$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b4810e65-775f-35f5-af61-c99976b9e521.roa File: b4810e65-775f-35f5-af61-c99976b9e521.roa (raw, json) Hash identifier: T0eftr82+8d3tpLQXlxOhgRhdlxhudEQn36Zg1ZuzP0= Subject key identifier: 37:E0:6F:8A:88:F5:23:01:92:ED:23:FB:B2:36:79:4D:1A:B5:C2:31 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F3CE2AFC9A28ED83B9DE4C380 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b4810e65-775f-35f5-af61-c99976b9e521.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 266044 IP address blocks: 200.15.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:af:c9:a2:8e:d8:3b:9d:e4:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=fde966ee-db3f-4a4d-b4fc-b1a1e1d28a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:86:dd:ef:75:bc:dd:d2:3a:6e:05:f5:03: 0f:41:04:a4:2a:46:82:5e:f4:d2:87:1d:d8:0a:c5: b7:d4:4f:55:45:9a:51:86:17:38:ad:cb:ea:a5:29: 30:5b:13:70:bf:46:33:7b:ca:ab:5b:87:bf:e4:6d: 14:dc:ff:89:fe:ec:f7:76:5a:f3:ca:e7:5c:aa:80: cb:0e:3d:5e:26:85:c0:35:4b:d3:3c:05:bb:6a:bf: e6:8f:39:8b:0d:65:d6:41:5d:01:19:24:2d:4d:d5: 18:a7:bd:93:6c:af:76:d4:2e:a9:8d:a5:35:5c:dd: c6:08:ad:af:dd:24:58:f8:7c:1e:16:6b:23:e5:1f: 50:9b:3a:3e:a9:6b:79:18:36:9a:7e:1e:db:03:5b: 7d:f2:41:4b:13:b0:cc:9e:1b:44:22:31:4e:53:73: 7c:4e:cf:39:32:43:48:a7:0f:77:54:1a:3b:4e:f1: 9d:fa:13:67:29:49:0d:eb:3a:f9:5f:41:02:c2:b2: 1d:7e:a3:67:9b:a4:2d:e0:23:b7:0b:03:be:2c:e1: 6f:ea:48:f0:e3:88:5b:e7:13:0c:68:37:77:37:35: ec:bc:95:96:16:ac:1a:42:00:e1:a2:37:b7:24:18: 91:58:07:95:ba:87:08:ad:02:2a:f6:fb:5d:75:75: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E0:6F:8A:88:F5:23:01:92:ED:23:FB:B2:36:79:4D:1A:B5:C2:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b4810e65-775f-35f5-af61-c99976b9e521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 200.15.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:8b:2c:1d:de:3f:f7:66:dd:87:2a:03:8f:dc:d8:c2:1b:1d: 30:6f:cf:54:0b:75:2b:1b:74:c9:fa:76:75:fa:bc:db:4c:0a: 97:82:a7:13:6d:e4:84:00:f6:cc:4e:86:54:10:f5:26:fc:e1: 46:12:80:da:d3:ed:08:dd:6f:80:aa:9a:31:1a:01:6e:aa:6d: f8:84:37:98:20:da:dd:09:be:5e:06:92:5a:cc:50:20:7d:1f: 48:02:8c:71:74:06:bb:99:32:9b:8b:5d:60:f5:69:ad:cd:72: 6c:c0:2d:e6:eb:b1:f8:f3:76:33:54:3b:db:78:b6:a7:23:11: 7d:ea:43:ac:e4:f1:90:ff:13:62:a5:bb:66:99:89:07:de:a2: 16:f3:29:4c:a0:2b:39:59:6d:41:89:92:22:f6:c3:8e:e2:d3: 43:20:33:d5:cf:ba:11:65:52:62:bf:50:ac:99:b4:78:dc:4f: 6e:0c:9e:18:66:5b:c1:8d:ba:f3:9f:f8:e0:28:a8:db:de:59: a3:12:93:93:8d:28:06:94:ff:51:76:26:80:c0:80:f5:dd:05: 42:cb:a1:da:d2:88:76:61:fd:1d:38:41:36:a9:b6:54:f7:37: 98:cb:3f:33:68:31:ec:db:11:d1:61:8b:8a:b3:b4:4e:d7:23: 4e:73:8e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884q/Joo7YO53kw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZmRlOTY2ZWUtZGIzZi00YTRkLWI0ZmMtYjFhMWUxZDI4YTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv2G3e91vN3SOm4F9QMPQQSkKkaCXvTShx3Y CsW31E9VRZpRhhc4rcvqpSkwWxNwv0Yze8qrW4e/5G0U3P+J/uz3dlrzyudcqoDL Dj1eJoXANUvTPAW7ar/mjzmLDWXWQV0BGSQtTdUYp72TbK921C6pjaU1XN3GCK2v 3SRY+HweFmsj5R9Qmzo+qWt5GDaafh7bA1t98kFLE7DMnhtEIjFOU3N8Ts85MkNI pw93VBo7TvGd+hNnKUkN6zr5X0ECwrIdfqNnm6Qt4CO3CwO+LOFv6kjw44hb5xMM aDd3NzXsvJWWFqwaQgDhoje3JBiRWAeVuocIrQIq9vtddXU6PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfgb4qI9SMBku0j+7I2eU0atcIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjQ4MTBlNjUtNzc1Zi0z NWY1LWFmNjEtYzk5OTc2YjllNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyA8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISLLB3eP/dm3YcqA4/c2MIbHTBvz1QLdSsbdMn6dnX6vNtMCpeCpxNt 5IQA9sxOhlQQ9Sb84UYSgNrT7Qjdb4CqmjEaAW6qbfiEN5gg2t0Jvl4GklrMUCB9 H0gCjHF0BruZMpuLXWD1aa3NcmzALebrsfjzdjNUO9t4tqcjEX3qQ6zk8ZD/E2Kl u2aZiQfeohbzKUygKzlZbUGJkiL2w47i00MgM9XPuhFlUmK/UKyZtHjcT24Mnhhm W8GNuvOf+OAoqNveWaMSk5ONKAaU/1F2JoDAgPXdBULLodrSiHZh/R04QTaptlT3 N5jLPzNoMezbEdFhi4qztE7XI05zjpE= -----END CERTIFICATE-----Generated at Tue Sep 22 11:39:21 2026 by rpki-client