$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/f568dce4-f4e0-3f5a-9def-90fb6b862932.roa File: f568dce4-f4e0-3f5a-9def-90fb6b862932.roa (raw, json) Hash identifier: Qm3eu9MgsVZ27b/ojPc57yC1m39g+sVSbyasnb9bbWM= Subject key identifier: 7E:05:49:6B:49:AA:2E:E4:81:46:41:5A:26:CA:61:38:EF:73:C1:D8 Certificate issuer: /CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d Certificate serial: 010D0C9F4328584F225CF8409DEBA427D0ECD340 Authority key identifier: 83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/f568dce4-f4e0-3f5a-9def-90fb6b862932.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 156.20.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:f8:40:9d:eb:a4:27:d0:ec:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=a3901ebe-e44c-4ee8-806a-b4b6e3f853cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:63:8c:78:93:3d:ca:d7:c0:31:08:4e:cc: 01:aa:39:a3:c0:67:76:4b:fc:20:b5:98:08:96:3e: 45:17:dc:3a:72:0a:7a:cc:c4:f1:13:b5:73:e6:de: d8:ec:a9:fd:c3:2c:11:5b:85:57:d8:7e:f7:d3:d2: cf:1d:79:8d:04:98:1b:40:83:82:6c:23:03:ff:e0: 98:3a:0b:c4:6e:b6:15:17:21:4e:be:10:2d:a8:38: 52:5e:68:a2:d8:b6:92:71:52:de:fe:b6:60:53:5a: ec:4e:2c:6a:bd:03:14:d9:62:f6:c4:55:b7:46:5e: 78:9e:20:8c:39:32:60:5f:ac:8e:97:cc:fb:45:79: e9:30:be:01:44:76:29:75:e1:4f:2a:a6:9b:48:72: b6:4a:89:a1:1f:f8:b9:88:85:3e:db:a0:bb:cf:0f: c0:37:bd:c7:d1:1b:ea:31:18:b1:d8:49:fb:ea:c8: db:50:cf:df:27:7e:d9:bc:af:e1:f7:65:8b:f3:16: 5f:a2:36:d5:b6:a3:7e:5f:a2:a2:64:8b:d5:52:d9: c5:bb:b9:bf:f9:2c:05:c6:40:7f:25:aa:08:fd:eb: 3a:ea:c8:ae:49:30:d4:63:ba:a0:66:01:88:9f:80: 89:ec:92:3d:61:7b:2c:9a:e7:99:a4:d0:55:9c:3a: 23:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:05:49:6B:49:AA:2E:E4:81:46:41:5A:26:CA:61:38:EF:73:C1:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/f568dce4-f4e0-3f5a-9def-90fb6b862932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl X509v3 Authority Key Identifier: keyid:83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer sbgp-ipAddrBlock: critical IPv4: 156.20.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a8:7d:68:6f:9c:d5:69:e6:ba:ba:7d:b2:fb:2c:c3:01:94: a3:98:35:7b:08:f2:43:d9:91:29:23:b3:30:24:1c:a5:30:13: 6c:e2:2e:d5:3b:14:b5:c1:eb:05:5e:02:db:4c:e6:25:58:5b: 89:d0:c5:3d:2f:5c:01:1a:65:e4:16:c8:e3:d9:6c:b5:b6:81: 3c:3b:d5:80:b5:ca:aa:e6:30:61:44:57:cc:c4:b9:9a:1d:d7: f1:dc:99:bf:76:28:95:3a:fa:0b:84:bd:1d:e9:b8:03:b2:3d: 06:f0:bf:39:eb:a8:8a:ee:9c:6b:2c:da:cf:4a:06:f3:0d:d0: 55:89:b1:d8:9b:e2:9c:15:bf:c0:2a:1c:23:df:e3:56:db:f2: 90:8d:6d:37:01:21:12:b9:f7:f9:b9:d2:f6:cb:dd:08:f8:5d: 35:f5:a6:05:37:01:cb:9a:60:25:2a:73:54:86:fd:c9:24:61: 40:32:66:3c:7c:d8:32:0e:0e:42:87:79:93:75:c6:f8:6b:80: f6:97:3c:e9:29:e8:ef:70:37:d2:d9:44:5d:d9:5c:07:ed:cb: 21:c6:7d:0d:7d:93:97:97:d8:d0:47:b7:71:48:05:20:6f:ec: 47:5e:12:2a:5f:52:af:7c:6c:47:98:55:b3:d7:92:14:4d:ea: 71:46:d0:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPhAneukJ9Ds00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M2YzRmZTQtNTY0Mi00YWQwLTgzMjUtNjk5NDBiMmVk MDRkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk YTM5MDFlYmUtZTQ0Yy00ZWU4LTgwNmEtYjRiNmUzZjg1M2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOljjHiTPcrXwDEITswBqjmjwGd2S/wgtZgI lj5FF9w6cgp6zMTxE7Vz5t7Y7Kn9wywRW4VX2H7309LPHXmNBJgbQIOCbCMD/+CY OgvEbrYVFyFOvhAtqDhSXmii2LaScVLe/rZgU1rsTixqvQMU2WL2xFW3Rl54niCM OTJgX6yOl8z7RXnpML4BRHYpdeFPKqabSHK2SomhH/i5iIU+26C7zw/AN73H0Rvq MRix2En76sjbUM/fJ37ZvK/h92WL8xZfojbVtqN+X6KiZIvVUtnFu7m/+SwFxkB/ JaoI/es66siuSTDUY7qgZgGIn4CJ7JI9YXssmueZpNBVnDojswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4FSWtJqi7kgUZBWibKYTjvc8HYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83YzZj NGZlNC01NjQyLTRhZDAtODMyNS02OTk0MGIyZWQwNGQvZjU2OGRjZTQtZjRlMC0z ZjVhLTlkZWYtOTBmYjZiODYyOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2M2YzRmZTQtNTY0Mi00YWQwLTgz MjUtNjk5NDBiMmVkMDRkLzdjNmM0ZmU0LTU2NDItNGFkMC04MzI1LTY5OTQwYjJl ZDA0ZC5jcmwwHwYDVR0jBBgwFoAUg+p7p+zvw3iKpenuLEuzG3NzvFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83YzZjNGZlNC01NjQyLTRhZDAtODMyNS02OTk0 MGIyZWQwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnBQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSofWhvnNVp5rq6fbL7LMMBlKOYNXsI8kPZkSkjszAkHKUwE2ziLtU7 FLXB6wVeAttM5iVYW4nQxT0vXAEaZeQWyOPZbLW2gTw71YC1yqrmMGFEV8zEuZod 1/Hcmb92KJU6+guEvR3puAOyPQbwvznrqIrunGss2s9KBvMN0FWJsdib4pwVv8Aq HCPf41bb8pCNbTcBIRK59/m50vbL3Qj4XTX1pgU3AcuaYCUqc1SG/ckkYUAyZjx8 2DIODkKHeZN1xvhrgPaXPOkp6O9wN9LZRF3ZXAftyyHGfQ19k5eX2NBHt3FIBSBv 7EdeEipfUq98bEeYVbPXkhRN6nFG0A8= -----END CERTIFICATE-----Generated at Tue Sep 22 16:40:08 2026 by rpki-client