$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa File: 20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa (raw, json) Hash identifier: G5BhcriWAwD9Si2uDcvlyXtwOfPkkN8A9A6QXz29j5w= Subject key identifier: 42:F9:19:35:F1:B9:92:22:57:65:9D:53:78:8A:12:7B:49:8C:14:8B Certificate issuer: /CN=4215bba6-51b0-41f8-9185-dda3367a8df5 Certificate serial: 010D0C9F4328584E885A4DB974634D6FC581AB80 Authority key identifier: 24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 11071 IP address blocks: 206.81.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4d:b9:74:63:4d:6f:c5:81:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4215bba6-51b0-41f8-9185-dda3367a8df5 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=8d5bf754-131e-4605-b002-ffcfc5887aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:db:51:64:6e:7b:8a:35:7a:ed:46:1a:cd:42: 76:12:07:fd:50:ba:8f:ec:5f:17:77:06:e7:cf:34: 0d:47:18:c0:6f:55:f1:61:8c:9b:9f:54:84:a6:ff: 78:37:3f:ab:80:83:6f:b9:39:9b:68:da:1f:5c:57: 45:61:9e:45:31:b2:23:a0:a4:5b:9e:73:30:85:0e: f3:76:45:d1:4b:30:88:50:ad:4e:cb:d9:13:b3:0d: 72:ff:63:82:96:0b:0d:79:47:85:6c:10:b5:fa:a5: 2c:45:32:3c:9f:d3:ef:2f:16:34:36:5c:7a:2f:ee: 78:c4:cc:c8:25:06:5a:e0:ef:66:aa:27:18:e2:31: 16:bb:22:41:7b:56:f1:f2:3f:c7:d0:26:60:fd:da: 80:7d:5e:44:d7:01:66:92:7e:09:8b:59:00:56:69: 5e:12:2c:69:91:d2:4d:a7:a8:8c:de:2a:5e:ea:bf: 8a:73:69:a8:1e:8a:af:d5:70:ed:97:b7:ea:c0:95: ef:19:a5:30:a5:40:c4:dd:dd:a1:62:0e:41:87:39: c5:1a:4b:25:15:ea:80:c6:8f:21:8a:2e:e2:a4:34: 6c:6e:33:4d:bd:ea:93:46:0d:e5:1d:09:46:52:2c: b8:43:4f:da:40:fe:1d:fb:2f:08:df:fc:1f:95:2c: 41:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F9:19:35:F1:B9:92:22:57:65:9D:53:78:8A:12:7B:49:8C:14:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.crl X509v3 Authority Key Identifier: keyid:24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer sbgp-ipAddrBlock: critical IPv4: 206.81.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9c:7c:d2:fe:a6:79:0f:17:25:c8:8a:50:74:92:89:22:2b: 25:9b:32:cb:63:dc:9d:8a:d6:61:50:84:5c:37:73:ea:26:2c: 41:97:60:3d:2e:80:0e:eb:eb:84:27:d7:19:4a:60:4d:c7:92: cd:d4:28:b4:8c:fe:e0:70:0c:a8:50:c2:49:54:1b:c1:fa:f0: 57:5a:51:8c:d3:0d:b9:01:2e:28:71:dd:97:54:cf:72:b5:79: 11:12:6c:4e:48:23:65:41:c4:a2:e4:11:bf:5d:bb:cf:58:48: eb:4c:32:8c:ee:55:1c:f0:db:02:12:c0:5c:ea:5e:dc:ea:c4: 9f:f1:db:dc:79:aa:34:8c:cf:a9:96:62:27:45:88:46:36:a8: 1e:ae:92:f2:2b:d9:12:f6:7a:e9:cf:44:4e:50:e7:98:07:6f: ea:30:b1:70:fa:87:59:0c:80:98:90:38:0f:e0:a1:8e:ed:b1: 40:9d:92:d5:56:18:62:4d:6b:08:a5:ce:07:9d:09:57:e2:d4: af:86:54:38:da:a2:82:08:9f:4a:fb:1e:19:13:c5:e1:b1:7b: 1f:d2:9b:a3:15:69:a6:7c:9b:09:a1:77:42:d9:26:ff:eb:cc: 64:78:e7:a0:5c:d3:07:3a:96:e3:99:37:9b:32:d8:d4:6f:fd: cb:29:e2:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWk25dGNNb8WBq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIxNWJiYTYtNTFiMC00MWY4LTkxODUtZGRhMzM2N2E4 ZGY1MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk OGQ1YmY3NTQtMTMxZS00NjA1LWIwMDItZmZjZmM1ODg3YWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkttRZG57ijV67UYazUJ2Egf9ULqP7F8Xdwbn zzQNRxjAb1XxYYybn1SEpv94Nz+rgINvuTmbaNofXFdFYZ5FMbIjoKRbnnMwhQ7z dkXRSzCIUK1Oy9kTsw1y/2OClgsNeUeFbBC1+qUsRTI8n9PvLxY0Nlx6L+54xMzI JQZa4O9mqicY4jEWuyJBe1bx8j/H0CZg/dqAfV5E1wFmkn4Ji1kAVmleEixpkdJN p6iM3ipe6r+Kc2moHoqv1XDtl7fqwJXvGaUwpUDE3d2hYg5BhznFGkslFeqAxo8h ii7ipDRsbjNNveqTRg3lHQlGUiy4Q0/aQP4d+y8I3/wflSxBGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEL5GTXxuZIiV2WdU3iKEntJjBSLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80MjE1 YmJhNi01MWIwLTQxZjgtOTE4NS1kZGEzMzY3YThkZjUvMjBhNmNkZmMtNWMxOC0z Y2Q4LWIxNDctMDdhNzVjOWY4NmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDIxNWJiYTYtNTFiMC00MWY4LTkx ODUtZGRhMzM2N2E4ZGY1LzQyMTViYmE2LTUxYjAtNDFmOC05MTg1LWRkYTMzNjdh OGRmNS5jcmwwHwYDVR0jBBgwFoAUJMjDFE3YZs4j5jlIq8rERWLPMf4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80MjE1YmJhNi01MWIwLTQxZjgtOTE4NS1kZGEz MzY3YThkZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzlFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIScfNL+pnkPFyXIilB0kokiKyWbMstj3J2K1mFQhFw3c+omLEGXYD0u gA7r64Qn1xlKYE3Hks3UKLSM/uBwDKhQwklUG8H68FdaUYzTDbkBLihx3ZdUz3K1 eRESbE5II2VBxKLkEb9du89YSOtMMozuVRzw2wISwFzqXtzqxJ/x29x5qjSMz6mW YidFiEY2qB6ukvIr2RL2eunPRE5Q55gHb+owsXD6h1kMgJiQOA/goY7tsUCdktVW GGJNawilzgedCVfi1K+GVDjaooIIn0r7HhkTxeGxex/Sm6MVaaZ8mwmhd0LZJv/r zGR456Bc0wc6luOZN5sy2NRv/csp4s0= -----END CERTIFICATE-----Generated at Fri Jul 24 11:09:07 2026 by rpki-client