$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa File: 20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa (raw, json) Hash identifier: 40sAZPDIRrwymKeOX0FkSw8MUbJEX8+p5KOxy7aCM1w= Subject key identifier: 58:A7:3C:C7:F1:5B:66:49:F6:60:45:04:76:EE:B0:91:8A:ED:6A:F5 Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Certificate serial: 010D0C9F4328584E7E94E6ACEB4E1F4698C8DB80 Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 16552 IP address blocks: 208.80.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e6:ac:eb:4e:1f:46:98:c8:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=4792f159-a9a4-457f-ad44-85fb8999432f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ee:13:9d:27:df:a4:b3:08:6f:7b:a2:f3:a9: 3b:94:6b:4e:90:9f:da:cc:f9:48:b6:32:c4:00:dc: 05:d2:e7:c2:96:12:18:0e:da:2c:2a:3e:15:a0:78: 03:66:86:40:5d:0b:15:b0:30:33:91:11:1e:be:6c: ca:ad:01:a7:ad:11:93:cd:81:d5:fc:cd:18:42:e0: 0c:16:08:10:d9:2f:6e:e7:96:bb:b1:db:0f:97:86: 8b:8b:c7:c6:6f:5e:f5:34:bb:0d:76:a3:dd:98:48: 15:2a:75:f2:57:dd:13:48:f1:d6:54:28:5b:3b:cb: 6a:4b:f0:4b:ed:67:c7:47:01:5c:00:a0:c5:4c:62: 53:03:61:f3:1a:16:14:95:d9:19:47:fa:55:0a:31: cb:a7:ae:31:2d:31:cd:5b:23:fc:e2:55:8d:2c:f2: fc:75:ad:17:33:ba:74:88:bd:d7:02:93:77:98:1a: 91:3c:21:88:11:4a:77:ee:b2:18:c9:d5:85:8f:8b: a7:fb:27:d7:fa:1c:aa:43:9b:3f:fd:de:b4:41:8a: 2c:1d:05:f6:7a:43:1d:aa:8d:d8:a0:5b:14:79:87: fb:4f:71:cd:bd:1a:ba:f1:dc:1c:4a:f1:e9:44:90: df:f3:7b:49:48:65:0d:5e:87:e6:74:c4:50:d8:a9: a3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:3C:C7:F1:5B:66:49:F6:60:45:04:76:EE:B0:91:8A:ED:6A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl X509v3 Authority Key Identifier: keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer sbgp-ipAddrBlock: critical IPv4: 208.80.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:60:4b:95:8d:29:63:12:fa:be:a9:4c:2c:b6:38:37:3b:38: c6:72:bb:29:a8:f1:9f:71:31:a5:09:5e:a0:b2:86:d1:d6:ea: d9:20:3e:e2:4e:18:b0:c3:73:6c:ec:d6:8e:17:d6:8c:5b:09: e7:c7:dc:f8:7c:af:f3:84:2d:64:96:36:7f:b0:e8:b7:b0:20: 9f:c4:0e:1a:ed:b0:07:5d:fd:ed:71:60:15:9b:0f:ea:44:54: 30:e1:dd:84:cf:69:18:31:ee:8d:4b:7b:2c:79:38:99:68:b7: a3:ff:7b:7e:82:a5:20:3b:ec:ec:de:47:a5:0f:ad:95:d6:f6: 44:80:7f:3d:5b:2f:78:48:ac:c4:04:a9:b6:dc:ae:d1:6d:ac: 96:a8:36:4b:a7:58:17:1a:3c:e7:45:44:33:6c:67:c4:d0:0e: c4:01:0e:5b:5b:aa:8e:8b:db:e1:c0:c8:ca:de:f1:db:c6:99: 60:ec:af:8d:69:7e:9d:ba:79:c8:cd:47:b4:9e:d7:04:fa:30: 26:58:5c:a1:9a:c3:f2:54:d8:e1:a9:69:09:e1:8b:59:dc:c1: 02:19:f9:c1:8e:9b:6e:59:56:ae:f5:0f:67:11:77:3d:07:bc: 92:5a:94:d7:ed:3e:d0:f1:99:ae:7c:b1:c4:d8:3b:fc:9c:c1: 9d:d1:41:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOas604fRpjI24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3 ZjU0MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NDc5MmYxNTktYTlhNC00NTdmLWFkNDQtODVmYjg5OTk0MzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6O4TnSffpLMIb3ui86k7lGtOkJ/azPlItjLE ANwF0ufClhIYDtosKj4VoHgDZoZAXQsVsDAzkREevmzKrQGnrRGTzYHV/M0YQuAM FggQ2S9u55a7sdsPl4aLi8fGb171NLsNdqPdmEgVKnXyV90TSPHWVChbO8tqS/BL 7WfHRwFcAKDFTGJTA2HzGhYUldkZR/pVCjHLp64xLTHNWyP84lWNLPL8da0XM7p0 iL3XApN3mBqRPCGIEUp37rIYydWFj4un+yfX+hyqQ5s//d60QYosHQX2ekMdqo3Y oFsUeYf7T3HNvRq68dwcSvHpRJDf83tJSGUNXofmdMRQ2KmjWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFinPMfxW2ZJ9mBFBHbusJGK7Wr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2 ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvMjBkYzJhMGMtY2FkYy0z ZDdiLThlZWYtYTVlY2Q4ODc0ZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3 N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk NzYwNzdmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdgS5WNKWMS+r6pTCy2ODc7OMZyuymo8Z9xMaUJXqCyhtHW6tkgPuJO GLDDc2zs1o4X1oxbCefH3Ph8r/OELWSWNn+w6LewIJ/EDhrtsAdd/e1xYBWbD+pE VDDh3YTPaRgx7o1Leyx5OJlot6P/e36CpSA77OzeR6UPrZXW9kSAfz1bL3hIrMQE qbbcrtFtrJaoNkunWBcaPOdFRDNsZ8TQDsQBDltbqo6L2+HAyMre8dvGmWDsr41p fp26ecjNR7Se1wT6MCZYXKGaw/JU2OGpaQnhi1ncwQIZ+cGOm25ZVq71D2cRdz0H vJJalNftPtDxma58scTYO/ycwZ3RQY0= -----END CERTIFICATE-----Generated at Fri Jul 24 07:19:45 2026 by rpki-client