$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/20f89f58-a102-31bc-85a6-30601b05ef8d.roa File: 20f89f58-a102-31bc-85a6-30601b05ef8d.roa (raw, json) Hash identifier: qR8TLOBxfBrZEyz/VOkTDY/1kPaU5Om/d+XOVq7Ly9I= Subject key identifier: 4B:92:92:95:02:3D:89:A3:AC:0C:18:6F:3B:36:D6:33:C3:96:08:AF Certificate issuer: /CN=b7b20b1a-439d-42a4-9436-b3efc58ba63b Certificate serial: 010D0C9F4328584DE4311A597B54C83D7C329B80 Authority key identifier: 0E:3E:F1:10:E9:A0:B9:EA:BC:3B:67:1B:CA:52:3D:2B:D2:0B:CB:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/20f89f58-a102-31bc-85a6-30601b05ef8d.roa Signing time: Wed 20 May 2026 01:44:49 +0000 ROA not before: Wed 20 May 2026 01:44:49 +0000 ROA not after: Tue 18 Aug 2026 01:44:49 +0000 asID: 53760 IP address blocks: 208.93.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:31:1a:59:7b:54:c8:3d:7c:32:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b20b1a-439d-42a4-9436-b3efc58ba63b Validity Not Before: May 20 01:44:49 2026 GMT Not After : Aug 18 01:44:49 2026 GMT Subject: CN=37d69c29-b968-4a91-977b-6b1768d8ca4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:db:55:56:f1:f6:b8:01:62:ca:09:cb:e6:28: 10:8d:09:af:51:5a:24:1f:f6:98:92:18:8b:68:1a: 5f:db:04:b4:67:60:26:73:c0:c4:1b:f6:81:98:db: cd:4c:89:49:21:3d:d8:ee:d2:33:a9:8e:27:b3:4e: a1:72:d3:09:a4:e0:39:8c:2b:17:18:09:3f:8f:62: a7:0e:6c:a3:94:4b:fb:27:ae:98:ac:a0:97:ae:16: 8d:1a:ad:7c:08:96:5d:cb:d7:1b:89:0b:0d:a8:6f: 5d:32:f9:1c:4f:23:d3:c7:a6:4a:77:1e:77:6a:e1: de:1c:5a:68:13:15:53:b5:6e:4c:36:b0:07:a5:52: 88:ab:05:2b:6e:8e:37:1b:47:7b:a1:db:02:23:81: e0:1c:bb:c0:d0:aa:26:2f:f0:fb:2b:8f:9c:fc:a8: 2a:d3:51:33:13:c5:41:76:45:13:39:99:b2:f9:4e: 48:f4:60:dd:79:23:07:6b:a8:e6:cb:c5:a1:f5:d8: 7c:92:e9:71:aa:c7:e8:a5:da:1a:04:c5:fe:a6:65: d1:b9:54:e2:2b:2d:b8:7a:70:da:e5:a1:28:39:4b: b1:e5:0c:25:bf:53:de:c9:7e:b0:8d:e2:01:86:cf: 21:24:1f:ef:26:f0:3b:94:91:6e:e6:22:fd:7b:36: 57:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:92:92:95:02:3D:89:A3:AC:0C:18:6F:3B:36:D6:33:C3:96:08:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/20f89f58-a102-31bc-85a6-30601b05ef8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.crl X509v3 Authority Key Identifier: keyid:0E:3E:F1:10:E9:A0:B9:EA:BC:3B:67:1B:CA:52:3D:2B:D2:0B:CB:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer sbgp-ipAddrBlock: critical IPv4: 208.93.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:31:32:12:ac:0e:b5:2c:f6:f6:82:9c:4c:44:1b:70:ae:af: 56:bf:bc:de:b4:9d:e4:05:07:b5:0d:2c:f3:cf:70:d0:78:b7: 7a:ca:e9:9e:6c:68:4e:65:0c:6f:2c:0c:29:c7:34:75:4e:e3: 5c:5d:6c:00:38:e6:e5:ce:fb:28:22:e4:c5:b1:5d:dc:51:a8: 4b:4a:20:ba:78:96:5f:62:81:f3:fc:75:6b:07:aa:f7:7b:e4: 69:1f:31:10:e9:9f:89:88:7b:ed:57:e4:b4:94:71:1d:88:2b: 33:fa:2e:e4:89:e3:e3:34:75:1d:1d:0c:01:32:b7:3e:31:71: 5f:75:79:1a:cd:a9:60:2e:c7:9b:0e:88:c3:4e:0a:f9:52:62: 31:8a:4f:0f:54:95:a1:25:c0:35:b6:65:da:0f:31:da:39:1c: b5:a9:af:d9:25:74:52:20:ef:7f:3f:77:12:8a:78:78:69:97: 24:f4:4a:32:2e:a4:18:ff:2d:26:25:03:6a:92:aa:5a:f3:da: 31:fa:a4:68:ba:cd:14:f5:97:48:c8:d5:f5:36:a1:a0:e2:66: e7:0a:f6:bf:e3:66:c2:52:ea:0d:06:fb:ba:de:dc:b6:01:cf: 9d:d1:21:c0:f5:a8:67:8d:97:f0:a9:8f:45:d6:40:47:d5:f4: fc:0c:36:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kMRpZe1TIPXwym4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdiMjBiMWEtNDM5ZC00MmE0LTk0MzYtYjNlZmM1OGJh NjNiMB4XDTI2MDUyMDAxNDQ0OVoXDTI2MDgxODAxNDQ0OVowLzEtMCsGA1UEAxMk MzdkNjljMjktYjk2OC00YTkxLTk3N2ItNmIxNzY4ZDhjYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNtVVvH2uAFiygnL5igQjQmvUVokH/aYkhiL aBpf2wS0Z2Amc8DEG/aBmNvNTIlJIT3Y7tIzqY4ns06hctMJpOA5jCsXGAk/j2Kn DmyjlEv7J66YrKCXrhaNGq18CJZdy9cbiQsNqG9dMvkcTyPTx6ZKdx53auHeHFpo ExVTtW5MNrAHpVKIqwUrbo43G0d7odsCI4HgHLvA0KomL/D7K4+c/Kgq01EzE8VB dkUTOZmy+U5I9GDdeSMHa6jmy8Wh9dh8kulxqsfopdoaBMX+pmXRuVTiKy24enDa 5aEoOUux5Qwlv1PeyX6wjeIBhs8hJB/vJvA7lJFu5iL9ezZXfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuSkpUCPYmjrAwYbzs21jPDlgivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iN2Iy MGIxYS00MzlkLTQyYTQtOTQzNi1iM2VmYzU4YmE2M2IvMjBmODlmNTgtYTEwMi0z MWJjLTg1YTYtMzA2MDFiMDVlZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjdiMjBiMWEtNDM5ZC00MmE0LTk0 MzYtYjNlZmM1OGJhNjNiL2I3YjIwYjFhLTQzOWQtNDJhNC05NDM2LWIzZWZjNThi YTYzYi5jcmwwHwYDVR0jBBgwFoAUDj7xEOmgueq8O2cbylI9K9ILyygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iN2IyMGIxYS00MzlkLTQyYTQtOTQzNi1iM2Vm YzU4YmE2M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0F1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0xMhKsDrUs9vaCnExEG3Cur1a/vN60neQFB7UNLPPPcNB4t3rK6Z5s aE5lDG8sDCnHNHVO41xdbAA45uXO+ygi5MWxXdxRqEtKILp4ll9igfP8dWsHqvd7 5GkfMRDpn4mIe+1X5LSUcR2IKzP6LuSJ4+M0dR0dDAEytz4xcV91eRrNqWAux5sO iMNOCvlSYjGKTw9UlaElwDW2ZdoPMdo5HLWpr9kldFIg738/dxKKeHhplyT0SjIu pBj/LSYlA2qSqlrz2jH6pGi6zRT1l0jI1fU2oaDiZucK9r/jZsJS6g0G+7re3LYB z53RIcD1qGeNl/Cpj0XWQEfV9PwMNv8= -----END CERTIFICATE-----Generated at Sat Jun 6 12:05:29 2026 by rpki-client