$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/68093bb4-8f68-3d5f-ba12-6503f9bd0804.roa File: 68093bb4-8f68-3d5f-ba12-6503f9bd0804.roa (raw, json) Hash identifier: M5KfYyLgWSZhXzeb7/e9PrHRBpkKH7hbk+UL7f9Djps= Subject key identifier: 53:82:03:41:D0:A0:A0:58:38:40:65:0D:57:F8:13:99:E7:17:A1:F4 Certificate issuer: /CN=a20b951e-7538-41fb-97d2-2dd9393d3541 Certificate serial: 010D0C9F4328584EC7A1BBB58D0C6AA05FEF6380 Authority key identifier: 96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/68093bb4-8f68-3d5f-ba12-6503f9bd0804.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 36038 IP address blocks: 142.249.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:bb:b5:8d:0c:6a:a0:5f:ef:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20b951e-7538-41fb-97d2-2dd9393d3541 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=e6975df3-7106-4064-a182-bd49575ee853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5d:96:7e:08:5a:34:9b:e5:86:e4:a6:d8:5e: 7f:9c:6b:a8:bd:0a:ea:30:d1:8a:c0:49:a7:51:0e: a6:2f:7e:a5:fb:a3:b4:25:89:2e:73:c4:18:e8:f9: 89:41:e2:bb:41:e2:d4:9b:5d:09:41:65:03:75:ab: bd:c1:c3:fc:fd:cf:34:35:82:26:45:b5:72:07:c3: cd:be:ea:ba:12:db:08:36:fa:ec:11:ee:95:11:fa: 0e:e6:48:b5:30:59:9a:76:55:60:7f:61:9b:55:02: ac:7f:3a:9f:ac:b7:55:a8:43:0a:54:9f:ef:20:0d: 4d:da:b3:5b:fb:8a:de:e4:2d:9d:d6:06:70:04:8e: 38:f7:a2:45:df:d6:96:e0:e0:41:04:99:19:ea:2a: 0c:f8:04:02:99:a5:0f:a4:9b:cb:f5:88:89:36:13: 67:c4:30:09:ed:12:4f:f8:9a:17:4f:af:f4:09:d3: cb:2a:25:d1:20:19:3f:23:ad:12:ae:89:2c:32:8b: 55:df:2b:63:25:95:0c:b9:e4:18:51:90:96:2b:f8: dc:1a:57:9b:58:2e:b4:ed:6e:45:3a:3f:51:9b:39: 49:a4:0a:37:e6:bd:6d:b5:93:dc:62:b0:c9:ac:e4: 4b:a5:5a:ca:8f:37:c8:dc:6b:4f:a2:3e:14:4d:54: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:82:03:41:D0:A0:A0:58:38:40:65:0D:57:F8:13:99:E7:17:A1:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/68093bb4-8f68-3d5f-ba12-6503f9bd0804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.crl X509v3 Authority Key Identifier: keyid:96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer sbgp-ipAddrBlock: critical IPv4: 142.249.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ec:49:52:14:f3:a7:39:92:ac:96:85:40:71:66:0f:23:89: 78:80:ce:31:7e:b9:20:c5:76:37:7e:d0:8b:88:fc:dd:df:57: ce:80:95:d5:ae:67:a3:a6:ca:98:e5:c4:d5:68:fc:1a:bb:a0: 33:37:c2:aa:37:92:a4:13:b4:94:17:0a:d0:e0:cf:70:04:fc: ec:ad:68:02:4d:c5:68:3b:cf:6e:61:42:5a:da:7c:a8:ed:1c: 06:b0:25:a9:73:bf:dc:c0:dd:dc:7a:59:ea:ae:ae:5c:96:d4: 8d:ba:71:a7:bd:01:00:49:ae:6b:b7:e5:59:45:5a:f0:c0:cf: 40:e8:b7:28:29:0b:7c:7b:fd:b8:5a:f1:ae:40:e7:58:24:03: 24:24:3f:2e:d4:f4:d0:24:71:0d:c2:65:5e:8d:35:01:79:52: bb:98:ee:33:cd:e4:f2:48:29:b9:80:51:f4:46:df:08:cb:75: e6:c7:53:46:29:47:c4:c2:37:aa:60:52:2c:79:86:23:a7:19: 3b:c2:56:b0:6c:68:32:4c:02:b9:db:81:87:bc:9e:de:e0:b7: b1:c6:58:d0:22:54:27:b8:13:c9:2c:55:e4:b4:0c:2c:72:74: 37:63:15:31:fc:4e:b8:57:9b:62:d2:ce:c3:c2:af:5a:6f:89: bc:c6:06:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Hobu1jQxqoF/vY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwYjk1MWUtNzUzOC00MWZiLTk3ZDItMmRkOTM5M2Qz NTQxMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZTY5NzVkZjMtNzEwNi00MDY0LWExODItYmQ0OTU3NWVlODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF2WfghaNJvlhuSm2F5/nGuovQrqMNGKwEmn UQ6mL36l+6O0JYkuc8QY6PmJQeK7QeLUm10JQWUDdau9wcP8/c80NYImRbVyB8PN vuq6EtsINvrsEe6VEfoO5ki1MFmadlVgf2GbVQKsfzqfrLdVqEMKVJ/vIA1N2rNb +4re5C2d1gZwBI4496JF39aW4OBBBJkZ6ioM+AQCmaUPpJvL9YiJNhNnxDAJ7RJP +JoXT6/0CdPLKiXRIBk/I60SroksMotV3ytjJZUMueQYUZCWK/jcGlebWC607W5F Oj9RmzlJpAo35r1ttZPcYrDJrORLpVrKjzfI3GtPoj4UTVR/0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOCA0HQoKBYOEBlDVf4E5nnF6H0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMjBi OTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5MzkzZDM1NDEvNjgwOTNiYjQtOGY2OC0z ZDVmLWJhMTItNjUwM2Y5YmQwODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTIwYjk1MWUtNzUzOC00MWZiLTk3 ZDItMmRkOTM5M2QzNTQxL2EyMGI5NTFlLTc1MzgtNDFmYi05N2QyLTJkZDkzOTNk MzU0MS5jcmwwHwYDVR0jBBgwFoAUlidlPsa9hFYOtlcmlFHIUQMD2IgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMjBiOTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5 MzkzZDM1NDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArsSVIU86c5kqyWhUBxZg8jiXiAzjF+uSDFdjd+0IuI/N3fV86AldWu Z6OmypjlxNVo/Bq7oDM3wqo3kqQTtJQXCtDgz3AE/OytaAJNxWg7z25hQlrafKjt HAawJalzv9zA3dx6WequrlyW1I26cae9AQBJrmu35VlFWvDAz0DotygpC3x7/bha 8a5A51gkAyQkPy7U9NAkcQ3CZV6NNQF5UruY7jPN5PJIKbmAUfRG3wjLdebHU0Yp R8TCN6pgUix5hiOnGTvCVrBsaDJMArnbgYe8nt7gt7HGWNAiVCe4E8ksVeS0DCxy dDdjFTH8TrhXm2LSzsPCr1pvibzGBpQ= -----END CERTIFICATE-----Generated at Sat Aug 22 18:07:52 2026 by rpki-client