$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d29d087-5c19-3a94-a477-3a61141b6a05.roa File: 8d29d087-5c19-3a94-a477-3a61141b6a05.roa (raw, json) Hash identifier: Ohj2TcalkTWwI22FwNZPSYKSIy7Si4x0lvgY1iHmYFY= Subject key identifier: 49:40:74:60:AF:90:4F:8A:24:14:27:4E:D4:91:BB:5D:F9:9F:95:92 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584EFCACBFF6E14705D007492B20 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d29d087-5c19-3a94-a477-3a61141b6a05.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 1239 IP address blocks: 209.20.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:bf:f6:e1:47:05:d0:07:49:2b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=504e00b8-9e01-416f-b07a-b3b7830cc88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:a0:18:a3:b1:84:5f:68:87:5b:2f:60:c0: ef:d9:f2:37:b8:c9:31:76:ad:40:20:f6:66:29:12: 30:49:6d:72:62:43:98:b2:7c:50:3a:91:3c:6c:54: 38:71:b8:de:d2:24:5a:23:bf:21:79:4f:c8:07:0b: 6b:00:08:48:d5:d2:f7:e7:f6:c7:a5:7e:f2:b5:cf: 28:a3:b7:a9:94:30:83:2b:73:d9:39:6d:1d:95:8e: 8e:b6:11:79:ae:47:e7:c8:bc:6f:6f:74:cc:84:89: de:93:07:19:27:dd:cd:64:75:34:a5:35:c4:3b:22: 49:bf:b1:d0:3b:bf:83:67:cc:ae:aa:6c:9a:ad:18: 22:34:98:17:cf:98:e3:c3:1a:f2:ce:85:04:9a:a5: eb:72:6b:82:c6:76:ae:a8:e2:d3:68:ad:a3:8e:c0: 6e:61:55:8a:d8:63:36:d7:cf:f8:70:12:73:b6:33: 9e:93:83:64:3c:12:60:98:89:78:4c:53:10:42:89: c4:76:76:df:f1:22:93:b8:cd:6d:62:94:a3:1e:ac: 15:a5:8e:a5:cd:f3:53:c7:80:cd:3f:80:f9:28:fa: bc:89:67:f9:e7:57:14:05:7f:d6:b4:3b:2e:bb:55: 87:89:67:d5:b1:72:76:7b:f3:e0:46:d9:68:ac:2c: 4a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:40:74:60:AF:90:4F:8A:24:14:27:4E:D4:91:BB:5D:F9:9F:95:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d29d087-5c19-3a94-a477-3a61141b6a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5b:d1:8f:f5:cb:9a:7c:78:b2:44:e5:ce:c9:77:29:31:b1: c5:34:73:59:c5:60:2a:91:ec:69:e2:22:4b:55:e9:a7:9a:9b: ed:57:de:9f:22:03:44:ab:16:58:d4:c1:fe:80:49:5f:b4:7d: 21:db:ba:3b:22:0e:44:c6:20:31:5b:2d:bd:b0:d1:4a:b4:ca: cd:b8:62:74:22:2b:1e:a4:29:81:60:0c:4c:78:a0:94:66:71: de:43:ca:4b:45:5e:03:01:80:65:57:cb:66:dd:6e:de:84:1e: d2:7c:cc:5d:bc:53:00:83:5e:a1:02:4b:83:c9:f7:c5:25:f9: 48:a3:28:a1:51:5a:4e:69:23:4b:bc:2e:f9:6f:eb:e4:8a:7c: 0f:7b:45:f4:68:c0:10:fa:e5:27:44:dc:35:d3:7e:3b:1d:a3: 5c:3a:6d:02:1a:16:8a:33:3e:f7:70:48:4f:f6:8e:b3:f3:3b: b0:91:19:01:98:ea:0f:23:99:c5:0a:75:fc:c0:58:e7:e3:23: 0d:ce:9b:4d:21:8b:39:d9:b1:0e:5a:f1:b1:f1:de:47:ce:85: ed:d5:88:97:d8:a1:2c:d3:67:b3:ba:89:42:39:e3:32:f5:c4: 3e:e7:a4:01:47:aa:67:8a:d2:b3:53:be:54:9a:75:f4:bc:a6: ee:22:a8:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rL/24UcF0AdJKyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NTA0ZTAwYjgtOWUwMS00MTZmLWIwN2EtYjNiNzgzMGNjODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fegGKOxhF9oh1svYMDv2fI3uMkxdq1AIPZm KRIwSW1yYkOYsnxQOpE8bFQ4cbje0iRaI78heU/IBwtrAAhI1dL35/bHpX7ytc8o o7eplDCDK3PZOW0dlY6OthF5rkfnyLxvb3TMhInekwcZJ93NZHU0pTXEOyJJv7HQ O7+DZ8yuqmyarRgiNJgXz5jjwxryzoUEmqXrcmuCxnauqOLTaK2jjsBuYVWK2GM2 18/4cBJztjOek4NkPBJgmIl4TFMQQonEdnbf8SKTuM1tYpSjHqwVpY6lzfNTx4DN P4D5KPq8iWf551cUBX/WtDsuu1WHiWfVsXJ2e/PgRtlorCxKUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElAdGCvkE+KJBQnTtSRu135n5WSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvOGQyOWQwODctNWMxOS0z YTk0LWE0NzctM2E2MTE0MWI2YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0RTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlb0Y/1y5p8eLJE5c7JdykxscU0c1nFYCqR7GniIktV6aeam+1X3p8i A0SrFljUwf6ASV+0fSHbujsiDkTGIDFbLb2w0Uq0ys24YnQiKx6kKYFgDEx4oJRm cd5DyktFXgMBgGVXy2bdbt6EHtJ8zF28UwCDXqECS4PJ98Ul+UijKKFRWk5pI0u8 Lvlv6+SKfA97RfRowBD65SdE3DXTfjsdo1w6bQIaFoozPvdwSE/2jrPzO7CRGQGY 6g8jmcUKdfzAWOfjIw3Om00hiznZsQ5a8bHx3kfOhe3ViJfYoSzTZ7O6iUI54zL1 xD7npAFHqmeK0rNTvlSadfS8pu4iqDY= -----END CERTIFICATE-----Generated at Sun Sep 20 12:55:39 2026 by rpki-client