$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa File: 3b17e899-4e7e-3822-926f-bb9ab91e287d.roa (raw, json) Hash identifier: gO20LyfsH0JRlqwzivaFJbtD/aUnmRsQXOGOsmw3MXc= Subject key identifier: B7:91:5E:43:6D:97:05:74:80:80:36:5A:83:50:6F:D9:A1:34:9F:9B Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584F6F22C81EC02E738099CD1C80 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 30383 IP address blocks: 198.208.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:c8:1e:c0:2e:73:80:99:cd:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=8b51cd35-bc5e-483b-9185-c86fe4b5539a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:3d:2f:12:ec:d6:4a:17:ca:0d:3a:75:c1: 29:60:ec:b6:c8:46:7f:f3:93:ce:bc:f3:e6:c1:f4: 9a:4c:95:aa:c4:ac:62:f6:44:1a:d8:1b:8c:a8:0a: 10:75:28:17:49:7b:03:6b:57:e2:83:97:bb:83:47: 40:4b:4d:68:b9:96:33:78:de:91:8e:58:e7:10:19: 91:07:72:65:ca:f3:35:61:44:89:0e:1c:d3:c6:6c: 7e:cc:7c:ea:b5:f2:d6:34:b1:c9:58:f0:d0:8f:bd: 26:bd:61:e8:5f:01:79:67:d2:1b:ad:4f:e7:ba:89: 04:31:69:7a:0e:09:46:7a:ad:2e:66:72:41:8f:c6: 27:a2:78:97:cd:a6:14:d6:ec:7f:03:89:94:80:f0: 7f:42:6d:70:2d:b3:e9:60:0c:7c:ce:1c:4d:e2:b6: 1c:ef:2d:31:56:86:71:6d:d2:1c:3f:63:fa:99:59: dd:d6:29:1e:b3:84:87:a3:f7:59:d2:7b:5e:f2:fb: b2:57:31:5f:bb:df:d0:4f:fb:9c:f3:af:a3:cf:a2: 48:bd:10:20:81:be:e4:b6:75:6a:4f:0e:4d:63:43: 0a:fd:87:f3:69:f3:ae:d4:1a:c2:b4:4a:77:43:b7: d3:3d:5f:43:33:88:65:4b:d2:ce:4f:1a:bc:39:fc: fc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:91:5E:43:6D:97:05:74:80:80:36:5A:83:50:6F:D9:A1:34:9F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2d:c1:e6:92:cb:89:96:86:7d:85:d4:d0:c0:e9:3a:c5:f0: c9:93:8a:15:08:f1:a7:93:00:9d:87:a4:53:ec:4b:b2:96:29: 58:66:8f:fe:c3:8e:cb:23:c9:73:f4:6a:57:98:05:cf:73:ff: 69:ff:1d:67:2e:37:c0:c0:b1:5d:da:ee:1a:96:38:08:25:52: e0:1f:7d:ec:ba:86:70:53:11:33:3a:ce:e9:09:a9:e9:19:58: a1:3a:3c:ab:22:ca:be:da:44:26:5f:e7:2b:d8:54:26:ab:e3: 4d:76:44:9d:10:62:ba:5d:a5:35:0c:0d:9c:bd:b9:cf:3e:12: d5:c1:3a:9a:8c:80:a8:0c:10:b1:73:cf:51:df:d2:0f:87:88: 17:74:74:4c:73:54:37:2c:fe:f2:90:54:a8:6b:7e:27:76:1e: ca:54:1f:e9:dc:46:11:f5:3f:8f:24:87:76:ab:ca:17:a9:e8: 0d:9e:6d:0e:e8:80:69:81:97:0c:75:00:18:7d:11:7b:d3:70: 4a:c1:13:c3:92:15:fc:4e:20:60:5e:08:04:44:fd:be:8a:0c: 00:14:9c:9e:ca:2b:6e:37:67:3e:ed:f0:7f:ae:00:01:ce:59: 0b:1a:30:5b:95:cb:d9:a3:7f:87:3a:3a:3f:a3:18:cf:79:9b: 6a:24:32:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIsgewC5zgJnNHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk OGI1MWNkMzUtYmM1ZS00ODNiLTkxODUtYzg2ZmU0YjU1MzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmho9LxLs1koXyg06dcEpYOy2yEZ/85POvPPm wfSaTJWqxKxi9kQa2BuMqAoQdSgXSXsDa1fig5e7g0dAS01ouZYzeN6RjljnEBmR B3JlyvM1YUSJDhzTxmx+zHzqtfLWNLHJWPDQj70mvWHoXwF5Z9IbrU/nuokEMWl6 DglGeq0uZnJBj8YnoniXzaYU1ux/A4mUgPB/Qm1wLbPpYAx8zhxN4rYc7y0xVoZx bdIcP2P6mVnd1ikes4SHo/dZ0nte8vuyVzFfu9/QT/uc86+jz6JIvRAggb7ktnVq Tw5NY0MK/YfzafOu1BrCtEp3Q7fTPV9DM4hlS9LOTxq8Ofz8UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeRXkNtlwV0gIA2WoNQb9mhNJ+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvM2IxN2U4OTktNGU3ZS0z ODIyLTkyNmYtYmI5YWI5MWUyODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADItweaSy4mWhn2F1NDA6TrF8MmTihUI8aeTAJ2HpFPsS7KWKVhmj/7D jssjyXP0aleYBc9z/2n/HWcuN8DAsV3a7hqWOAglUuAffey6hnBTETM6zukJqekZ WKE6PKsiyr7aRCZf5yvYVCar4012RJ0QYrpdpTUMDZy9uc8+EtXBOpqMgKgMELFz z1Hf0g+HiBd0dExzVDcs/vKQVKhrfid2HspUH+ncRhH1P48kh3aryhep6A2ebQ7o gGmBlwx1ABh9EXvTcErBE8OSFfxOIGBeCARE/b6KDAAUnJ7KK243Zz7t8H+uAAHO WQsaMFuVy9mjf4c6Oj+jGM95m2okMoA= -----END CERTIFICATE-----Generated at Mon Oct 12 03:26:12 2026 by rpki-client