$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa File: 67ef0949-c298-330b-aabd-6a4c950d7ad6.roa (raw, json) Hash identifier: Oz7Cok2dQKIseRwTG+PjV1espT7qeRJXM0p+3ENAMuQ= Subject key identifier: D3:E0:32:F4:ED:08:A5:BC:C6:E5:4E:81:41:95:7B:37:A5:DA:F1:90 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D67DFCED6222DA4CA12746700 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 16696 IP address blocks: 209.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ce:d6:22:2d:a4:ca:12:74:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=dad8c1b2-5b1a-4d2b-bbec-b1733effb99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a5:ac:60:42:b7:45:7b:e2:6f:d6:91:81:9a: 1a:8f:99:ed:df:e2:7a:49:97:b5:e9:95:cd:73:62: 33:90:f5:2c:33:46:fc:5a:45:c8:c7:a1:93:89:7b: 64:12:c1:38:87:6f:da:21:fe:e9:a2:a1:14:1b:90: 66:d2:9a:af:8c:58:d9:fd:ac:4b:e9:dd:6f:e1:a3: a5:32:37:fc:67:22:37:0d:79:49:09:f7:22:29:30: ba:f5:a7:93:38:06:8d:07:23:fd:46:e0:a0:4e:31: 1f:89:ec:26:22:7c:15:2f:5b:dd:72:96:98:26:93: fc:ae:81:84:2e:c1:da:e6:f8:0f:76:80:1e:cc:bc: fc:5d:43:36:c6:ba:f4:b9:2b:4f:28:bd:41:14:6a: 3c:0d:13:3a:1d:ee:49:e0:23:47:b7:2b:7d:4b:79: c4:63:ed:e5:5e:1a:10:05:de:9c:59:be:5f:57:e4: e1:ab:8d:dc:a4:6c:70:41:76:e1:3e:2f:44:ca:38: bc:2b:0d:f6:eb:e1:a9:cc:7e:5b:02:0b:a4:f2:c9: 43:b5:43:0c:33:b8:26:3e:98:5d:24:26:99:75:18: 0d:80:92:35:66:30:70:77:7c:51:84:2d:90:b1:3d: 7b:71:4f:ca:3f:3f:48:17:6b:72:09:85:48:c4:86: a0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E0:32:F4:ED:08:A5:BC:C6:E5:4E:81:41:95:7B:37:A5:DA:F1:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 209.20.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:1d:33:30:9d:b7:c9:1b:61:a8:1d:f0:01:28:b7:6a:ad:82: 8f:ab:55:95:7b:98:f5:86:06:2d:a8:b3:27:74:b4:26:68:12: 06:d9:d8:bb:a0:65:0c:1e:7c:43:f1:eb:9f:d6:a5:d4:0a:13: b4:49:08:a2:b5:f3:ce:31:c9:c8:a9:2f:33:27:39:e8:9b:61: 11:b0:dc:07:d0:50:58:a6:cd:69:18:69:43:99:03:c2:6b:5e: 66:16:f3:16:06:71:2a:7c:a0:f3:7d:67:fa:c4:13:4e:3e:c6: 7b:71:15:14:ba:f7:7f:9d:8f:54:a7:3e:6a:c1:c0:43:5b:de: 39:69:8f:45:2c:66:46:b6:f2:64:16:cf:48:76:60:15:e2:ba: a5:f1:94:8a:5e:49:37:df:ae:fd:d1:28:f2:4e:f1:6a:ce:d4: cd:16:7a:18:6e:ec:99:bd:aa:b2:9a:f2:e8:a1:b0:54:5d:35: 14:cc:db:24:bd:fe:60:bd:ff:12:d7:79:81:12:a0:38:a5:89: 86:70:42:e9:b4:4a:89:b5:59:de:49:4f:08:94:ba:8c:0b:35: 74:55:fc:82:f3:1e:f3:b0:3d:39:d2:5d:0d:b8:bd:23:ff:2c: 53:54:9b:c8:e2:d5:aa:b0:33:45:07:dc:14:1b:13:8c:40:6e: da:1d:de:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n387WIi2kyhJ0ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZGFkOGMxYjItNWIxYS00ZDJiLWJiZWMtYjE3MzNlZmZiOTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKWsYEK3RXvib9aRgZoaj5nt3+J6SZe16ZXN c2IzkPUsM0b8WkXIx6GTiXtkEsE4h2/aIf7poqEUG5Bm0pqvjFjZ/axL6d1v4aOl Mjf8ZyI3DXlJCfciKTC69aeTOAaNByP9RuCgTjEfiewmInwVL1vdcpaYJpP8roGE LsHa5vgPdoAezLz8XUM2xrr0uStPKL1BFGo8DRM6He5J4CNHtyt9S3nEY+3lXhoQ Bd6cWb5fV+Thq43cpGxwQXbhPi9Eyji8Kw326+GpzH5bAguk8slDtUMMM7gmPphd JCaZdRgNgJI1ZjBwd3xRhC2QsT17cU/KPz9IF2tyCYVIxIagzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPgMvTtCKW8xuVOgUGVezel2vGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjdlZjA5NDktYzI5OC0z MzBiLWFhYmQtNmE0Yzk1MGQ3YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgdMzCdt8kbYagd8AEot2qtgo+rVZV7mPWGBi2osyd0tCZoEgbZ2Lug ZQwefEPx65/WpdQKE7RJCKK1884xycipLzMnOeibYRGw3AfQUFimzWkYaUOZA8Jr XmYW8xYGcSp8oPN9Z/rEE04+xntxFRS693+dj1SnPmrBwENb3jlpj0UsZka28mQW z0h2YBXiuqXxlIpeSTffrv3RKPJO8WrO1M0Wehhu7Jm9qrKa8uihsFRdNRTM2yS9 /mC9/xLXeYESoDiliYZwQum0Som1Wd5JTwiUuowLNXRV/ILzHvOwPTnSXQ24vSP/ LFNUm8ji1aqwM0UH3BQbE4xAbtod3vs= -----END CERTIFICATE-----Generated at Fri Apr 17 11:07:16 2026 by rpki-client