$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/20f89f58-a102-31bc-85a6-30601b05ef8d.roa File: 20f89f58-a102-31bc-85a6-30601b05ef8d.roa (raw, json) Hash identifier: aMOuBIlH5Ualt8MMN/lHQQzBxf3ff1JKrdYJtbueTyE= Subject key identifier: B0:24:39:37:A5:82:55:DA:CB:72:CA:F5:1D:0C:B4:B0:95:47:19:AB Certificate issuer: /CN=b7b20b1a-439d-42a4-9436-b3efc58ba63b Certificate serial: 010D0C9F4328584EA7913E0608E04072FF45AC60 Authority key identifier: 0E:3E:F1:10:E9:A0:B9:EA:BC:3B:67:1B:CA:52:3D:2B:D2:0B:CB:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/20f89f58-a102-31bc-85a6-30601b05ef8d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 53760 IP address blocks: 208.93.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:3e:06:08:e0:40:72:ff:45:ac:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b20b1a-439d-42a4-9436-b3efc58ba63b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=513842a8-727b-439a-9707-fcafbf0444cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:05:32:bc:b1:7b:26:a8:4b:33:9e:18:46:b6: 92:f4:fd:e1:41:3a:0c:91:6e:6e:e2:e0:05:62:09: 1d:da:21:f6:7a:a7:45:d2:6f:4e:62:cb:ff:1f:2e: 28:16:cc:ff:0b:66:69:1e:27:28:e6:dd:5b:ad:d4: 50:5a:ef:eb:75:1a:3c:a0:84:07:63:9a:dc:e8:f1: dd:9f:69:f3:8b:89:90:b9:c5:47:8b:09:07:fa:78: 47:5c:64:ac:3d:6d:dc:f2:a5:69:6b:25:7a:52:27: 5f:5c:fb:17:c1:dd:dc:65:2e:20:22:9f:20:8f:16: db:e2:1d:1f:b0:90:b5:c7:61:ee:ec:35:fb:c1:f5: e6:6c:fc:c1:ef:14:59:72:06:21:ac:f3:c7:74:49: 17:1d:b2:a3:07:30:d2:7f:ba:02:26:d4:ef:29:8d: d6:7e:d3:1e:0e:ba:d7:f0:41:78:c1:9a:f2:95:90: da:f1:f4:d3:06:40:bb:f0:61:ef:23:b0:dc:94:d0: 1e:1a:2e:da:67:f7:9f:07:7c:4d:3b:d9:2e:6c:e5: c9:41:ad:18:17:b2:0b:9e:f3:9e:fa:a1:6b:ef:31: b8:21:ac:3d:77:92:2d:66:17:95:bf:c6:8e:17:75: 65:d1:16:b8:cf:c0:d6:50:d0:a1:56:d0:1b:45:15: 46:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:24:39:37:A5:82:55:DA:CB:72:CA:F5:1D:0C:B4:B0:95:47:19:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/20f89f58-a102-31bc-85a6-30601b05ef8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b/b7b20b1a-439d-42a4-9436-b3efc58ba63b.crl X509v3 Authority Key Identifier: keyid:0E:3E:F1:10:E9:A0:B9:EA:BC:3B:67:1B:CA:52:3D:2B:D2:0B:CB:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7b20b1a-439d-42a4-9436-b3efc58ba63b.cer sbgp-ipAddrBlock: critical IPv4: 208.93.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c4:48:ed:2a:06:bd:dc:4d:b9:6b:49:24:9d:f9:e1:83:91: c0:43:45:dc:20:d7:e0:e7:8c:ae:fe:a4:bc:0f:ea:fe:6f:87: c1:84:99:a7:51:e6:23:fa:2c:d9:48:1e:23:ed:90:57:4e:81: 64:94:5b:42:d0:09:b8:5c:5e:48:f9:38:23:cd:ad:df:39:44: ba:81:e5:fb:6a:4f:80:03:5f:87:01:84:21:fd:5f:2d:a2:91: c2:b2:ba:ea:fc:8c:f8:67:52:9c:4f:32:4e:ca:0f:14:82:4e: 5a:65:e0:25:f9:fc:a4:94:d8:51:1c:11:8f:80:c1:ff:07:95: 60:f5:c4:2b:c8:b0:06:4e:30:2f:eb:a9:11:ec:6f:97:2b:d6: bc:21:12:c7:e8:65:f9:a5:84:b7:6e:17:92:08:49:47:e7:1b: 35:b2:73:5d:e6:70:c3:38:76:46:e1:dc:41:aa:f7:77:18:ca: 26:93:c3:1c:0d:cd:ff:9d:4a:dc:e3:6b:e2:b3:7e:6c:e4:69: 8c:8d:33:f7:a2:4f:e6:07:11:45:e9:65:9b:80:00:d8:77:95: 57:7f:49:40:8f:dc:d0:fd:88:a7:5c:f5:38:6d:d4:3a:4d:8e: 8d:50:fa:38:26:c3:10:69:70:db:2c:13:c0:ab:95:fd:a2:1f: de:f2:f2:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkT4GCOBAcv9FrGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdiMjBiMWEtNDM5ZC00MmE0LTk0MzYtYjNlZmM1OGJh NjNiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTEzODQyYTgtNzI3Yi00MzlhLTk3MDctZmNhZmJmMDQ0NGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwUyvLF7JqhLM54YRraS9P3hQToMkW5u4uAF Ygkd2iH2eqdF0m9OYsv/Hy4oFsz/C2ZpHico5t1brdRQWu/rdRo8oIQHY5rc6PHd n2nzi4mQucVHiwkH+nhHXGSsPW3c8qVpayV6UidfXPsXwd3cZS4gIp8gjxbb4h0f sJC1x2Hu7DX7wfXmbPzB7xRZcgYhrPPHdEkXHbKjBzDSf7oCJtTvKY3WftMeDrrX 8EF4wZrylZDa8fTTBkC78GHvI7DclNAeGi7aZ/efB3xNO9kubOXJQa0YF7ILnvOe +qFr7zG4Iaw9d5ItZheVv8aOF3Vl0Ra4z8DWUNChVtAbRRVGQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAkOTelglXay3LK9R0MtLCVRxmrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iN2Iy MGIxYS00MzlkLTQyYTQtOTQzNi1iM2VmYzU4YmE2M2IvMjBmODlmNTgtYTEwMi0z MWJjLTg1YTYtMzA2MDFiMDVlZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjdiMjBiMWEtNDM5ZC00MmE0LTk0 MzYtYjNlZmM1OGJhNjNiL2I3YjIwYjFhLTQzOWQtNDJhNC05NDM2LWIzZWZjNThi YTYzYi5jcmwwHwYDVR0jBBgwFoAUDj7xEOmgueq8O2cbylI9K9ILyygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iN2IyMGIxYS00MzlkLTQyYTQtOTQzNi1iM2Vm YzU4YmE2M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0F1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrESO0qBr3cTblrSSSd+eGDkcBDRdwg1+DnjK7+pLwP6v5vh8GEmadR 5iP6LNlIHiPtkFdOgWSUW0LQCbhcXkj5OCPNrd85RLqB5ftqT4ADX4cBhCH9Xy2i kcKyuur8jPhnUpxPMk7KDxSCTlpl4CX5/KSU2FEcEY+Awf8HlWD1xCvIsAZOMC/r qRHsb5cr1rwhEsfoZfmlhLduF5IISUfnGzWyc13mcMM4dkbh3EGq93cYyiaTwxwN zf+dStzja+KzfmzkaYyNM/eiT+YHEUXpZZuAANh3lVd/SUCP3ND9iKdc9Tht1DpN jo1Q+jgmwxBpcNssE8Crlf2iH97y8ns= -----END CERTIFICATE-----Generated at Wed Jul 29 08:19:32 2026 by rpki-client