$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa File: 3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa (raw, json) Hash identifier: uNdxN6EVzDvcMkdw4VsNWXO4t5GD1nJrXQqt4ELIsMU= Subject key identifier: 0F:3B:D9:AA:74:D3:27:A8:9D:03:6A:20:9D:C2:BE:CA:83:A4:77:D7 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584EEEB7543D4DEB0658B91AA340 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 40562 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:54:3d:4d:eb:06:58:b9:1a:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=0e11cf3d-5454-4015-81da-4d73dfa1900d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:96:85:b2:ae:5b:73:c6:5d:99:11:c7:b3: fb:1c:ce:38:5f:ae:d1:3e:f6:85:fa:43:ac:91:ed: 38:ac:d9:d5:4e:66:f3:c9:59:c3:2b:29:cf:0e:fd: 04:29:c4:ec:b3:72:6b:5e:77:aa:d0:e8:3d:4a:40: f1:60:5e:90:ca:ee:7b:01:0f:62:c7:02:3c:be:e7: 5a:0b:70:92:18:e9:5d:b9:78:1f:0c:29:c9:2a:82: 61:a3:7b:94:f6:e6:31:84:de:a9:8e:e7:57:ef:da: e1:f5:54:0a:42:ce:de:64:25:73:fd:0d:1c:a2:a2: 5d:6c:9b:92:ad:47:2b:84:d3:42:85:e6:35:fa:2d: 62:59:ae:4c:f0:29:b6:ac:fd:25:b6:cd:cb:83:27: 15:03:81:0f:f4:7c:8e:45:15:7f:7a:28:54:5a:29: f2:e6:4a:bd:3b:46:8b:e1:57:46:e6:cd:b9:ba:6e: e1:76:c4:7d:42:5c:3a:2a:0d:14:4f:e7:88:bf:de: f0:c9:24:70:92:1d:13:7d:95:48:23:e3:5d:e0:2a: 8a:0e:88:1b:66:97:9b:44:bd:7c:e3:f9:8a:50:4a: b6:b7:2a:f6:c5:d5:e9:af:5a:cd:72:08:2c:cd:f6: 8a:a0:28:ac:2e:43:7b:88:7d:a7:f3:37:c7:df:97: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3B:D9:AA:74:D3:27:A8:9D:03:6A:20:9D:C2:BE:CA:83:A4:77:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:cf:79:f5:94:9f:20:94:0c:0c:17:89:e9:d3:35:49:45:e6: 3f:8a:36:91:85:72:9d:e7:a1:f6:6f:0a:88:40:a9:a1:20:f2: 85:d5:8b:c4:77:eb:15:45:78:46:f3:d4:a5:0e:90:fc:13:2a: 31:21:5e:16:5f:b7:ed:f0:b3:83:ec:8a:8b:bf:8a:be:07:62: c7:55:46:3f:34:e6:82:ee:18:1f:44:a4:b3:e2:98:3b:ec:ac: 1a:b3:2a:1f:f2:e9:01:9e:08:1d:02:d3:7f:a1:86:9d:88:7e: 8e:89:39:c9:8f:38:cd:32:10:a4:20:54:d0:63:70:3d:5e:7d: 70:07:2a:7d:d3:c7:24:48:1a:28:3f:b8:64:ef:cb:67:10:76: b4:49:cb:d0:d6:93:71:e4:70:40:05:54:0b:94:e0:c4:7e:af: 85:0b:96:d9:c5:38:28:98:f2:78:9d:9d:bf:a6:a5:87:96:1a: 21:56:b3:a5:7e:ea:5a:cf:cc:af:d8:cb:35:bf:d6:40:0d:59: 58:9f:38:47:37:33:09:85:02:d7:64:c9:5b:05:41:40:7a:89: 16:9e:35:4f:6b:80:87:7a:87:9b:1b:27:73:7a:51:26:ba:69: 67:53:f1:61:8c:9f:4f:34:75:f7:c3:d0:b5:ca:12:08:b6:b1: 05:58:bc:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1Q9TesGWLkao0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MGUxMWNmM2QtNTQ1NC00MDE1LTgxZGEtNGQ3M2RmYTE5MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4yWhbKuW3PGXZkRx7P7HM44X67RPvaF+kOs ke04rNnVTmbzyVnDKynPDv0EKcTss3JrXneq0Og9SkDxYF6Qyu57AQ9ixwI8vuda C3CSGOlduXgfDCnJKoJho3uU9uYxhN6pjudX79rh9VQKQs7eZCVz/Q0coqJdbJuS rUcrhNNCheY1+i1iWa5M8Cm2rP0lts3LgycVA4EP9HyORRV/eihUWiny5kq9O0aL 4VdG5s25um7hdsR9Qlw6Kg0UT+eIv97wySRwkh0TfZVII+Nd4CqKDogbZpebRL18 4/mKUEq2tyr2xdXpr1rNcggszfaKoCisLkN7iH2n8zfH35d2QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA872ap00yeonQNqIJ3CvsqDpHfXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvMzAwNmI3Y2YtZWM3OC0z ZmU2LTkyZTEtMDRiMDg0M2Y1OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPPefWUnyCUDAwXienTNUlF5j+KNpGFcp3nofZvCohAqaEg8oXVi8R3 6xVFeEbz1KUOkPwTKjEhXhZft+3ws4Psiou/ir4HYsdVRj805oLuGB9EpLPimDvs rBqzKh/y6QGeCB0C03+hhp2Ifo6JOcmPOM0yEKQgVNBjcD1efXAHKn3TxyRIGig/ uGTvy2cQdrRJy9DWk3HkcEAFVAuU4MR+r4ULltnFOCiY8nidnb+mpYeWGiFWs6V+ 6lrPzK/YyzW/1kANWVifOEc3MwmFAtdkyVsFQUB6iRaeNU9rgId6h5sbJ3N6USa6 aWdT8WGMn080dffD0LXKEgi2sQVYvE4= -----END CERTIFICATE-----Generated at Mon Aug 31 11:51:02 2026 by rpki-client