$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa3ed76f-7c47-3781-a678-b3d5b8ecdad4.roa File: aa3ed76f-7c47-3781-a678-b3d5b8ecdad4.roa (raw, json) Hash identifier: RmCxr15RdXBVP3AQUyaJEeW3TIHo6btaKw7YkBPnkPg= Subject key identifier: 40:7F:33:FC:32:D5:63:A6:AD:C3:E7:74:E6:BD:24:4B:3E:A5:BB:6E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F34CDD8E82C6BE245292031B0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa3ed76f-7c47-3781-a678-b3d5b8ecdad4.roa Signing time: Thu 17 Sep 2026 15:32:14 +0000 ROA not before: Thu 17 Sep 2026 15:32:14 +0000 ROA not after: Wed 16 Dec 2026 16:32:14 +0000 asID: 135391 IP address blocks: 206.52.20.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:cd:d8:e8:2c:6b:e2:45:29:20:31:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 17 15:32:14 2026 GMT Not After : Dec 16 16:32:14 2026 GMT Subject: CN=a7249b11-7f55-4115-9323-996efffaec7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:1d:ba:90:a8:aa:d9:b3:2d:21:fe:40:8e: 44:ff:34:ae:6a:cb:f1:f8:10:43:0a:c2:9e:a3:91: 97:7c:3c:86:0c:2d:65:68:19:74:cd:6f:94:b8:3e: f2:25:ef:ce:24:e2:34:0a:08:d0:27:ab:4b:04:a6: 4e:9e:1e:d5:1f:35:a9:5e:58:72:5f:04:05:c5:4b: a8:30:70:c4:cc:d9:5c:4e:af:d0:19:b9:fc:3d:a6: b2:8e:1d:97:49:bd:77:4d:5b:fc:33:01:9b:15:c7: b5:71:0c:39:34:fd:ae:64:75:f8:a3:82:20:2c:6a: 51:b5:e4:dc:9b:2f:73:1f:5c:51:28:4d:80:9a:c8: 7f:68:49:e8:70:c5:b1:aa:86:df:b5:be:cb:db:11: 49:de:ce:d5:0c:a2:ed:db:91:7d:97:d7:80:50:58: 0b:bf:a2:9d:3c:aa:6d:18:51:53:55:db:62:76:ec: 02:df:1e:ab:34:80:c8:c8:af:1f:38:df:4a:7b:19: 01:1e:1b:95:98:77:58:aa:ef:9d:de:72:b5:3d:d5: 11:af:d1:ba:01:7d:1d:6b:d0:3b:e2:9b:a1:6c:d2: d9:60:87:0e:85:52:62:47:ea:fc:cd:e0:83:86:ba: fe:51:d9:4b:00:37:92:28:90:36:e3:bc:16:a8:32: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7F:33:FC:32:D5:63:A6:AD:C3:E7:74:E6:BD:24:4B:3E:A5:BB:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa3ed76f-7c47-3781-a678-b3d5b8ecdad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.52.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:50:02:c8:61:25:c2:7f:41:d1:3f:a4:0b:d8:c8:46:55:0e: f2:1c:7d:00:04:31:91:c3:62:d0:53:e6:b4:dd:42:d2:35:8b: eb:4b:0b:4e:b6:73:1e:72:31:70:38:15:fe:99:aa:b7:46:d1: da:80:a6:0c:16:91:2d:cd:72:03:0f:df:68:94:61:87:2f:65: 96:3a:f4:44:7b:96:e5:05:3d:33:61:50:27:7c:b9:1e:70:80: 32:2a:ee:28:54:be:8b:3d:a0:7b:48:9b:0f:64:06:02:da:05: b6:57:e9:03:e0:17:07:7b:dd:44:43:6d:72:d5:6c:2f:d5:58: ea:9a:ec:e5:e3:c6:71:4e:38:a6:f5:41:69:d5:53:7f:d1:8f: 17:d3:68:6d:8e:de:47:9e:a2:9b:eb:83:72:3b:f9:15:32:31: 29:a5:fd:9f:68:83:d1:7f:f0:ff:61:ae:2b:cc:72:98:e8:20: 65:8b:78:e2:de:08:9e:05:cd:94:96:0d:70:7c:50:c9:03:22: 74:c8:9b:91:24:32:0f:c4:80:89:51:c2:a8:3a:49:d2:df:99: 74:4d:b9:89:de:21:90:aa:f4:6a:d5:da:07:2e:45:35:0f:29: 2c:21:48:60:5c:6c:f7:81:8c:46:17:4c:6c:53:e8:fe:28:76: 7b:e7:1f:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80zdjoLGviRSkgMbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkxNzE1MzIxNFoXDTI2MTIxNjE2MzIxNFowLzEtMCsGA1UEAxMk YTcyNDliMTEtN2Y1NS00MTE1LTkzMjMtOTk2ZWZmZmFlYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+sdupCoqtmzLSH+QI5E/zSuasvx+BBDCsKe o5GXfDyGDC1laBl0zW+UuD7yJe/OJOI0CgjQJ6tLBKZOnh7VHzWpXlhyXwQFxUuo MHDEzNlcTq/QGbn8Paayjh2XSb13TVv8MwGbFce1cQw5NP2uZHX4o4IgLGpRteTc my9zH1xRKE2Amsh/aEnocMWxqobftb7L2xFJ3s7VDKLt25F9l9eAUFgLv6KdPKpt GFFTVdtiduwC3x6rNIDIyK8fON9KexkBHhuVmHdYqu+d3nK1PdURr9G6AX0da9A7 4puhbNLZYIcOhVJiR+r8zeCDhrr+UdlLADeSKJA247wWqDLHSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB/M/wy1WOmrcPndOa9JEs+pbtuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWEzZWQ3NmYtN2M0Ny0z NzgxLWE2NzgtYjNkNWI4ZWNkYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABQAshhJcJ/QdE/pAvYyEZVDvIcfQAEMZHDYtBT5rTdQtI1i+tLC062 cx5yMXA4Ff6ZqrdG0dqApgwWkS3NcgMP32iUYYcvZZY69ER7luUFPTNhUCd8uR5w gDIq7ihUvos9oHtImw9kBgLaBbZX6QPgFwd73URDbXLVbC/VWOqa7OXjxnFOOKb1 QWnVU3/RjxfTaG2O3keeopvrg3I7+RUyMSml/Z9og9F/8P9hrivMcpjoIGWLeOLe CJ4FzZSWDXB8UMkDInTIm5EkMg/EgIlRwqg6SdLfmXRNuYneIZCq9GrV2gcuRTUP KSwhSGBcbPeBjEYXTGxT6P4odnvnH7Q= -----END CERTIFICATE-----Generated at Tue Sep 22 12:25:18 2026 by rpki-client