$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa File: f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa (raw, json) Hash identifier: Jf31sr4obBHPMo28X5rsX6rMr0Kd9WdgWCl4N4Zxdno= Subject key identifier: E6:C7:21:D0:39:D8:9C:9A:A3:C7:5D:FB:8B:CB:D0:59:17:72:82:05 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584ED001DDE788F1EFDAF3D7AD80 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 7782 IP address blocks: 107.152.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:dd:e7:88:f1:ef:da:f3:d7:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=814fb280-10d5-4731-a57b-c4cbebee904a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:aa:94:e5:a2:8a:da:81:c4:b7:81:85:46: f1:48:18:fd:d1:f4:56:80:37:08:4c:30:79:a4:e0: c0:5c:84:26:c0:15:25:c6:b3:66:d4:f0:74:2d:f8: 58:d4:75:0f:12:c2:fc:53:7f:8d:0c:02:cd:81:87: 84:66:be:fd:ed:76:58:9b:2e:a0:f5:15:8a:8f:a7: fc:0d:63:49:26:22:c3:5a:5f:69:df:53:c5:94:60: 5c:13:d5:4a:e7:d5:a7:0a:e1:eb:1f:0a:3b:3f:a2: 20:4e:3f:fb:2c:33:30:9f:3f:da:a8:6d:d9:63:3d: b6:0b:d0:32:d0:19:b0:71:97:9e:3e:2c:00:12:5b: 02:4d:9b:64:1f:11:f0:3e:da:36:f2:07:b2:cd:c6: e1:5a:7f:23:f3:91:0d:9e:00:08:34:ae:7f:2c:e8: 4e:c5:24:6f:27:06:03:e6:67:c5:53:a5:ee:ac:af: 4a:8c:e9:05:3c:97:44:9d:2a:a5:0b:47:ef:5f:51: d8:da:ea:86:c7:81:e5:ca:3b:34:92:1a:6f:30:26: 57:0c:bb:31:51:ad:4e:d4:e6:65:7c:2f:99:6b:3a: de:e1:38:a1:09:c7:4f:8b:44:a9:69:e9:9b:76:03: 4a:1f:65:35:a1:c3:b6:6d:2a:f2:81:c6:bc:3a:b4: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C7:21:D0:39:D8:9C:9A:A3:C7:5D:FB:8B:CB:D0:59:17:72:82:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 107.152.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:24:a2:ff:ba:53:97:5c:23:57:fc:17:6b:7d:18:cc:d7:d3: ee:ed:19:fc:ad:62:17:e2:b2:03:0b:fe:84:60:c9:63:90:0f: f5:f6:b1:d3:9b:b1:7d:ac:fe:8b:ed:a4:dc:a1:e3:47:8d:90: bc:28:35:80:d2:9a:48:33:ed:56:2f:47:79:e4:32:78:0e:39: c7:b1:21:5f:e3:a0:9c:83:05:9a:ea:6e:75:1c:77:6f:ef:27: e1:19:d9:a7:7d:f8:0d:a6:42:c5:4e:ef:04:94:b2:bb:77:d5: f4:2c:d6:a6:b9:d0:98:66:84:80:39:a0:34:88:45:fc:c5:09: 0f:63:77:ef:b0:6d:0b:59:33:b6:ce:73:62:3b:28:26:38:5d: 5a:06:3b:88:97:45:86:8e:13:81:50:45:72:db:2c:26:5e:29: 2a:1b:1c:75:d8:a7:be:be:1f:e2:0e:8e:15:e7:56:a9:01:cd: 22:64:0b:60:7b:da:0f:95:44:86:25:f0:1d:e5:64:0d:7b:a4: 78:71:6d:82:13:09:26:e8:49:8a:33:dd:dc:6b:6a:34:22:73: 1a:aa:44:5f:43:1d:6c:82:67:9c:1e:82:20:2b:b7:dc:56:aa: c2:50:59:97:72:6f:74:68:68:dc:93:eb:01:2e:61:2f:ed:f7: e8:3a:e3:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAd3niPHv2vPXrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ODE0ZmIyODAtMTBkNS00NzMxLWE1N2ItYzRjYmViZWU5MDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7uqlOWiitqBxLeBhUbxSBj90fRWgDcITDB5 pODAXIQmwBUlxrNm1PB0LfhY1HUPEsL8U3+NDALNgYeEZr797XZYmy6g9RWKj6f8 DWNJJiLDWl9p31PFlGBcE9VK59WnCuHrHwo7P6IgTj/7LDMwnz/aqG3ZYz22C9Ay 0BmwcZeePiwAElsCTZtkHxHwPto28geyzcbhWn8j85ENngAINK5/LOhOxSRvJwYD 5mfFU6XurK9KjOkFPJdEnSqlC0fvX1HY2uqGx4Hlyjs0khpvMCZXDLsxUa1O1OZl fC+Zazre4TihCcdPi0SpaembdgNKH2U1ocO2bSrygca8OrQOfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObHIdA52Jyao8dd+4vL0FkXcoIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvZjgyMGU3NWYtNGU3Zi0z NTJhLWE2N2EtYTcxZmY4YmE1NTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa5hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYkov+6U5dcI1f8F2t9GMzX0+7tGfytYhfisgML/oRgyWOQD/X2sdOb sX2s/ovtpNyh40eNkLwoNYDSmkgz7VYvR3nkMngOOcexIV/joJyDBZrqbnUcd2/v J+EZ2ad9+A2mQsVO7wSUsrt31fQs1qa50JhmhIA5oDSIRfzFCQ9jd++wbQtZM7bO c2I7KCY4XVoGO4iXRYaOE4FQRXLbLCZeKSobHHXYp76+H+IOjhXnVqkBzSJkC2B7 2g+VRIYl8B3lZA17pHhxbYITCSboSYoz3dxrajQicxqqRF9DHWyCZ5wegiArt9xW qsJQWZdyb3RoaNyT6wEuYS/t9+g64yo= -----END CERTIFICATE-----Generated at Sat Sep 19 11:48:05 2026 by rpki-client