$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa File: 67ef0949-c298-330b-aabd-6a4c950d7ad6.roa (raw, json) Hash identifier: dpP6ovcV8OV0OzkT1PY/r2mCuPr3wYu/zp/dni2E6DQ= Subject key identifier: D1:8F:D7:8E:DE:46:57:70:80:F8:53:30:9E:22:79:61:24:C4:0E:61 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA667AD111F1C33F5C2059C20 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 209.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ad:11:1f:1c:33:f5:c2:05:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=6f7a95a8-d79f-4b32-b5e0-42a0b3932bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:82:4c:60:5b:22:58:a5:dc:8a:22:8f:9f:19: 53:25:1e:b9:a6:f5:db:96:71:83:d6:71:f7:66:d3: 07:16:df:b7:46:d6:08:4b:0c:9d:0c:30:ac:03:3d: a5:5e:43:4a:6a:05:df:a0:b8:53:62:f7:73:a1:7e: 66:cc:25:61:02:94:0a:75:01:78:a1:32:0e:29:f1: b4:ad:cb:36:36:39:e4:df:6e:7a:01:3f:b7:60:d5: ac:36:6e:98:ae:f8:25:1d:e0:9e:02:73:1f:47:bd: 98:72:6f:8a:36:10:ed:9a:b3:64:5b:6f:16:a4:40: 18:d2:f9:12:dd:ac:eb:46:90:63:73:f7:ee:2f:a8: c5:9a:d3:d1:68:aa:72:e4:49:da:83:46:76:c5:8d: b1:7d:d0:f6:f5:fa:56:f4:3e:59:d6:8e:27:b5:4d: 51:f7:d9:9b:5f:28:64:cf:03:64:b0:03:a0:62:2d: 7a:11:99:3a:1c:94:34:28:1d:f9:11:a5:51:67:e1: 75:2a:ea:16:07:a1:53:f6:7a:13:6d:bf:27:7b:46: cf:66:34:38:e3:3f:68:6f:93:d7:37:5c:77:42:2e: 6f:06:81:f8:bd:31:41:d5:e6:7f:79:19:31:09:55: 2a:f2:b4:09:2b:ad:11:bf:16:ae:2e:ab:94:ff:7d: 19:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8F:D7:8E:DE:46:57:70:80:F8:53:30:9E:22:79:61:24:C4:0E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 209.20.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:18:67:c8:b0:d2:1b:1e:5e:0c:8a:1f:f3:dc:cb:9c:72:6d: 04:90:9b:5a:03:4e:07:68:3d:c9:1b:60:43:43:d4:44:ca:2f: 25:47:b3:ab:c5:6c:24:ec:62:de:db:d5:95:8c:2c:98:98:9d: 6f:72:4c:95:e0:80:c7:76:5d:e3:ef:e4:ca:8a:c5:cf:30:64: 5c:13:e6:36:25:a9:7c:f5:f3:f6:a7:65:11:2a:90:5e:04:26: e6:98:4e:d7:78:72:69:94:42:6b:df:ab:84:ec:71:76:e1:f0: 6b:54:79:ea:b1:37:89:b6:1b:6f:12:43:aa:d6:20:87:1d:f2: 37:d6:e1:15:c8:80:7f:e5:2a:4f:b0:10:7e:6f:47:05:74:07: fd:37:96:f5:d8:d7:3c:88:87:71:42:da:a5:e3:37:51:6e:cd: e9:03:5a:5e:83:05:d6:cd:13:6b:82:94:2b:8c:07:5d:93:51: d2:c7:df:04:4e:0b:ef:a9:7a:69:19:32:87:1c:30:cf:fc:96: 16:83:29:d2:95:f2:6b:e7:b2:9a:23:71:78:14:68:08:a2:c2: 17:17:73:9d:58:c6:c1:53:f7:27:ff:fc:4a:2a:dd:82:5e:c6: a7:50:e2:9b:ad:c7:7f:12:45:a6:28:4a:53:22:47:18:ff:8a: c8:d0:d1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ60RHxwz9cIFnCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NmY3YTk1YTgtZDc5Zi00YjMyLWI1ZTAtNDJhMGIzOTMyYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIJMYFsiWKXciiKPnxlTJR65pvXblnGD1nH3 ZtMHFt+3RtYISwydDDCsAz2lXkNKagXfoLhTYvdzoX5mzCVhApQKdQF4oTIOKfG0 rcs2Njnk3256AT+3YNWsNm6YrvglHeCeAnMfR72Ycm+KNhDtmrNkW28WpEAY0vkS 3azrRpBjc/fuL6jFmtPRaKpy5Enag0Z2xY2xfdD29fpW9D5Z1o4ntU1R99mbXyhk zwNksAOgYi16EZk6HJQ0KB35EaVRZ+F1KuoWB6FT9noTbb8ne0bPZjQ44z9ob5PX N1x3Qi5vBoH4vTFB1eZ/eRkxCVUq8rQJK60RvxauLquU/30ZPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGP147eRldwgPhTMJ4ieWEkxA5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjdlZjA5NDktYzI5OC0z MzBiLWFhYmQtNmE0Yzk1MGQ3YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8YZ8iw0hseXgyKH/Pcy5xybQSQm1oDTgdoPckbYEND1ETKLyVHs6vF bCTsYt7b1ZWMLJiYnW9yTJXggMd2XePv5MqKxc8wZFwT5jYlqXz18/anZREqkF4E JuaYTtd4cmmUQmvfq4TscXbh8GtUeeqxN4m2G28SQ6rWIIcd8jfW4RXIgH/lKk+w EH5vRwV0B/03lvXY1zyIh3FC2qXjN1FuzekDWl6DBdbNE2uClCuMB12TUdLH3wRO C++pemkZMoccMM/8lhaDKdKV8mvnspojcXgUaAiiwhcXc51YxsFT9yf//Eoq3YJe xqdQ4putx38SRaYoSlMiRxj/isjQ0SA= -----END CERTIFICATE-----Generated at Mon Nov 3 08:47:06 2025 by rpki-client