$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa File: 3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa (raw, json) Hash identifier: hmtduQh/eLzPNBa7wgCa2+hQ9pLluGW8m+vGekmH0+E= Subject key identifier: 67:77:AA:FE:9F:9E:FC:AC:D5:A0:88:07:DD:D5:E1:16:9A:DA:81:8C Certificate issuer: /CN=371710da-4c28-4923-921b-e1d710cec29e Certificate serial: 010D0C9F4328584F5E62EBCF86F66005C20394A0 Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 198949 IP address blocks: 208.68.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:eb:cf:86:f6:60:05:c2:03:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=186fc329-acb0-42ec-b4e8-ea2d047d6d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:d3:ac:7f:23:0c:91:24:7a:56:b4:0d:85: be:66:00:8b:94:bf:f8:9d:bd:2c:72:a7:eb:12:7a: 00:f9:42:b3:06:00:23:41:bc:9b:93:fc:bc:7c:01: c9:f6:4f:4b:45:1c:45:82:b5:a1:d9:8e:97:5e:12: f8:8c:bb:27:f8:61:10:71:92:46:c3:61:15:21:ac: 44:1a:b4:83:c9:3c:e4:ba:64:04:08:1f:1d:2b:2f: 8d:17:70:79:d1:e9:db:27:98:07:1f:85:90:d5:76: 97:8e:6c:7d:53:3e:65:44:d8:f4:f2:6c:e5:93:1b: 0a:42:e0:33:7a:b8:7a:dc:4a:b8:43:95:1a:bf:bb: fc:d7:b9:92:69:17:87:33:4c:87:a1:1a:31:84:f0: 5b:f1:5d:db:a2:dc:9c:24:06:41:97:22:b2:75:bd: 89:2c:e2:13:da:f6:a3:14:7d:b5:9b:d9:16:e2:bf: 1b:9f:21:b2:b6:ac:ce:f4:d8:2b:62:71:91:16:f9: 00:c6:84:a5:00:67:4c:14:00:3e:c9:80:51:27:61: 88:d9:92:da:cb:3c:8f:1e:00:35:f0:99:2c:b0:f4: 6e:cf:a6:67:70:ee:10:51:43:ea:5e:b2:d0:a7:8a: 14:21:01:75:fe:7a:fd:22:3f:2d:42:a5:dc:5e:ce: 8c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:77:AA:FE:9F:9E:FC:AC:D5:A0:88:07:DD:D5:E1:16:9A:DA:81:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl X509v3 Authority Key Identifier: keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer sbgp-ipAddrBlock: critical IPv4: 208.68.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4c:26:41:34:89:95:8c:0c:f7:d8:cb:0c:03:08:0d:7e:56: 9e:fb:f0:7e:ac:09:2a:bc:51:e7:48:e3:82:f8:8b:11:94:ef: 13:40:33:ab:56:e1:4a:94:2a:d7:ce:00:1f:70:40:92:53:24: 27:f6:4e:a5:67:e2:7e:00:ef:21:90:dd:ab:02:33:f1:0e:39: b0:32:6a:5c:4c:e1:07:f8:9f:fd:c1:92:84:79:9d:5c:3c:b9: dd:1b:b9:1a:9e:c7:58:19:05:ee:8d:8c:38:7e:5b:35:1f:8e: 8d:c9:b0:3b:fd:a3:62:92:33:03:46:36:d1:ee:8c:82:8c:44: 3f:43:2b:e7:78:07:c1:a0:89:4c:23:0e:be:f7:4c:88:60:9c: f6:cd:1d:e7:e4:1d:0d:88:4a:fb:95:a3:b7:14:a2:34:8d:ad: f2:8a:bb:56:ac:a2:e9:4d:3d:70:a7:fb:47:43:ad:23:3c:55: ce:d7:07:85:b9:6a:2c:ac:17:4d:97:c7:d3:b1:8b:16:8c:d9: dd:98:0e:86:c7:a5:c8:c0:ce:91:a0:1c:32:d6:e9:36:41:d4: fc:d0:bc:12:e5:b0:07:e7:d4:54:dc:7a:a5:0f:2f:8e:2c:9a: 73:d4:89:f6:2d:2d:c0:49:ac:fb:ec:a4:3e:47:a1:f1:ec:95: ce:49:6a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuvPhvZgBcIDlKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxNzEwZGEtNGMyOC00OTIzLTkyMWItZTFkNzEwY2Vj MjllMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MTg2ZmMzMjktYWNiMC00MmVjLWI0ZTgtZWEyZDA0N2Q2ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrzTrH8jDJEkela0DYW+ZgCLlL/4nb0scqfr EnoA+UKzBgAjQbybk/y8fAHJ9k9LRRxFgrWh2Y6XXhL4jLsn+GEQcZJGw2EVIaxE GrSDyTzkumQECB8dKy+NF3B50enbJ5gHH4WQ1XaXjmx9Uz5lRNj08mzlkxsKQuAz erh63Eq4Q5Uav7v817mSaReHM0yHoRoxhPBb8V3botycJAZBlyKydb2JLOIT2vaj FH21m9kW4r8bnyGytqzO9NgrYnGRFvkAxoSlAGdMFAA+yYBRJ2GI2ZLayzyPHgA1 8JkssPRuz6ZncO4QUUPqXrLQp4oUIQF1/nr9Ij8tQqXcXs6MnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd3qv6fnvys1aCIB93V4Raa2oGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNzE3 MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3MTBjZWMyOWUvM2ZjMTM5NmEtOWQwMS0z YmM0LTliYzMtNjdmMzE1OWVmOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzcxNzEwZGEtNGMyOC00OTIzLTky MWItZTFkNzEwY2VjMjllLzM3MTcxMGRhLTRjMjgtNDkyMy05MjFiLWUxZDcxMGNl YzI5ZS5jcmwwHwYDVR0jBBgwFoAUXW/a/Le23lFw8Ej2m6zdI6ddeV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNzE3MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3 MTBjZWMyOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtMJkE0iZWMDPfYywwDCA1+Vp778H6sCSq8UedI44L4ixGU7xNAM6tW 4UqUKtfOAB9wQJJTJCf2TqVn4n4A7yGQ3asCM/EOObAyalxM4Qf4n/3BkoR5nVw8 ud0buRqex1gZBe6NjDh+WzUfjo3JsDv9o2KSMwNGNtHujIKMRD9DK+d4B8GgiUwj Dr73TIhgnPbNHefkHQ2ISvuVo7cUojSNrfKKu1asoulNPXCn+0dDrSM8Vc7XB4W5 aiysF02Xx9OxixaM2d2YDobHpcjAzpGgHDLW6TZB1PzQvBLlsAfn1FTceqUPL44s mnPUifYtLcBJrPvspD5HofHslc5JaoQ= -----END CERTIFICATE-----Generated at Tue Oct 20 01:18:50 2026 by rpki-client