$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa File: 3b17e899-4e7e-3822-926f-bb9ab91e287d.roa (raw, json) Hash identifier: R6RphfqQxrZ231vgFz1KmZVzBiRA5IBE9UCVmInPVx0= Subject key identifier: 71:D7:81:9A:9E:03:D7:15:CA:A6:B2:72:84:F9:F1:26:C8:07:2E:D2 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584ECBD1C135FB9A3A6D1E235080 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 30383 IP address blocks: 198.208.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:c1:35:fb:9a:3a:6d:1e:23:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=1bb425e8-dc1b-476e-be6e-5005e78f710b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c4:ae:6f:5d:98:34:e8:09:b0:70:9a:e2:02: 26:5e:fd:99:52:98:69:76:72:d8:86:55:00:92:2b: d2:83:54:04:0e:5f:21:6c:20:d9:8b:06:7f:90:2c: c2:75:22:fc:50:92:e0:f8:29:7c:19:2f:ad:b3:c5: 04:16:54:5e:8c:db:9b:ed:b0:b8:d9:0b:a3:a3:47: f4:2e:12:d4:40:55:fe:04:03:23:00:5e:2b:c6:a7: 7d:98:74:67:38:a1:cf:ee:6f:06:65:79:9e:a5:3f: 55:dd:2d:b1:87:ca:48:7a:06:a5:49:92:4e:b4:d1: 7d:b1:31:0e:bd:8e:5a:2b:63:d1:09:72:5b:cb:22: 2b:d0:4b:25:90:5c:89:fe:ba:24:58:17:33:53:a0: b7:e3:c2:b9:bb:0d:99:62:ee:e3:42:00:25:86:86: 64:46:b9:02:93:a8:77:f6:e3:4a:b7:ca:76:04:19: 7f:b8:57:9a:de:5b:b0:a7:d0:2f:a3:6c:59:d8:43: a9:43:95:10:ff:fe:44:49:9f:4f:40:76:0d:a8:14: 9e:6a:81:ec:69:ce:62:5d:90:07:a7:ba:e0:1f:ae: e1:10:27:0c:e5:dd:cb:f1:34:f9:5c:43:dd:1d:d7: 1e:3d:fe:a5:2d:a6:71:88:a8:d9:5a:55:8f:46:84: 0d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:81:9A:9E:03:D7:15:CA:A6:B2:72:84:F9:F1:26:C8:07:2E:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:15:55:ca:c7:07:37:40:d4:2b:28:07:3c:0a:54:bd:ee:c0: 05:0f:73:ff:91:06:30:0c:5a:b5:8f:f3:58:1b:6e:f5:48:23: f8:0d:4d:87:a6:a9:4f:25:c7:7e:9e:11:47:64:43:b8:9d:6e: 75:d2:d1:0c:aa:a9:f7:a5:51:81:6a:45:76:bd:6e:48:3c:9c: 91:06:5a:ea:1f:69:34:cd:2f:34:59:dc:65:56:15:8f:5d:15: c0:0f:d1:3d:a6:5b:4a:2d:de:e3:96:0c:0b:4d:cc:ad:25:0a: 42:c8:26:93:44:85:a2:ef:2f:f8:69:3c:69:15:09:f4:4f:f8: 44:9b:42:42:80:b9:95:57:52:14:dc:61:25:94:87:b0:13:32: 5d:bc:55:90:04:2e:e4:28:d2:b7:b0:cf:16:2f:da:cc:13:f9: 7c:a3:73:48:46:30:bb:68:a8:b7:dd:94:13:65:11:13:60:7f: b0:32:d5:8e:21:56:4a:b1:91:2d:c9:1b:40:de:39:66:1d:d6: 8d:4e:ef:07:09:e7:a6:43:81:4f:17:57:dc:2f:44:ca:8f:15: 06:9c:27:3b:c0:3f:b0:c5:ad:2a:01:8a:9c:f1:15:f8:8e:6f: b0:f1:12:6e:07:92:3a:6e:d9:a5:5a:c5:a6:85:df:5f:5d:66: aa:d5:dd:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0cE1+5o6bR4jUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk MWJiNDI1ZTgtZGMxYi00NzZlLWJlNmUtNTAwNWU3OGY3MTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Sub12YNOgJsHCa4gImXv2ZUphpdnLYhlUA kivSg1QEDl8hbCDZiwZ/kCzCdSL8UJLg+Cl8GS+ts8UEFlRejNub7bC42Qujo0f0 LhLUQFX+BAMjAF4rxqd9mHRnOKHP7m8GZXmepT9V3S2xh8pIegalSZJOtNF9sTEO vY5aK2PRCXJbyyIr0EslkFyJ/rokWBczU6C348K5uw2ZYu7jQgAlhoZkRrkCk6h3 9uNKt8p2BBl/uFea3luwp9Avo2xZ2EOpQ5UQ//5ESZ9PQHYNqBSeaoHsac5iXZAH p7rgH67hECcM5d3L8TT5XEPdHdcePf6lLaZxiKjZWlWPRoQNhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHXgZqeA9cVyqaycoT58SbIBy7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvM2IxN2U4OTktNGU3ZS0z ODIyLTkyNmYtYmI5YWI5MWUyODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIVVcrHBzdA1CsoBzwKVL3uwAUPc/+RBjAMWrWP81gbbvVII/gNTYem qU8lx36eEUdkQ7idbnXS0QyqqfelUYFqRXa9bkg8nJEGWuofaTTNLzRZ3GVWFY9d FcAP0T2mW0ot3uOWDAtNzK0lCkLIJpNEhaLvL/hpPGkVCfRP+ESbQkKAuZVXUhTc YSWUh7ATMl28VZAELuQo0rewzxYv2swT+Xyjc0hGMLtoqLfdlBNlERNgf7Ay1Y4h VkqxkS3JG0DeOWYd1o1O7wcJ56ZDgU8XV9wvRMqPFQacJzvAP7DFrSoBipzxFfiO b7DxEm4Hkjpu2aVaxaaF319dZqrV3T8= -----END CERTIFICATE-----Generated at Tue Aug 25 15:37:45 2026 by rpki-client