$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/20fe7082-f25b-3512-9d95-8f82ca8290e4.roa File: 20fe7082-f25b-3512-9d95-8f82ca8290e4.roa (raw, json) Hash identifier: 0B5LWZbldfKDF+U55fAwRJ4wjKgBu3afrUMXXnMNPto= Subject key identifier: 54:20:8D:08:B5:D1:C1:6F:5E:B5:C9:E1:5A:46:DB:3D:BF:EA:83:B3 Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Certificate serial: 010D0C9F4328584F7BB2F65BBE9657455E930300 Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/20fe7082-f25b-3512-9d95-8f82ca8290e4.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 1299 IP address blocks: 199.119.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f6:5b:be:96:57:45:5e:93:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=66984bc0-55ff-41c8-8e5e-eca71d171123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:22:a1:b2:21:80:da:ff:e1:95:81:f8:12: 8a:db:33:e7:4e:3a:44:67:9e:40:ae:39:45:82:18: 16:d6:17:43:cc:5e:0d:6f:38:07:ec:4f:b9:4e:d7: 08:63:65:8b:b9:be:6e:6a:4e:f8:68:88:cb:74:b8: 30:06:cd:73:69:37:5a:e7:3f:81:c5:36:d7:a3:f8: 7f:d9:43:8b:21:92:0d:cc:6b:7f:b0:54:f9:3b:8d: 68:6f:7e:17:84:f2:f8:ce:2b:1a:0f:d4:f4:8a:06: ad:ad:f6:90:f9:fe:2d:3c:ff:c0:6c:0c:a4:ba:ee: c7:87:74:0d:0a:21:ee:cc:ea:11:0c:88:70:1f:bf: 91:f6:5f:db:75:25:bc:4b:f6:c2:35:db:67:d5:19: ad:71:ae:29:62:e0:00:1a:b9:fc:ed:8b:01:6e:29: 7c:45:2d:79:0e:89:d8:76:6a:e5:cd:bb:81:64:af: 66:ea:40:12:87:0a:bc:ce:35:f3:4d:7f:2e:1c:b9: c4:46:7b:85:a1:6b:f2:8e:f3:d4:df:1e:d2:86:4c: da:11:f9:e4:db:58:76:8d:9f:e3:c2:33:b1:69:1f: 4c:5d:70:e1:8d:c1:48:a7:a4:ac:39:73:43:48:e4: 68:be:7b:a5:eb:5e:b2:c7:90:f1:f5:c1:10:1e:88: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:20:8D:08:B5:D1:C1:6F:5E:B5:C9:E1:5A:46:DB:3D:BF:EA:83:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/20fe7082-f25b-3512-9d95-8f82ca8290e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl X509v3 Authority Key Identifier: keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer sbgp-ipAddrBlock: critical IPv4: 199.119.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d6:78:c9:64:c9:fc:b5:4c:47:9d:97:ab:5f:aa:9b:ae:49: 88:27:fb:2d:f3:cc:d7:33:9f:71:5b:09:dc:16:33:ef:3a:76: 44:9e:67:ed:8b:86:1f:ab:64:d0:8e:53:97:e7:00:0e:49:cd: 4e:45:f7:0d:61:07:18:bd:8a:9f:c6:e1:bb:84:92:21:df:01: ea:f2:40:79:fb:da:bf:b9:47:d8:b0:a3:55:d9:e1:4c:79:a2: 4b:d5:e6:12:4c:06:da:22:a1:45:3c:af:3f:4f:b4:2f:6d:17: e6:5a:50:05:da:e8:48:f2:c9:57:d7:f9:e3:60:da:1b:e2:71: e0:01:1a:8f:04:fe:ba:73:9f:ca:ae:b7:f5:44:ae:44:34:98: a4:e3:b3:44:b9:6b:65:48:77:cf:dd:a4:89:5d:57:b9:4c:3a: 74:1c:25:15:38:3d:70:a0:c3:b6:06:21:2e:b4:22:5f:d1:eb: 6b:53:5a:3d:59:06:9e:4d:b8:11:37:70:66:48:10:5f:b2:8b: 8c:2a:e9:d9:bc:f1:db:41:c4:03:2c:d9:ce:a8:8f:0e:fb:39: 53:b9:c1:9d:49:8f:e4:82:59:8d:49:f3:62:29:85:75:4a:be: 3e:f8:d4:58:80:2d:13:7d:b8:ae:8c:5b:1b:ea:ba:a0:f1:39: 78:e1:81:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97svZbvpZXRV6TAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm NTZmMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NjY5ODRiYzAtNTVmZi00MWM4LThlNWUtZWNhNzFkMTcxMTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/4iobIhgNr/4ZWB+BKK2zPnTjpEZ55ArjlF ghgW1hdDzF4NbzgH7E+5TtcIY2WLub5uak74aIjLdLgwBs1zaTda5z+BxTbXo/h/ 2UOLIZINzGt/sFT5O41ob34XhPL4zisaD9T0igatrfaQ+f4tPP/AbAykuu7Hh3QN CiHuzOoRDIhwH7+R9l/bdSW8S/bCNdtn1Rmtca4pYuAAGrn87YsBbil8RS15DonY dmrlzbuBZK9m6kAShwq8zjXzTX8uHLnERnuFoWvyjvPU3x7ShkzaEfnk21h2jZ/j wjOxaR9MXXDhjcFIp6SsOXNDSORovnul616yx5Dx9cEQHogapwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQgjQi10cFvXrXJ4VpG2z2/6oOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvMjBmZTcwODItZjI1Yi0z NTEyLTlkOTUtOGY4MmNhODI5MGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1 NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0 ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5 YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3dEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfWeMlkyfy1TEedl6tfqpuuSYgn+y3zzNczn3FbCdwWM+86dkSeZ+2L hh+rZNCOU5fnAA5JzU5F9w1hBxi9ip/G4buEkiHfAeryQHn72r+5R9iwo1XZ4Ux5 okvV5hJMBtoioUU8rz9PtC9tF+ZaUAXa6EjyyVfX+eNg2hviceABGo8E/rpzn8qu t/VErkQ0mKTjs0S5a2VId8/dpIldV7lMOnQcJRU4PXCgw7YGIS60Il/R62tTWj1Z Bp5NuBE3cGZIEF+yi4wq6dm88dtBxAMs2c6ojw77OVO5wZ1Jj+SCWY1J82IphXVK vj741FiALRN9uK6MWxvquqDxOXjhgQ8= -----END CERTIFICATE-----Generated at Thu Oct 22 08:11:49 2026 by rpki-client