$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa File: 69d00425-cf12-3785-aecf-3a474d2c9aaf.roa (raw, json) Hash identifier: Q+qN0hDLt3HD0xst/apxSqOL95/X3pdEbjmgn3wmTGE= Subject key identifier: 63:2A:C6:F1:77:4D:01:46:5C:96:3C:82:23:55:70:26:D0:35:92:5F Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584EF7175C40C32C35D963523950 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 9009 IP address blocks: 204.11.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:5c:40:c3:2c:35:d9:63:52:39:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=dbb53751-88e9-4c48-84a3-6a97f614efd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:76:7f:f4:1b:7b:3c:d4:63:b8:86:f2:f1:24: 4a:21:2a:8f:e6:98:38:71:e9:79:bd:ec:4e:a2:21: ea:51:e9:32:d5:49:f0:79:61:99:01:76:34:85:a3: 1f:bd:e9:b8:46:63:74:96:6d:25:58:50:3f:85:a2: f2:a0:b9:5d:db:1b:a2:a3:03:0a:ec:73:b6:ac:0e: 90:78:49:27:20:50:22:49:7b:06:2e:1f:35:72:ab: 55:6d:d6:27:3b:57:ca:a2:f5:ce:29:25:5b:2f:55: d8:7f:fd:bb:46:b7:77:be:62:39:69:39:49:0c:d6: a6:e9:53:4a:e3:ae:a9:f1:e3:fc:2a:3c:39:61:74: 29:47:f1:2c:1d:64:72:ba:45:1d:0b:7b:31:91:d1: c9:9c:18:12:1e:40:9b:eb:58:f9:b7:eb:a9:1a:44: c1:38:37:8f:d2:30:ed:af:53:d5:6a:31:35:11:71: bc:3e:40:09:24:78:de:7f:63:06:90:e1:15:d2:25: c4:f7:11:07:5d:65:bd:c5:f7:1c:fb:4a:d5:bd:f9: ec:fa:b5:8c:0a:ee:68:dd:0d:58:25:be:ae:86:41: 2f:7f:ee:66:59:93:d0:1e:63:f5:76:02:30:29:4a: 74:4c:5e:b4:ef:a5:5e:d3:b3:f8:62:b6:35:70:70: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2A:C6:F1:77:4D:01:46:5C:96:3C:82:23:55:70:26:D0:35:92:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 204.11.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b5:30:49:80:36:38:7a:17:5d:10:c7:b5:4b:ca:4b:b7:84: f2:58:96:e7:0c:8f:f0:d0:9a:b4:6b:a3:d3:49:26:9b:fa:dd: 71:27:f5:04:26:53:00:3d:fb:e6:89:e6:ae:59:eb:f1:7a:9d: e3:da:e1:c9:1b:47:62:04:26:bf:6e:39:53:c0:b9:c5:cf:fb: ff:dc:c0:21:fd:6f:22:32:4c:bf:1c:59:97:28:e3:01:90:3b: 67:d5:76:80:e1:cf:3a:ea:0b:20:2a:bd:98:35:67:b2:af:e8: f9:1b:9e:a8:66:ba:96:3c:7c:f1:0d:96:0b:8e:c3:1f:5e:5a: 75:ee:a2:e6:e6:fa:24:1d:c5:cf:32:ff:98:ff:78:17:09:82: e4:83:f6:32:36:08:66:0d:1a:d1:e0:bd:4f:06:86:0b:a3:eb: 04:79:77:66:d7:6a:d4:99:3e:3f:a3:3d:1f:fe:0e:a7:cc:c7: 85:37:47:35:60:37:12:45:1f:21:bc:26:d5:ea:ed:a8:80:2d: fa:f9:c0:61:b3:3f:40:cd:4a:0a:09:92:5d:df:7e:a2:99:a8: 34:bf:02:f2:dc:c0:04:e8:31:80:7b:96:c6:c6:74:f6:5d:7e: 1c:af:3a:2b:b3:0c:04:d5:02:54:60:0d:34:de:e0:f0:cf:c2: 43:d0:56:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F1xAwyw12WNSOVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZGJiNTM3NTEtODhlOS00YzQ4LTg0YTMtNmE5N2Y2MTRlZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XZ/9Bt7PNRjuIby8SRKISqP5pg4cel5vexO oiHqUeky1UnweWGZAXY0haMfvem4RmN0lm0lWFA/haLyoLld2xuiowMK7HO2rA6Q eEknIFAiSXsGLh81cqtVbdYnO1fKovXOKSVbL1XYf/27Rrd3vmI5aTlJDNam6VNK 466p8eP8Kjw5YXQpR/EsHWRyukUdC3sxkdHJnBgSHkCb61j5t+upGkTBODeP0jDt r1PVajE1EXG8PkAJJHjef2MGkOEV0iXE9xEHXWW9xfcc+0rVvfns+rWMCu5o3Q1Y Jb6uhkEvf+5mWZPQHmP1dgIwKUp0TF6076Ve07P4YrY1cHB7eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMqxvF3TQFGXJY8giNVcCbQNZJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNjlkMDA0MjUtY2YxMi0z Nzg1LWFlY2YtM2E0NzRkMmM5YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu1MEmANjh6F10Qx7VLyku3hPJYlucMj/DQmrRro9NJJpv63XEn9QQm UwA9++aJ5q5Z6/F6nePa4ckbR2IEJr9uOVPAucXP+//cwCH9byIyTL8cWZco4wGQ O2fVdoDhzzrqCyAqvZg1Z7Kv6PkbnqhmupY8fPENlguOwx9eWnXuoubm+iQdxc8y /5j/eBcJguSD9jI2CGYNGtHgvU8Ghguj6wR5d2bXatSZPj+jPR/+DqfMx4U3RzVg NxJFHyG8JtXq7aiALfr5wGGzP0DNSgoJkl3ffqKZqDS/AvLcwAToMYB7lsbGdPZd fhyvOiuzDATVAlRgDTTe4PDPwkPQVuI= -----END CERTIFICATE-----Generated at Mon Aug 31 21:06:17 2026 by rpki-client