$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa File: 67ef0949-c298-330b-aabd-6a4c950d7ad6.roa (raw, json) Hash identifier: Z+ImzaZw9MeKoNxaPGJAU3sYNaczA3dYgHJ1z9qFkhg= Subject key identifier: F8:DC:DE:DD:8B:73:4D:FB:4C:EA:B6:C8:60:AD:E1:0D:61:38:39:06 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584E4824918EB27C934A3CBDCCF0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 16696 IP address blocks: 209.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:91:8e:b2:7c:93:4a:3c:bd:cc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=2eaba8db-6e46-4649-af45-2b18919d3ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:62:d5:76:42:95:49:3c:95:c5:de:a4:04:75: a3:22:84:f0:37:0d:e7:d6:59:91:dd:88:a6:7a:10: aa:4b:a7:59:e3:57:3c:a3:78:06:36:cd:1a:64:41: 11:b2:be:0c:d6:b4:27:60:a5:1b:3f:23:ce:ad:f2: 97:ad:4b:c6:1b:62:cd:97:3c:95:c9:00:33:b1:07: 6a:65:53:c8:6f:64:61:8b:0e:3a:92:e7:7c:cc:01: f6:09:28:7e:c5:d2:c3:70:69:dd:4c:53:18:0e:81: 95:d8:b7:b2:b0:e0:82:ca:64:5c:57:a7:fb:ef:d8: 82:0b:a6:83:c9:47:61:5d:45:80:ea:92:f7:ac:0c: 3e:9d:09:07:70:12:a8:86:c6:34:10:11:90:2f:94: ad:e3:4d:00:83:1d:3f:82:9b:a6:e0:94:a9:02:e5: a3:11:af:8a:21:59:39:33:56:bb:2a:cb:3a:6d:8a: 15:da:67:9f:a6:19:e3:08:8c:50:1a:d9:ec:86:e3: f9:d0:a1:d6:33:0c:12:e6:1c:6a:65:8b:e0:b9:6c: 4b:2a:ab:71:cb:9f:a9:f9:fb:f5:47:09:ef:86:9c: dc:52:e3:b0:0e:d7:32:03:57:fa:3b:8a:08:0d:14: 26:19:28:65:18:7e:40:ee:20:31:c5:75:c2:a2:7b: 33:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DC:DE:DD:8B:73:4D:FB:4C:EA:B6:C8:60:AD:E1:0D:61:38:39:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 209.20.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ab:54:16:30:9e:8f:6b:67:b7:8b:e3:08:fb:9f:82:ad:49: 50:53:07:e6:79:c5:4a:81:65:b5:a6:b6:2d:09:fa:c8:0d:d9: 3b:1b:83:e7:25:0a:9f:47:7b:ac:f0:d4:d3:97:e0:bc:41:50: 91:87:70:c7:f6:12:cc:ea:be:65:46:0f:56:c3:8f:ec:fa:ad: 4b:cd:3d:ba:7e:20:3c:20:38:1f:c6:0e:01:85:fd:18:e1:8e: 3f:f2:34:20:3b:ef:d5:e3:87:40:39:2e:12:22:a9:61:91:e7: 5e:56:88:19:6a:3d:6e:2e:41:1a:46:4b:61:6f:52:ac:49:48: bc:42:c7:f6:07:bd:97:03:52:bf:da:91:7f:bc:51:a9:ad:59: 5c:08:63:4a:e1:b5:3f:b7:7e:e4:e3:dc:69:80:f9:78:53:15: ec:39:31:45:25:7b:5f:cb:20:ec:76:8e:7a:48:9a:25:70:b8: a8:0b:2c:57:55:aa:1b:d1:49:d0:7e:7d:69:57:30:3c:54:82: 40:65:ff:73:6d:b5:54:71:72:c8:ad:43:1b:3f:da:7b:93:d1: 2b:28:f0:37:dc:61:5a:09:c6:e0:f1:4c:d9:34:33:ab:22:38: 7e:89:d4:d5:ab:ad:41:ff:3d:0c:fc:0e:b0:83:db:c2:6d:63: dc:af:86:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJGOsnyTSjy9zPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk MmVhYmE4ZGItNmU0Ni00NjQ5LWFmNDUtMmIxODkxOWQzY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGLVdkKVSTyVxd6kBHWjIoTwNw3n1lmR3Yim ehCqS6dZ41c8o3gGNs0aZEERsr4M1rQnYKUbPyPOrfKXrUvGG2LNlzyVyQAzsQdq ZVPIb2Rhiw46kud8zAH2CSh+xdLDcGndTFMYDoGV2LeysOCCymRcV6f779iCC6aD yUdhXUWA6pL3rAw+nQkHcBKohsY0EBGQL5St400Agx0/gpum4JSpAuWjEa+KIVk5 M1a7Kss6bYoV2mefphnjCIxQGtnshuP50KHWMwwS5hxqZYvguWxLKqtxy5+p+fv1 RwnvhpzcUuOwDtcyA1f6O4oIDRQmGShlGH5A7iAxxXXConszJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjc3t2Lc037TOq2yGCt4Q1hODkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjdlZjA5NDktYzI5OC0z MzBiLWFhYmQtNmE0Yzk1MGQ3YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFarVBYwno9rZ7eL4wj7n4KtSVBTB+Z5xUqBZbWmti0J+sgN2Tsbg+cl Cp9He6zw1NOX4LxBUJGHcMf2EszqvmVGD1bDj+z6rUvNPbp+IDwgOB/GDgGF/Rjh jj/yNCA779Xjh0A5LhIiqWGR515WiBlqPW4uQRpGS2FvUqxJSLxCx/YHvZcDUr/a kX+8UamtWVwIY0rhtT+3fuTj3GmA+XhTFew5MUUle1/LIOx2jnpImiVwuKgLLFdV qhvRSdB+fWlXMDxUgkBl/3NttVRxcsitQxs/2nuT0Sso8DfcYVoJxuDxTNk0M6si OH6J1NWrrUH/PQz8DrCD28JtY9yvhv4= -----END CERTIFICATE-----Generated at Fri Jul 24 07:17:31 2026 by rpki-client