$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/204e5921-c590-320c-bc34-108e188842dc.roa File: 204e5921-c590-320c-bc34-108e188842dc.roa (raw, json) Hash identifier: i/sFjGZ8MHPmxV3xMMpxrk7j0G6vyf6vtoIupU4s0iE= Subject key identifier: A4:4B:EB:B0:1B:83:CC:48:A6:BB:9C:73:5C:56:02:BF:20:CE:9C:2E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F17323554DFD22AB615D490A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/204e5921-c590-320c-bc34-108e188842dc.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 20115 IP address blocks: 64.93.36.0/22 maxlen: 24 64.205.216.0/22 maxlen: 24 65.86.80.0/22 maxlen: 24 72.244.232.0/22 maxlen: 24 74.0.20.0/22 maxlen: 24 74.1.8.0/22 maxlen: 24 216.46.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:35:54:df:d2:2a:b6:15:d4:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=7c1025c9-ca36-4836-87aa-7219be4fe834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:9a:de:0a:03:43:ef:52:15:9a:6f:2d:b0: c2:25:d1:f2:3f:e8:88:82:09:ff:d0:ed:6d:c1:12: 73:bb:9c:82:28:71:50:50:c9:e0:83:10:d9:ae:0e: 87:fe:fa:39:9a:92:97:9e:c6:20:a1:0f:d9:39:a6: 33:8e:09:73:0f:03:8d:b0:8c:cd:37:ad:e5:12:1f: a8:ea:24:e7:c3:06:c6:63:78:c0:28:73:40:f0:fe: 6d:30:00:2c:56:60:e3:70:51:e9:5a:96:1c:74:0d: 67:48:22:50:f9:61:de:d6:1e:d3:34:82:99:b8:8b: af:1e:ff:58:7a:73:ea:ab:0c:ca:b6:0e:e6:a9:94: 9b:4c:98:5b:e7:9c:5b:f8:c2:e0:77:d6:e3:f5:df: 8c:97:25:7c:35:50:ff:1d:fc:3a:a8:20:d9:88:b4: 71:d5:cc:ed:3f:dc:92:d6:cf:b2:7b:21:03:cd:82: 08:c6:fb:4b:ca:c5:81:a1:26:1c:8a:a0:2f:0b:cf: f9:12:39:05:cc:de:b8:3a:47:ec:e8:04:bd:36:06: bf:75:b8:1a:f9:1d:66:cb:5a:d8:b0:1b:3d:91:d4: 5d:53:35:37:fd:3c:ed:94:06:de:1c:5f:27:1b:ce: a9:87:4b:2a:6e:cd:98:29:94:a8:03:81:27:ee:14: 40:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4B:EB:B0:1B:83:CC:48:A6:BB:9C:73:5C:56:02:BF:20:CE:9C:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/204e5921-c590-320c-bc34-108e188842dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.93.36.0/22 64.205.216.0/22 65.86.80.0/22 72.244.232.0/22 74.0.20.0/22 74.1.8.0/22 216.46.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:1a:68:fd:28:c1:ee:a4:85:70:39:1a:f7:cb:63:18:00:9c: df:89:7a:be:c5:43:d3:9a:c9:ee:c1:ce:97:5c:7b:a6:9c:37: c7:8b:a2:e8:a4:a9:2c:ca:de:0e:a8:8e:ba:8f:74:a7:21:11: 47:21:e0:35:27:4d:c5:fb:ab:a4:b8:c8:8a:a2:10:a6:49:88: 53:2f:0d:36:48:4e:ed:59:70:22:a6:ce:e2:30:f0:5b:4e:d7: e7:57:2d:3d:be:c9:f7:97:a3:a7:68:b8:43:f4:f1:18:c9:7c: a8:e5:c7:30:7d:6c:65:4c:77:7d:d4:2b:63:13:f6:99:bd:29: c6:6d:c2:6a:f1:ca:4d:6f:19:01:21:bb:d7:9d:44:d8:a8:50: 0a:36:db:38:6f:b0:18:f4:08:3c:56:03:4d:75:3b:e1:11:0f: 19:e5:8f:27:19:fc:7d:87:b9:bd:a2:38:ac:61:ac:e0:30:b6: 94:81:45:c4:a2:a5:92:f3:86:13:5a:20:94:9a:de:f6:a9:af: 84:ef:11:a0:6e:62:3f:d4:ba:17:e2:c3:74:97:67:d0:46:e4: c4:6e:02:fc:75:23:ae:68:79:38:89:2f:3e:27:c4:81:ad:6b: 9f:4d:8d:6e:bb:5a:63:86:c1:a2:d1:99:88:de:2b:85:27:94: 79:4d:77:f4 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE8XMjVU39IqthXUkKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk N2MxMDI1YzktY2EzNi00ODM2LTg3YWEtNzIxOWJlNGZlODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndqa3goDQ+9SFZpvLbDCJdHyP+iIggn/0O1t wRJzu5yCKHFQUMnggxDZrg6H/vo5mpKXnsYgoQ/ZOaYzjglzDwONsIzNN63lEh+o 6iTnwwbGY3jAKHNA8P5tMAAsVmDjcFHpWpYcdA1nSCJQ+WHe1h7TNIKZuIuvHv9Y enPqqwzKtg7mqZSbTJhb55xb+MLgd9bj9d+MlyV8NVD/Hfw6qCDZiLRx1cztP9yS 1s+yeyEDzYIIxvtLysWBoSYciqAvC8/5EjkFzN64Okfs6AS9Nga/dbga+R1my1rY sBs9kdRdUzU3/TztlAbeHF8nG86ph0sqbs2YKZSoA4En7hRAuQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFKRL67Abg8xIprucc1xWAr8gzpwuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjA0ZTU5MjEtYzU5MC0z MjBjLWJjMzQtMTA4ZTE4ODg0MmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCQF0kAwQC QM3YAwQCQVZQAwQCSPToAwQCSgAUAwQCSgEIAwQC2C5UMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMcaaP0o we6khXA5GvfLYxgAnN+Jer7FQ9Oaye7Bzpdce6acN8eLouikqSzK3g6ojrqPdKch EUch4DUnTcX7q6S4yIqiEKZJiFMvDTZITu1ZcCKmzuIw8FtO1+dXLT2+yfeXo6do uEP08RjJfKjlxzB9bGVMd33UK2MT9pm9KcZtwmrxyk1vGQEhu9edRNioUAo22zhv sBj0CDxWA011O+ERDxnljycZ/H2Hub2iOKxhrOAwtpSBRcSipZLzhhNaIJSa3vap r4TvEaBuYj/Uuhfiw3SXZ9BG5MRuAvx1I65oeTiJLz4nxIGta59NjW67WmOGwaLR mYjeK4UnlHlNd/Q= -----END CERTIFICATE-----Generated at Sun Sep 20 18:01:17 2026 by rpki-client