$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/d5fae884-f4ba-3846-8486-fb44003d60c7.roa File: d5fae884-f4ba-3846-8486-fb44003d60c7.roa (raw, json) Hash identifier: KxZPnhv8bwhQAtyWfh3mYJOpn/IWAGGqHcmwmdH7Fqo= Subject key identifier: 76:B7:C6:31:27:6A:D1:D5:BA:56:4E:19:7F:4B:A9:7A:87:89:C5:D6 Certificate issuer: /CN=92db335e-640b-4ae2-9650-c420af83089d Certificate serial: 010D0C9F4328584F201F78FEC5E9C5DCE57F0E80 Authority key identifier: 9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/d5fae884-f4ba-3846-8486-fb44003d60c7.roa Signing time: Thu 10 Sep 2026 05:44:44 +0000 ROA not before: Thu 10 Sep 2026 05:44:44 +0000 ROA not after: Wed 09 Dec 2026 06:44:44 +0000 asID: 40702 IP address blocks: 67.20.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:1f:78:fe:c5:e9:c5:dc:e5:7f:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92db335e-640b-4ae2-9650-c420af83089d Validity Not Before: Sep 10 05:44:44 2026 GMT Not After : Dec 9 06:44:44 2026 GMT Subject: CN=c295200e-df0d-44b1-881f-bacde6134f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:21:36:02:3a:b3:7a:b7:57:64:70:a8:91: ce:3a:dc:e6:e4:fe:a4:df:08:7c:65:4e:00:44:f3: 06:6f:94:15:10:72:8a:29:13:2f:ce:f7:f3:6b:96: 08:38:d4:a1:aa:bd:46:ec:ea:68:88:4e:42:1a:f3: 23:19:9d:fe:17:6b:5a:b9:8d:33:27:ac:3d:bf:10: 2a:ef:77:d0:90:38:e1:a7:71:45:c6:f4:b2:6e:e9: e7:83:c3:05:d5:0e:27:9f:90:ea:67:37:57:88:a2: 31:7f:d4:54:99:ed:ed:8b:19:5b:35:a6:41:db:2d: 7b:5a:32:b4:98:c8:aa:2c:61:d0:5d:c6:52:dd:b4: 15:9f:74:36:c7:8e:0b:a5:1d:5a:54:6f:c5:f6:d3: 07:68:a0:14:9d:53:97:43:db:d1:3f:bf:dc:39:12: a6:72:af:b8:1a:ec:b7:e2:71:b4:14:c3:1c:9b:14: 5d:da:67:c5:9f:7a:bc:8d:00:8c:04:f3:0f:b5:78: 4e:25:97:e3:43:a4:2f:d4:ec:20:bb:09:ce:14:99: 2d:37:dc:f7:6d:6a:76:1a:4b:18:6c:0a:04:de:42: 3a:32:e5:9f:f6:29:e0:72:fe:f3:c2:c4:27:a6:84: 3d:67:ed:51:ba:42:2a:2b:c6:8d:ae:fa:b9:09:1a: 08:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B7:C6:31:27:6A:D1:D5:BA:56:4E:19:7F:4B:A9:7A:87:89:C5:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/d5fae884-f4ba-3846-8486-fb44003d60c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl X509v3 Authority Key Identifier: keyid:9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer sbgp-ipAddrBlock: critical IPv4: 67.20.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:bb:59:02:75:0a:3d:d0:bd:25:99:fe:48:c8:bd:17:d5:4c: 5f:3f:7e:34:36:99:b3:84:ae:0d:b8:c2:32:e1:4a:04:1c:e2: 97:d7:1c:fa:c0:ca:7b:bb:2b:e4:83:e0:98:42:ff:44:6f:c5: 7a:7c:09:ce:a3:13:94:83:ba:ce:3d:c6:ba:56:2d:2d:54:00: 00:0a:c7:f2:9c:0e:7f:09:ce:81:42:5c:38:68:79:87:9d:5a: b5:df:d4:44:be:97:43:40:c0:63:66:72:76:ce:b9:ba:43:95: 14:69:d6:13:58:f3:00:0a:04:14:8b:11:8e:68:29:95:f9:31: 1a:84:2e:1d:2f:3d:af:0d:05:fd:94:62:df:ba:c7:08:ec:20: 84:5c:f3:34:30:ea:ba:c0:9e:ec:66:cf:16:66:a9:0d:f4:35: 28:27:d1:dd:f1:08:61:85:40:02:0b:fc:f0:47:2a:c0:e3:09: 21:c6:86:3a:77:61:75:65:e8:4d:99:de:fb:c8:0f:ba:8b:e0: d2:ae:39:27:d5:4f:39:d7:16:c5:5e:6c:c4:55:04:bc:6a:87: 73:1c:73:5a:2e:dd:3d:e6:df:e9:bd:d1:09:fa:aa:40:ec:75: 2a:a4:29:ce:38:3a:65:1e:8c:33:ed:23:89:27:58:23:ed:46: fe:2e:ed:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8gH3j+xenF3OV/DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTJkYjMzNWUtNjQwYi00YWUyLTk2NTAtYzQyMGFmODMw ODlkMB4XDTI2MDkxMDA1NDQ0NFoXDTI2MTIwOTA2NDQ0NFowLzEtMCsGA1UEAxMk YzI5NTIwMGUtZGYwZC00NGIxLTg4MWYtYmFjZGU2MTM0ZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbUhNgI6s3q3V2RwqJHOOtzm5P6k3wh8ZU4A RPMGb5QVEHKKKRMvzvfza5YIONShqr1G7OpoiE5CGvMjGZ3+F2tauY0zJ6w9vxAq 73fQkDjhp3FFxvSybunng8MF1Q4nn5DqZzdXiKIxf9RUme3tixlbNaZB2y17WjK0 mMiqLGHQXcZS3bQVn3Q2x44LpR1aVG/F9tMHaKAUnVOXQ9vRP7/cORKmcq+4Guy3 4nG0FMMcmxRd2mfFn3q8jQCMBPMPtXhOJZfjQ6Qv1OwguwnOFJktN9z3bWp2GksY bAoE3kI6MuWf9ingcv7zwsQnpoQ9Z+1RukIqK8aNrvq5CRoI1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa3xjEnatHVulZOGX9LqXqHicXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MmRi MzM1ZS02NDBiLTRhZTItOTY1MC1jNDIwYWY4MzA4OWQvZDVmYWU4ODQtZjRiYS0z ODQ2LTg0ODYtZmI0NDAwM2Q2MGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTJkYjMzNWUtNjQwYi00YWUyLTk2 NTAtYzQyMGFmODMwODlkLzkyZGIzMzVlLTY0MGItNGFlMi05NjUwLWM0MjBhZjgz MDg5ZC5jcmwwHwYDVR0jBBgwFoAUm0A0HyUJJrq2GdITYmbOqRWqKfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85MmRiMzM1ZS02NDBiLTRhZTItOTY1MC1jNDIw YWY4MzA4OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQxSJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq7WQJ1Cj3QvSWZ/kjIvRfVTF8/fjQ2mbOErg24wjLhSgQc4pfXHPrA ynu7K+SD4JhC/0RvxXp8Cc6jE5SDus49xrpWLS1UAAAKx/KcDn8JzoFCXDhoeYed WrXf1ES+l0NAwGNmcnbOubpDlRRp1hNY8wAKBBSLEY5oKZX5MRqELh0vPa8NBf2U Yt+6xwjsIIRc8zQw6rrAnuxmzxZmqQ30NSgn0d3xCGGFQAIL/PBHKsDjCSHGhjp3 YXVl6E2Z3vvID7qL4NKuOSfVTznXFsVebMRVBLxqh3Mcc1ou3T3m3+m90Qn6qkDs dSqkKc44OmUejDPtI4knWCPtRv4u7VM= -----END CERTIFICATE-----Generated at Sat Oct 10 10:43:41 2026 by rpki-client