$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa File: 67ef0949-c298-330b-aabd-6a4c950d7ad6.roa (raw, json) Hash identifier: ze2Kwf6+V3gg6TpXk2KTgyIVoMCxBBBbexRa5o2udnc= Subject key identifier: 45:79:48:C3:D1:03:37:4D:FC:CF:B5:B1:61:D9:DC:FD:B4:3C:24:0F Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584EEA8761DAFBA41E56368DA680 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 16696 IP address blocks: 209.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:61:da:fb:a4:1e:56:36:8d:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=e71a0bef-1bd3-4acf-b5e3-d112cb04a47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a9:d2:f2:fe:a7:14:0b:74:76:83:34:52:b2: 5e:ef:0d:1c:c2:0e:63:06:87:76:81:f9:26:b9:e5: 69:d7:d9:30:c7:7c:00:04:08:4d:1d:4a:95:de:25: bc:b1:25:02:5f:6d:99:67:6e:b4:a0:87:77:21:29: 14:ad:a4:0c:4a:bd:ba:8a:8d:4a:90:6d:e8:27:51: b9:0a:48:76:15:9e:0d:f8:60:59:54:b8:5b:1e:91: 3c:52:07:81:20:53:57:5f:1b:21:67:02:27:33:e8: 2c:88:e7:52:74:a2:20:f9:84:91:39:e4:52:d0:c9: af:54:12:03:5a:3b:28:92:4b:8d:59:2e:78:49:08: ea:88:bf:5d:3a:8e:a7:11:d7:21:ce:8e:e3:ec:d8: 85:63:e8:d5:4a:e8:ff:9c:88:15:91:31:a9:1d:d2: 72:a8:10:a1:53:0d:48:2c:ae:55:b1:95:1b:d4:1b: f3:39:e8:fe:5d:f3:3f:c8:91:ff:c0:0f:7a:00:e3: 92:e6:4a:53:82:52:35:8e:46:f0:3f:ef:f2:b0:c3: 11:c4:28:ba:0b:ed:9f:7f:f8:41:0d:ae:4f:b1:63: 84:13:07:0c:a2:62:69:6d:7a:f6:80:64:f1:09:59: 81:ee:1b:fa:28:05:89:97:30:9b:af:2f:6b:2e:30: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:79:48:C3:D1:03:37:4D:FC:CF:B5:B1:61:D9:DC:FD:B4:3C:24:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 209.20.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b6:34:53:03:87:98:45:5e:7c:ea:7c:d3:c8:25:6c:c0:86: f1:92:13:77:49:13:36:68:32:74:c3:0a:0e:ce:fa:97:98:42: fa:e3:60:b1:ac:f3:46:0e:23:58:76:0d:f9:00:95:c6:66:98: 5b:38:00:74:f2:8e:60:0c:fd:c9:71:a1:17:01:fd:f1:64:31: 2d:83:3c:4b:c0:7a:fe:fc:6f:39:ce:4d:55:87:2d:94:77:49: 1d:de:ad:75:48:f4:a4:12:28:9f:2f:de:ef:82:9c:8b:f9:97: 4b:18:99:80:6f:41:48:73:fa:da:be:cd:11:4a:04:e7:16:2c: da:78:76:47:42:c4:8e:ec:83:78:84:0b:f6:80:36:b1:e9:5b: 97:ad:cc:69:42:00:0f:73:09:b1:f9:80:bf:af:a8:1a:fa:60: 15:19:17:25:04:8b:7d:e2:f3:81:ac:e9:57:76:3d:55:be:2c: 1d:61:80:e4:51:30:87:1c:47:d3:11:52:64:f3:e4:4f:4e:36: cf:b2:e4:6a:a1:b2:25:08:7c:7d:e1:f0:d5:8e:4b:6d:0c:68: a9:1c:0a:c3:a1:c0:6c:bd:40:1b:aa:29:97:e9:93:cb:14:f8: 65:ed:c6:7b:64:e4:c5:94:a9:b8:0b:9d:b9:50:10:d0:be:a5: 19:f1:c5:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2Ha+6QeVjaNpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTcxYTBiZWYtMWJkMy00YWNmLWI1ZTMtZDExMmNiMDRhNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6nS8v6nFAt0doM0UrJe7w0cwg5jBod2gfkm ueVp19kwx3wABAhNHUqV3iW8sSUCX22ZZ260oId3ISkUraQMSr26io1KkG3oJ1G5 Ckh2FZ4N+GBZVLhbHpE8UgeBIFNXXxshZwInM+gsiOdSdKIg+YSROeRS0MmvVBID WjsokkuNWS54SQjqiL9dOo6nEdchzo7j7NiFY+jVSuj/nIgVkTGpHdJyqBChUw1I LK5VsZUb1BvzOej+XfM/yJH/wA96AOOS5kpTglI1jkbwP+/ysMMRxCi6C+2ff/hB Da5PsWOEEwcMomJpbXr2gGTxCVmB7hv6KAWJlzCbry9rLjBVKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV5SMPRAzdN/M+1sWHZ3P20PCQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjdlZjA5NDktYzI5OC0z MzBiLWFhYmQtNmE0Yzk1MGQ3YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm2NFMDh5hFXnzqfNPIJWzAhvGSE3dJEzZoMnTDCg7O+peYQvrjYLGs 80YOI1h2DfkAlcZmmFs4AHTyjmAM/clxoRcB/fFkMS2DPEvAev78bznOTVWHLZR3 SR3erXVI9KQSKJ8v3u+CnIv5l0sYmYBvQUhz+tq+zRFKBOcWLNp4dkdCxI7sg3iE C/aANrHpW5etzGlCAA9zCbH5gL+vqBr6YBUZFyUEi33i84Gs6Vd2PVW+LB1hgORR MIccR9MRUmTz5E9ONs+y5GqhsiUIfH3h8NWOS20MaKkcCsOhwGy9QBuqKZfpk8sU +GXtxntk5MWUqbgLnblQENC+pRnxxX4= -----END CERTIFICATE-----Generated at Fri Sep 25 09:58:08 2026 by rpki-client