$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/ae96a354-07ae-35b2-badf-0a829c572091.roa File: ae96a354-07ae-35b2-badf-0a829c572091.roa (raw, json) Hash identifier: 695nZirqCirPh0NJKLZ0uLwxCPmsrCCC4kI8XFALP5w= Subject key identifier: EB:50:19:88:C7:48:A9:B6:0C:ED:94:0A:97:1F:EB:82:39:10:B1:36 Certificate issuer: /CN=b7b20b1a-439d-42a4-9436-b3efc58ba63b Certificate serial: 010D0C9F4328584F20F79E41B71BB55B21962B90 Authority key identifier: 0E:3E:F1:10:E9:A0:B9:EA:BC:3B:67:1B:CA:52:3D:2B:D2:0B:CB:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/ae96a354-07ae-35b2-badf-0a829c572091.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 19709 IP address blocks: 208.93.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:9e:41:b7:1b:b5:5b:21:96:2b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b20b1a-439d-42a4-9436-b3efc58ba63b Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=b5604408-0417-4bbf-8f01-d607d26a475a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:57:e9:1d:05:ab:43:60:6c:a6:c4:d8:4d: 3b:f9:88:02:a8:8b:5d:af:2d:82:3e:d7:ba:74:86: a7:8f:31:5b:7c:a1:3a:44:63:2c:67:94:45:bc:f8: 65:57:f9:27:fc:60:eb:1a:70:90:e2:50:09:f8:71: 2b:b2:b0:e3:af:97:87:4d:14:4d:e4:4c:05:9c:c4: 91:a5:ec:d2:ca:59:94:7a:7f:5a:d6:d2:49:78:b5: a1:ec:2f:30:6d:6e:43:b9:77:87:07:82:5d:b2:bd: 7a:23:83:29:17:61:1d:96:93:55:da:21:f9:6a:54: 55:c8:2f:aa:b0:b6:37:35:23:95:72:f4:08:47:b5: 72:8c:64:48:5d:68:0b:a1:f6:de:b1:d4:16:90:a5: 24:c7:07:39:af:87:f7:68:37:c2:aa:2d:0e:64:9d: 0e:25:01:63:db:70:d2:b4:e6:aa:7e:32:dd:69:5b: f3:31:4b:c0:20:68:90:f7:32:16:d9:45:33:ff:d1: 40:c2:3e:7f:8b:c4:e7:b5:1d:bd:6b:41:3c:a1:8b: 1c:c6:82:c1:65:82:04:ef:96:34:a1:c0:2d:fe:8e: 99:6a:b8:60:35:ba:70:97:aa:c3:83:e6:17:d8:f5: 22:47:28:77:11:18:b4:1b:54:5a:97:ad:44:0e:4c: 09:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:50:19:88:C7:48:A9:B6:0C:ED:94:0A:97:1F:EB:82:39:10:B1:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/ae96a354-07ae-35b2-badf-0a829c572091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.crl X509v3 Authority Key Identifier: keyid:0E:3E:F1:10:E9:A0:B9:EA:BC:3B:67:1B:CA:52:3D:2B:D2:0B:CB:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer sbgp-ipAddrBlock: critical IPv4: 208.93.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:de:c2:d3:04:1b:4f:db:ce:52:af:df:19:f1:cb:47:5a:72: 65:f2:6f:dd:ef:6f:88:d0:54:52:e8:35:48:ec:73:b0:5e:b1: d3:11:bf:eb:67:1c:d0:df:07:39:ab:6e:ee:c1:6c:10:36:b6: 22:24:b2:af:09:09:79:35:48:5c:52:a3:b1:6f:34:8e:ca:42: 34:2a:9e:b4:12:52:e2:17:03:ae:98:49:3a:1e:ae:d1:df:22: 96:d8:18:f0:fb:b4:1b:37:84:5b:56:e0:58:8b:62:3f:b7:8b: 04:47:ef:5c:46:30:5a:fa:24:c0:44:9e:24:77:00:14:30:e9: d5:d5:df:32:86:12:ce:0e:dc:e4:4f:bc:78:8d:db:64:5f:1e: 31:5c:35:09:29:f1:db:4b:8c:9b:74:2f:1d:37:16:fa:a4:41: c9:f4:0c:04:1c:a4:74:82:1b:5f:1b:7f:da:40:91:8f:1b:4b: 0a:71:d3:7d:92:f4:36:7b:34:83:c8:f6:f1:8d:6d:f8:5f:df: 83:1a:47:b7:13:f3:b0:15:57:ab:72:80:5d:24:15:e1:ec:65: e4:49:b2:57:c4:f6:85:73:e2:5f:30:b8:dd:21:2d:e1:f8:ff: f6:37:f5:fb:c3:31:d4:e9:f7:fc:06:94:00:3e:60:60:bf:5f: ad:7b:0e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g955Btxu1WyGWK5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdiMjBiMWEtNDM5ZC00MmE0LTk0MzYtYjNlZmM1OGJh NjNiMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YjU2MDQ0MDgtMDQxNy00YmJmLThmMDEtZDYwN2QyNmE0NzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKtX6R0Fq0NgbKbE2E07+YgCqItdry2CPte6 dIanjzFbfKE6RGMsZ5RFvPhlV/kn/GDrGnCQ4lAJ+HErsrDjr5eHTRRN5EwFnMSR pezSylmUen9a1tJJeLWh7C8wbW5DuXeHB4Jdsr16I4MpF2EdlpNV2iH5alRVyC+q sLY3NSOVcvQIR7VyjGRIXWgLofbesdQWkKUkxwc5r4f3aDfCqi0OZJ0OJQFj23DS tOaqfjLdaVvzMUvAIGiQ9zIW2UUz/9FAwj5/i8TntR29a0E8oYscxoLBZYIE75Y0 ocAt/o6ZarhgNbpwl6rDg+YX2PUiRyh3ERi0G1Ral61EDkwJ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtQGYjHSKm2DO2UCpcf64I5ELE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iN2Iy MGIxYS00MzlkLTQyYTQtOTQzNi1iM2VmYzU4YmE2M2IvYWU5NmEzNTQtMDdhZS0z NWIyLWJhZGYtMGE4MjljNTcyMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjdiMjBiMWEtNDM5ZC00MmE0LTk0 MzYtYjNlZmM1OGJhNjNiL2I3YjIwYjFhLTQzOWQtNDJhNC05NDM2LWIzZWZjNThi YTYzYi5jcmwwHwYDVR0jBBgwFoAUDj7xEOmgueq8O2cbylI9K9ILyygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iN2IyMGIxYS00MzlkLTQyYTQtOTQzNi1iM2Vm YzU4YmE2M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0F1iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvewtMEG0/bzlKv3xnxy0dacmXyb93vb4jQVFLoNUjsc7BesdMRv+tn HNDfBzmrbu7BbBA2tiIksq8JCXk1SFxSo7FvNI7KQjQqnrQSUuIXA66YSToertHf IpbYGPD7tBs3hFtW4FiLYj+3iwRH71xGMFr6JMBEniR3ABQw6dXV3zKGEs4O3ORP vHiN22RfHjFcNQkp8dtLjJt0Lx03FvqkQcn0DAQcpHSCG18bf9pAkY8bSwpx032S 9DZ7NIPI9vGNbfhf34MaR7cT87AVV6tygF0kFeHsZeRJslfE9oVz4l8wuN0hLeH4 //Y39fvDMdTp9/wGlAA+YGC/X617DuI= -----END CERTIFICATE-----Generated at Wed Sep 30 19:45:37 2026 by rpki-client