce:b2:3f:89:c7:91:af:bf:c4:9c:fb:e2:69:4d: 39:4b:75:3b:ae:85:35:07:84:9f:5f:2d:47:21:b3: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3A:20:92:71:F9:A9:DC:12:6D:C0:DE:97:31:1B:26:C6:21:39:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/20f89f58-a102-31bc-85a6-30601b05ef8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.crl X509v3 Authority Key Identifier: keyid:0E:3E:F1:10:E9:A0:B9:EA:BC:3B:67:1B:CA:52:3D:2B:D2:0B:CB:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer sbgp-ipAddrBlock: critical IPv4: 208.93.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a4:f5:02:98:cd:12:c9:8c:54:0a:24:5d:5d:ec:05:fc:ab: 28:51:6c:6c:ed:2d:54:ee:71:f4:3b:7a:ca:0a:dc:79:5a:b2: 88:85:5d:c6:30:91:31:8a:e1:8f:60:69:ce:27:c1:cc:2d:c3: a2:57:b5:4a:a0:8d:e7:fc:7b:7f:1e:c8:30:5f:22:43:61:78: ff:55:9a:c8:c5:89:b7:83:f1:6c:3f:7a:bb:e4:6a:03:81:cb: 9b:a2:aa:77:3c:57:23:fb:71:ad:0d:9f:df:5e:3a:cc:83:9e: 4a:b7:82:8f:26:88:94:77:87:da:b4:6e:5d:95:30:14:36:f6: 76:44:e5:17:4f:c2:ba:7f:95:6f:fd:ce:5a:db:9f:3d:c2:b4: 2f:a1:26:30:dc:d0:a6:80:4b:af:6e:7f:9c:58:35:2b:51:f6: 0d:dd:79:97:e6:d2:75:93:1b:8c:be:63:5e:0d:cc:52:ca:af: 71:2e:56:6a:2b:4a:53:19:68:8f:4c:24:78:b1:16:70:5a:bf: ce:c7:a3:04:12:98:a0:60:c4:ff:e0:ac:4a:2a:46:1b:97:8b: 81:7f:f2:51:a1:6b:21:09:2b:1c:d3:e0:75:df:ed:b3:97:11: de:60:bc:47:81:9a:eb:98:32:ea:aa:27:bc:1c:a6:20:88:92: ec:e6:b9:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczvuqpbbZrzu9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdiMjBiMWEtNDM5ZC00MmE0LTk0MzYtYjNlZmM1OGJh NjNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmJmM2U0ZjEtOWI1OC00ZjRmLTgzYWUtZTRlMjI4ZDU0MWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1qdaY9FlVduf86anCWFhmbgDO9Iau4EyX0k vrQ/CcAjk/xDXfCPjQTg3LIYQQbEiqYnGylJxpyA2gavr7gJ5J8H06xntWw9bGBq Nt758oixPwRboOaYht/+ad9uj2RXEDb6iw7yoF+Y1YTY3SLuvyJ6taZ1QBUCufr+ lG67m3wMGlIM5U//uUTUP0UYgZsUS9/04++nr9grY0Qa0OPmakka8VZPPoFx4B42 xaqj0mhZ3LJVsx/yyuRzreVhSZ6PPgLEN3qdV0rb8agMJ2p2ieaXg1GtsAqCGQn9 mYcRnMCezrI/iceRr7/EnPviaU05S3U7roU1B4SfXy1HIbPonQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB86IJJx+ancEm3A3pcxGybGITnBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iN2Iy MGIxYS00MzlkLTQyYTQtOTQzNi1iM2VmYzU4YmE2M2IvMjBmODlmNTgtYTEwMi0z MWJjLTg1YTYtMzA2MDFiMDVlZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjdiMjBiMWEtNDM5ZC00MmE0LTk0 MzYtYjNlZmM1OGJhNjNiL2I3YjIwYjFhLTQzOWQtNDJhNC05NDM2LWIzZWZjNThi YTYzYi5jcmwwHwYDVR0jBBgwFoAUDj7xEOmgueq8O2cbylI9K9ILyygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iN2IyMGIxYS00MzlkLTQyYTQtOTQzNi1iM2Vm YzU4YmE2M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0F1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+k9QKYzRLJjFQKJF1d7AX8qyhRbGztLVTucfQ7esoK3HlasoiFXcYw kTGK4Y9gac4nwcwtw6JXtUqgjef8e38eyDBfIkNheP9VmsjFibeD8Ww/ervkagOB y5uiqnc8VyP7ca0Nn99eOsyDnkq3go8miJR3h9q0bl2VMBQ29nZE5RdPwrp/lW/9 zlrbnz3CtC+hJjDc0KaAS69uf5xYNStR9g3deZfm0nWTG4y+Y14NzFLKr3EuVmor SlMZaI9MJHixFnBav87HowQSmKBgxP/grEoqRhuXi4F/8lGhayEJKxzT4HXf7bOX Ed5gvEeBmuuYMuqqJ7wcpiCIkuzmuR0= -----END CERTIFICATE-----Generated at Sat Sep 26 07:36:48 2026 by rpki-client