$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa File: 32163c6d-537a-3a41-8227-c09c400f5f50.roa (raw, json) Hash identifier: vzlynoEoKAJhCFoMeVmseXw/iMDu1SWZ5Thla+9S7Hg= Subject key identifier: 2F:85:3E:6E:F1:F8:FB:D7:B2:03:D8:7E:EB:3E:1F:FA:1E:13:04:06 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584F4974B4174EBCCDD2705E8EC0 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11377 IP address blocks: 216.20.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b4:17:4e:bc:cd:d2:70:5e:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=52d52528-cf5f-4c7c-9759-6908ec2ab529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:e0:e8:6f:6b:d5:97:00:72:f1:61:72:45: c0:d9:72:f0:f9:15:4a:96:cd:d7:e8:56:97:b7:21: 12:94:e0:dc:a2:cb:a6:e3:a8:8c:e5:01:56:4a:40: a2:40:3d:98:ca:76:ba:58:22:f6:72:82:0a:b5:75: 80:12:58:75:23:c8:5a:b1:0b:3a:3d:a3:1a:a4:11: af:83:10:ce:03:a1:3f:84:da:0a:b4:b0:0d:e0:22: a5:58:39:57:06:f8:75:4a:53:d4:90:50:4c:85:40: 71:18:73:c2:f0:0c:ce:44:ce:36:3f:9c:7e:4b:56: e6:fc:4a:07:00:84:a7:90:3a:88:1c:d8:49:2a:22: 42:04:f1:d7:3a:16:86:5c:63:c7:b6:51:41:43:09: 1c:f8:e3:e4:ee:a4:2c:a9:a7:a7:84:46:e2:06:f1: 8a:31:a1:0f:29:29:b3:23:8e:8a:86:27:e8:6d:7e: 9d:f8:2e:90:18:38:fd:c2:50:31:f6:3f:ba:a7:b2: 7c:63:1f:74:b6:d9:68:8d:b0:ce:32:bb:17:fa:81: bf:80:ba:ee:bf:48:22:ff:cf:3a:0e:fb:f9:93:26: 13:39:5f:c5:cc:6d:2a:3a:2b:01:20:e1:97:5a:3e: 1a:b4:cf:99:78:cb:8d:ff:af:15:9f:43:20:c7:1e: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:85:3E:6E:F1:F8:FB:D7:B2:03:D8:7E:EB:3E:1F:FA:1E:13:04:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a5:b1:cf:a9:b3:48:6e:47:22:37:da:73:f7:48:6e:1d:53: 01:a3:02:20:17:5a:4c:df:58:36:7a:4f:cf:ea:c2:cd:2a:cc: a7:cb:a8:c6:8a:44:c8:4d:63:30:92:1d:f9:0c:b4:b2:37:62: e0:af:b1:38:55:c3:4a:3f:33:0e:6e:11:af:88:45:01:52:9a: ba:a8:32:f5:3a:3e:fc:e5:05:d3:1c:12:0a:da:a6:4a:05:7e: 1a:59:b1:14:cd:af:92:84:1b:f2:47:6d:34:45:76:fb:27:47: 52:d2:52:f6:b7:14:d5:c6:8a:89:72:25:6b:ac:57:dd:e5:53: ae:a7:77:b3:3b:7e:cc:89:f1:57:8c:3a:c5:ce:e4:96:0d:8a: 82:bb:cb:5f:44:a1:87:5a:bb:c4:00:7f:1e:b9:4c:c7:37:e3: fe:df:82:30:7d:12:0a:22:25:f4:ff:39:14:65:41:31:b8:8d: 9d:26:55:a9:bd:df:72:75:3d:6c:3e:e5:8f:15:43:22:00:ab: 4c:94:38:45:e1:46:ea:ed:c6:a4:6e:a0:e1:4a:41:dc:5a:d8: eb:db:c8:27:a3:92:34:dc:cd:fb:d6:b8:da:ad:a5:c1:35:57: 24:91:25:ab:44:83:6f:24:17:73:80:23:77:0c:c7:9f:17:a1: 44:7c:90:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLQXTrzN0nBejsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTJkNTI1MjgtY2Y1Zi00YzdjLTk3NTktNjkwOGVjMmFiNTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f3g6G9r1ZcAcvFhckXA2XLw+RVKls3X6FaX tyESlODcosum46iM5QFWSkCiQD2Yyna6WCL2coIKtXWAElh1I8hasQs6PaMapBGv gxDOA6E/hNoKtLAN4CKlWDlXBvh1SlPUkFBMhUBxGHPC8AzORM42P5x+S1bm/EoH AISnkDqIHNhJKiJCBPHXOhaGXGPHtlFBQwkc+OPk7qQsqaenhEbiBvGKMaEPKSmz I46KhifobX6d+C6QGDj9wlAx9j+6p7J8Yx90ttlojbDOMrsX+oG/gLruv0gi/886 Dvv5kyYTOV/FzG0qOisBIOGXWj4atM+ZeMuN/68Vn0Mgxx5O9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+FPm7x+PvXsgPYfus+H/oeEwQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMzIxNjNjNmQtNTM3YS0z YTQxLTgyMjctYzA5YzQwMGY1ZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmlsc+ps0huRyI32nP3SG4dUwGjAiAXWkzfWDZ6T8/qws0qzKfLqMaK RMhNYzCSHfkMtLI3YuCvsThVw0o/Mw5uEa+IRQFSmrqoMvU6PvzlBdMcEgrapkoF fhpZsRTNr5KEG/JHbTRFdvsnR1LSUva3FNXGiolyJWusV93lU66nd7M7fsyJ8VeM OsXO5JYNioK7y19EoYdau8QAfx65TMc34/7fgjB9EgoiJfT/ORRlQTG4jZ0mVam9 33J1PWw+5Y8VQyIAq0yUOEXhRurtxqRuoOFKQdxa2OvbyCejkjTczfvWuNqtpcE1 VySRJatEg28kF3OAI3cMx58XoUR8kF0= -----END CERTIFICATE-----Generated at Tue Sep 29 01:00:56 2026 by rpki-client