$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa File: 69d00425-cf12-3785-aecf-3a474d2c9aaf.roa (raw, json) Hash identifier: xgEpEPV99171i4oMpShJ6YWMaHeXy0ITaxXI2qU+BG8= Subject key identifier: 13:EC:41:6F:94:E0:97:F2:E2:0B:A9:53:35:76:8A:6D:16:0D:BB:B3 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584F9A6860AEBE3C5B1195890200 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 9009 IP address blocks: 204.11.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:60:ae:be:3c:5b:11:95:89:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=c7ebde68-1d02-4706-89a2-864d7529defc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d4:aa:e8:c0:7b:f7:30:6d:3d:8e:f2:bb:c6: 34:07:c5:a8:b1:f8:2b:76:78:9a:47:8e:f7:42:9a: 70:f2:b6:33:c6:1e:e4:0c:9f:f8:86:86:49:9c:ca: 17:07:93:19:dd:14:3e:66:ba:d9:c2:b7:1c:cf:ae: fb:c6:6d:ce:2a:55:3d:ca:d4:6a:b9:c8:05:1f:88: 9d:06:49:4f:96:22:5a:fe:11:22:4b:7b:64:0f:01: 6c:d9:f3:e4:48:27:43:0d:7a:a0:16:c2:7c:be:9f: 48:da:49:5d:8a:b5:13:e9:3d:83:00:1f:25:0f:56: eb:1f:58:dd:a9:27:ed:e9:f0:46:cd:0f:47:b5:a7: e2:7f:0f:1c:5d:c9:8e:a2:ec:0b:cf:e4:36:31:d7: 3c:e6:e9:ef:eb:35:5b:e7:51:81:31:ae:22:72:ec: 1d:3c:36:f0:41:4f:09:3e:ab:0b:8e:67:ff:eb:aa: ea:f7:46:37:dc:77:68:63:8e:35:8e:4c:23:be:89: e6:b3:6c:19:2c:70:45:e3:a1:ec:ad:0e:05:37:a2: 3c:5a:05:b3:e7:19:0f:89:d6:69:20:35:5b:8a:a4: 13:c3:a3:50:51:36:bc:40:53:e0:82:fe:93:22:75: a8:94:be:2c:af:50:50:d8:a0:31:dc:fb:a0:a1:b9: 16:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EC:41:6F:94:E0:97:F2:E2:0B:A9:53:35:76:8A:6D:16:0D:BB:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 204.11.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8f:7c:f0:7c:04:aa:5a:70:9f:6c:06:c7:fe:31:a6:4d:89: 94:f6:71:79:52:e6:ec:ba:a9:67:d1:bc:b2:ea:f6:73:c2:97: ab:0e:eb:68:48:47:ed:c1:fb:ae:d4:86:c2:bb:dd:90:8c:57: 1e:1b:e3:42:62:6c:5a:1e:e1:b1:45:9c:f7:4b:39:05:bf:03: 3e:8a:97:a2:4f:5f:e2:7e:11:a1:f3:f4:20:53:26:c0:2b:21: ea:55:2c:d0:90:ce:00:46:20:d2:a5:b8:e7:e3:b6:7c:e2:f0: 29:39:d2:8c:2c:04:d0:9b:06:d2:19:18:4e:9e:47:ab:6a:65: 86:b8:41:30:d3:af:70:ad:fb:06:a5:70:31:48:fc:9a:93:ed: 80:fd:52:65:8f:a2:f1:04:bc:50:7a:83:bb:da:80:79:ea:ec: a0:1b:2f:9b:58:31:3c:9f:af:b1:10:71:b3:5a:d3:a9:6d:f9: 74:97:e2:9e:1e:78:98:42:df:7c:5c:b2:70:63:6d:58:7f:7e: 84:76:dd:73:25:8b:7d:81:cf:08:67:17:44:9f:60:69:f2:5c: d8:db:45:d4:bb:fb:37:61:3f:68:db:ea:4d:08:e4:61:7d:75: 45:6f:ee:dd:05:ef:30:13:0f:64:dc:4b:74:57:aa:7f:6e:94: 31:17:fd:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaGCuvjxbEZWJAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk YzdlYmRlNjgtMWQwMi00NzA2LTg5YTItODY0ZDc1MjlkZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltSq6MB79zBtPY7yu8Y0B8WosfgrdniaR473 Qppw8rYzxh7kDJ/4hoZJnMoXB5MZ3RQ+ZrrZwrccz677xm3OKlU9ytRqucgFH4id BklPliJa/hEiS3tkDwFs2fPkSCdDDXqgFsJ8vp9I2kldirUT6T2DAB8lD1brH1jd qSft6fBGzQ9Htafifw8cXcmOouwLz+Q2Mdc85unv6zVb51GBMa4icuwdPDbwQU8J PqsLjmf/66rq90Y33HdoY441jkwjvonms2wZLHBF46HsrQ4FN6I8WgWz5xkPidZp IDVbiqQTw6NQUTa8QFPggv6TInWolL4sr1BQ2KAx3PugobkWwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPsQW+U4Jfy4gupUzV2im0WDbuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNjlkMDA0MjUtY2YxMi0z Nzg1LWFlY2YtM2E0NzRkMmM5YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuPfPB8BKpacJ9sBsf+MaZNiZT2cXlS5uy6qWfRvLLq9nPCl6sO62hI R+3B+67UhsK73ZCMVx4b40JibFoe4bFFnPdLOQW/Az6Kl6JPX+J+EaHz9CBTJsAr IepVLNCQzgBGINKluOfjtnzi8Ck50owsBNCbBtIZGE6eR6tqZYa4QTDTr3Ct+wal cDFI/JqT7YD9UmWPovEEvFB6g7vagHnq7KAbL5tYMTyfr7EQcbNa06lt+XSX4p4e eJhC33xcsnBjbVh/foR23XMli32BzwhnF0SfYGnyXNjbRdS7+zdhP2jb6k0I5GF9 dUVv7t0F7zATD2TcS3RXqn9ulDEX/Sw= -----END CERTIFICATE-----Generated at Wed Oct 28 05:39:28 2026 by rpki-client