$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa File: fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa (raw, json) Hash identifier: 3oD2egzAS1HaT2NWp9cW7gisqys9jPoKfW1uTJRackQ= Subject key identifier: 6E:61:6D:D0:25:3F:07:38:11:26:A4:C1:8C:23:07:C0:48:1E:9F:B1 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584EAD1C509380BC2F968A808700 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 55293 IP address blocks: 200.69.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:50:93:80:bc:2f:96:8a:80:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=0a6a47df-7385-477f-a207-b4bd6b88bb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b2:1e:e0:47:2f:f7:fb:2a:6d:88:43:13:c8: e8:9d:cf:85:28:4b:49:e5:4b:2e:1d:67:a6:b5:ad: ba:a6:66:fb:d5:ae:91:02:7b:6c:65:2b:83:62:28: 84:27:34:31:9c:cf:9b:e4:1a:db:fb:f6:43:34:60: de:3a:e8:bf:0b:51:43:b7:63:c9:7d:f0:97:6d:d3: 5e:ee:a9:8c:86:13:3d:fc:7e:7e:e9:86:7c:00:1d: 09:ee:72:36:a3:04:c5:8c:1d:a3:97:54:8f:50:75: e5:c3:11:d2:97:c2:67:0e:20:a0:d3:a5:17:cf:1b: 91:62:49:1d:23:ae:af:93:8f:26:7c:a4:1d:f2:96: db:44:ec:68:bf:14:da:57:53:2b:4f:f6:88:40:17: 29:89:56:39:df:63:ee:8e:9e:c4:5c:26:15:2a:2f: 8c:a9:a5:c9:64:34:a9:f0:fe:d3:8e:da:3d:23:25: b7:6d:7c:59:10:f3:a0:bf:99:b0:3a:ca:cc:cc:ad: 7e:42:d2:08:59:55:61:a3:9c:41:62:5b:e8:9b:92: 23:a8:1a:97:f3:a8:e6:60:58:9b:48:de:07:11:26: 8b:63:db:31:37:7a:70:e6:0b:9a:9e:46:99:7c:0c: b2:eb:25:ca:21:98:75:b5:f6:3b:93:0c:1a:0d:ff: 19:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:61:6D:D0:25:3F:07:38:11:26:A4:C1:8C:23:07:C0:48:1E:9F:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 200.69.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:aa:99:31:dc:d1:22:fe:e8:0c:24:29:5b:5c:42:25:42:7e: 5b:b9:e9:b3:a7:a7:6e:86:f3:73:4e:52:0c:22:66:19:e4:68: 86:2a:4c:1f:77:31:be:33:ca:84:3f:f7:32:ec:8b:d5:a7:26: f0:b5:8f:93:f1:67:ad:eb:cd:3a:2f:5f:fd:e1:cb:75:e9:cb: b0:ca:1d:79:9a:6c:e2:fc:43:49:9f:a3:78:5a:32:42:54:94: dc:51:59:10:22:7b:b6:81:b0:06:ae:2e:f0:8a:98:33:30:9c: 77:9e:36:2c:54:3a:6d:cd:62:1a:46:f4:43:70:0a:b1:b8:b6: 29:b5:c9:fa:f6:4b:93:c5:9a:73:74:e1:6b:af:a8:2d:0a:ba: c9:4d:4d:4c:a1:39:36:ea:f0:52:bc:7f:84:0e:18:31:de:58: 4e:de:0b:ca:56:4f:28:a2:66:b3:18:3d:07:a2:32:b3:98:68: 3e:50:29:b3:69:51:04:25:2f:bc:61:18:0f:27:1e:2f:20:6d: 38:c8:72:81:73:7c:f1:95:d6:41:ca:7f:c9:b2:ea:31:61:cd: 07:91:4b:a0:be:a2:92:e7:af:76:6d:24:da:73:37:ff:68:d1: 37:bb:ed:71:34:d3:cb:3f:34:5d:7e:0a:f3:04:51:1c:b4:8b: bb:09:59:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFCTgLwvloqAhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk MGE2YTQ3ZGYtNzM4NS00NzdmLWEyMDctYjRiZDZiODhiYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7Ie4Ecv9/sqbYhDE8jonc+FKEtJ5UsuHWem ta26pmb71a6RAntsZSuDYiiEJzQxnM+b5Brb+/ZDNGDeOui/C1FDt2PJffCXbdNe 7qmMhhM9/H5+6YZ8AB0J7nI2owTFjB2jl1SPUHXlwxHSl8JnDiCg06UXzxuRYkkd I66vk48mfKQd8pbbROxovxTaV1MrT/aIQBcpiVY532Pujp7EXCYVKi+MqaXJZDSp 8P7Tjto9IyW3bXxZEPOgv5mwOsrMzK1+QtIIWVVho5xBYlvom5IjqBqX86jmYFib SN4HESaLY9sxN3pw5guankaZfAyy6yXKIZh1tfY7kwwaDf8ZawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5hbdAlPwc4ESakwYwjB8BIHp+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvZmM5YWE1YTYtMDJjZC0z NzUwLTg5OGUtZjIyMWFlODE4Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyEUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiqmTHc0SL+6AwkKVtcQiVCflu56bOnp26G83NOUgwiZhnkaIYqTB93 Mb4zyoQ/9zLsi9WnJvC1j5PxZ63rzTovX/3hy3Xpy7DKHXmabOL8Q0mfo3haMkJU lNxRWRAie7aBsAauLvCKmDMwnHeeNixUOm3NYhpG9ENwCrG4tim1yfr2S5PFmnN0 4WuvqC0KuslNTUyhOTbq8FK8f4QOGDHeWE7eC8pWTyiiZrMYPQeiMrOYaD5QKbNp UQQlL7xhGA8nHi8gbTjIcoFzfPGV1kHKf8my6jFhzQeRS6C+opLnr3ZtJNpzN/9o 0Te77XE008s/NF1+CvMEURy0i7sJWQk= -----END CERTIFICATE-----Generated at Sat Aug 22 18:48:52 2026 by rpki-client