$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/f568dce4-f4e0-3f5a-9def-90fb6b862932.roa File: f568dce4-f4e0-3f5a-9def-90fb6b862932.roa (raw, json) Hash identifier: ICSJP+Lr1eDSq8gYErD0f/0MVCkBCSc6GywVmdOxoVc= Subject key identifier: CB:C9:F7:B4:16:09:32:D1:67:99:54:1A:3D:B6:FC:F2:CA:A3:3E:D7 Certificate issuer: /CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d Certificate serial: 010D0C9F4328584E7FD65E81F758C195C81BB180 Authority key identifier: 83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/f568dce4-f4e0-3f5a-9def-90fb6b862932.roa Signing time: Tue 14 Jul 2026 19:48:06 +0000 ROA not before: Tue 14 Jul 2026 19:48:06 +0000 ROA not after: Mon 12 Oct 2026 19:48:06 +0000 asID: 14618 IP address blocks: 156.20.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:d6:5e:81:f7:58:c1:95:c8:1b:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d Validity Not Before: Jul 14 19:48:06 2026 GMT Not After : Oct 12 19:48:06 2026 GMT Subject: CN=31c8e7f9-89dd-448e-ac2e-b3e984297b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8a:d1:a7:95:9b:94:a5:fb:05:e5:1e:43:11: cd:72:93:7c:1d:cb:b5:32:ae:30:da:0a:49:56:0c: c9:41:c7:34:06:67:e9:e7:a2:dc:c0:41:a6:e3:41: ff:b0:03:56:e6:43:3d:f2:c6:9a:b6:0a:f3:df:aa: 58:12:3b:ce:27:e7:f7:d5:c4:cf:84:9f:53:25:07: e6:c6:1a:1d:39:75:61:7d:08:10:24:91:29:79:ad: bb:ce:8f:99:63:ef:e5:01:14:c2:15:5a:c6:b3:4b: a9:96:b9:53:fe:cd:f8:86:ef:aa:1c:f0:e9:c3:93: f1:f3:3f:ab:28:69:bc:8d:91:03:a0:64:a5:4f:87: b3:cb:1e:ba:f2:d4:3a:64:da:b7:c8:67:84:d5:35: da:b1:e3:91:f9:24:50:b7:03:d2:50:50:4b:f5:da: 88:1c:d2:33:35:a0:8c:2f:8f:2a:dd:bc:6a:e3:2a: b8:44:61:97:cb:bc:1c:c5:cd:d9:88:91:2a:52:6b: 56:83:ea:c2:24:90:cd:64:4a:d2:6f:7e:e2:82:c6: bd:09:ee:91:af:8f:d1:87:80:26:b8:6a:7c:ab:ec: c7:8f:59:b7:e4:85:18:30:22:75:6a:82:27:cc:86: 05:03:bf:54:80:4c:62:df:de:04:e9:73:fb:34:b3: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C9:F7:B4:16:09:32:D1:67:99:54:1A:3D:B6:FC:F2:CA:A3:3E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/f568dce4-f4e0-3f5a-9def-90fb6b862932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl X509v3 Authority Key Identifier: keyid:83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer sbgp-ipAddrBlock: critical IPv4: 156.20.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c5:66:c7:c1:41:af:80:d9:ba:bc:4c:5a:a7:bd:0b:a4:47: ea:5e:5c:4c:8e:00:29:fc:61:ab:a5:9b:9f:0a:f8:fd:2a:d4: 7f:e2:0a:bd:cb:c7:be:f7:21:1f:5f:a0:65:f8:84:c5:28:8c: 38:e3:ad:58:6f:9b:f3:e8:72:3d:13:45:5a:d2:e9:a5:78:4b: e3:ae:de:0b:b5:7a:93:c3:37:5a:b7:0e:29:36:75:ca:e3:0b: 6a:50:ef:d7:7a:2e:34:98:cc:af:33:c5:9e:00:03:ca:cb:69: ee:34:ce:c2:54:ac:73:40:df:ad:ec:3d:bd:8c:7c:a4:d5:ce: b2:91:2b:97:78:ee:db:cd:6d:0c:f2:c4:4f:f4:b1:92:7e:21: 6f:e5:b6:63:7e:10:29:f8:d5:4e:9d:6d:6a:5e:0c:c0:05:c0: 2b:ee:17:90:bf:7e:1b:cd:a3:b3:96:ef:b9:ef:95:44:6e:ce: de:af:cd:c0:c9:8e:ed:26:af:ef:0c:83:53:59:be:ca:3d:3a: e5:44:3f:4f:17:9c:42:18:c4:36:0c:a1:cc:99:12:ea:f5:5f: ae:ba:27:55:08:59:f9:c5:c1:04:8f:59:55:5f:44:70:34:04: 85:cd:7c:aa:8a:eb:75:66:84:d3:3e:bf:92:a6:97:2d:d5:02: 2b:e1:94:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/1l6B91jBlcgbsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M2YzRmZTQtNTY0Mi00YWQwLTgzMjUtNjk5NDBiMmVk MDRkMB4XDTI2MDcxNDE5NDgwNloXDTI2MTAxMjE5NDgwNlowLzEtMCsGA1UEAxMk MzFjOGU3ZjktODlkZC00NDhlLWFjMmUtYjNlOTg0Mjk3YjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4rRp5WblKX7BeUeQxHNcpN8Hcu1Mq4w2gpJ VgzJQcc0Bmfp56LcwEGm40H/sANW5kM98saatgrz36pYEjvOJ+f31cTPhJ9TJQfm xhodOXVhfQgQJJEpea27zo+ZY+/lARTCFVrGs0uplrlT/s34hu+qHPDpw5Px8z+r KGm8jZEDoGSlT4ezyx668tQ6ZNq3yGeE1TXaseOR+SRQtwPSUFBL9dqIHNIzNaCM L48q3bxq4yq4RGGXy7wcxc3ZiJEqUmtWg+rCJJDNZErSb37igsa9Ce6Rr4/Rh4Am uGp8q+zHj1m35IUYMCJ1aoInzIYFA79UgExi394E6XP7NLOhOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvJ97QWCTLRZ5lUGj22/PLKoz7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83YzZj NGZlNC01NjQyLTRhZDAtODMyNS02OTk0MGIyZWQwNGQvZjU2OGRjZTQtZjRlMC0z ZjVhLTlkZWYtOTBmYjZiODYyOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2M2YzRmZTQtNTY0Mi00YWQwLTgz MjUtNjk5NDBiMmVkMDRkLzdjNmM0ZmU0LTU2NDItNGFkMC04MzI1LTY5OTQwYjJl ZDA0ZC5jcmwwHwYDVR0jBBgwFoAUg+p7p+zvw3iKpenuLEuzG3NzvFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83YzZjNGZlNC01NjQyLTRhZDAtODMyNS02OTk0 MGIyZWQwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnBQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLFZsfBQa+A2bq8TFqnvQukR+peXEyOACn8Yaulm58K+P0q1H/iCr3L x773IR9foGX4hMUojDjjrVhvm/Pocj0TRVrS6aV4S+Ou3gu1epPDN1q3Dik2dcrj C2pQ79d6LjSYzK8zxZ4AA8rLae40zsJUrHNA363sPb2MfKTVzrKRK5d47tvNbQzy xE/0sZJ+IW/ltmN+ECn41U6dbWpeDMAFwCvuF5C/fhvNo7OW77nvlURuzt6vzcDJ ju0mr+8Mg1NZvso9OuVEP08XnEIYxDYMocyZEur1X666J1UIWfnFwQSPWVVfRHA0 BIXNfKqK63VmhNM+v5Kmly3VAivhlJk= -----END CERTIFICATE-----Generated at Fri Jul 24 01:25:55 2026 by rpki-client