$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b93e80b-e1f4-3ce4-916a-0a72949654b7.roa File: 0b93e80b-e1f4-3ce4-916a-0a72949654b7.roa (raw, json) Hash identifier: 2Fom6L6UFCs+fHg37P5wF424NGgNKDhDPWDXSmt+mDY= Subject key identifier: 1D:3B:B5:2E:21:31:6C:88:85:1E:8F:30:DA:F8:B6:F9:55:00:C9:A9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F119D0D7D1172D15DACFC3900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b93e80b-e1f4-3ce4-916a-0a72949654b7.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 20.148.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:0d:7d:11:72:d1:5d:ac:fc:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=526eef56-ee2a-4829-986e-3cceda88364d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a9:ae:f8:a9:19:8e:45:6c:de:f3:57:8a:29: 65:03:d0:4f:5e:e0:2b:d1:09:fe:68:b0:35:3f:a3: 9f:c8:7f:42:1e:e7:72:73:4f:38:3f:c6:cf:ed:25: 5b:17:14:d7:b3:f6:e2:42:54:ff:24:dc:ae:1f:88: 89:af:57:b2:01:35:0d:08:a7:f0:4d:ae:6e:42:64: a0:bc:cd:c8:66:3d:d8:83:8e:28:c4:b9:e8:ef:9b: 12:1e:8e:3c:3b:ad:37:98:2a:f8:44:50:bf:ae:bc: b7:49:bd:60:5a:fa:46:d6:08:ba:90:a6:f7:e1:ee: f9:bf:6f:52:93:d6:bc:25:b4:81:95:18:70:a7:fa: 26:16:f7:10:45:87:51:84:42:05:52:36:36:b2:19: dd:01:91:67:dd:85:a1:ed:a1:8a:54:81:0c:bd:25: 6d:53:e4:e2:3e:a1:31:71:15:54:8d:86:17:e5:ba: c3:48:59:5e:3d:d7:51:6b:90:da:10:42:19:c8:72: 14:7e:c4:9d:a9:d5:6b:b0:a9:7a:3c:6c:d7:fe:3a: 6d:cf:a7:03:f4:e4:c7:fd:07:d3:16:5b:af:f0:ca: 7b:9b:fb:2c:51:90:62:51:ec:29:1b:a7:05:de:0f: 4b:c6:64:6c:54:c0:59:68:f5:81:31:10:83:ec:70: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3B:B5:2E:21:31:6C:88:85:1E:8F:30:DA:F8:B6:F9:55:00:C9:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b93e80b-e1f4-3ce4-916a-0a72949654b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:56:fe:58:7b:40:78:f0:50:7e:f6:89:11:46:d6:3c:5e:1d: c3:ed:6f:c1:1a:53:73:ed:54:00:61:5b:68:63:0a:92:cb:1c: fa:90:f1:d5:46:66:11:d4:23:96:3f:ed:b5:48:e3:13:ce:41: 50:b7:14:37:14:6c:2f:c1:e1:95:6c:91:f8:3b:dc:db:1b:0c: d1:fa:7b:da:d4:78:fe:3b:03:34:95:2a:31:9a:16:b5:5d:c4: a0:6a:23:41:24:5f:ca:2e:95:91:ff:08:89:bb:a8:17:84:42: a9:85:e2:72:45:b8:a7:84:d6:eb:5c:3a:48:2e:08:6c:e0:43: aa:39:27:e0:56:8e:98:56:0d:f1:38:03:7a:58:6c:ff:67:dc: ea:de:79:54:99:90:e8:95:d7:9c:12:8d:44:b4:63:cc:64:8b: 12:03:0e:4e:4f:8c:49:56:07:38:e7:16:11:00:ea:e0:69:bd: 6b:9f:5f:d9:21:dc:24:ea:56:ae:d5:d3:f4:a6:9e:f5:2f:36: 0e:c5:a9:fe:ed:87:18:d3:b3:43:a0:2a:6f:28:5f:f5:ff:9f: 89:b7:12:48:68:51:49:25:d3:e2:38:c7:24:09:81:1e:fd:58: 32:2b:b4:78:49:df:94:62:1a:8a:0d:19:97:57:73:9d:44:f0: 58:31:d4:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQ19EXLRXaz8OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NTI2ZWVmNTYtZWUyYS00ODI5LTk4NmUtM2NjZWRhODgzNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqmu+KkZjkVs3vNXiillA9BPXuAr0Qn+aLA1 P6OfyH9CHudyc084P8bP7SVbFxTXs/biQlT/JNyuH4iJr1eyATUNCKfwTa5uQmSg vM3IZj3Yg44oxLno75sSHo48O603mCr4RFC/rry3Sb1gWvpG1gi6kKb34e75v29S k9a8JbSBlRhwp/omFvcQRYdRhEIFUjY2shndAZFn3YWh7aGKVIEMvSVtU+TiPqEx cRVUjYYX5brDSFlePddRa5DaEEIZyHIUfsSdqdVrsKl6PGzX/jptz6cD9OTH/QfT Fluv8Mp7m/ssUZBiUewpG6cF3g9LxmRsVMBZaPWBMRCD7HBH2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB07tS4hMWyIhR6PMNr4tvlVAMmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGI5M2U4MGItZTFmNC0z Y2U0LTkxNmEtMGE3Mjk0OTY1NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxW/lh7QHjwUH72iRFG1jxeHcPtb8EaU3PtVABhW2hjCpLLHPqQ8dVG ZhHUI5Y/7bVI4xPOQVC3FDcUbC/B4ZVskfg73NsbDNH6e9rUeP47AzSVKjGaFrVd xKBqI0EkX8oulZH/CIm7qBeEQqmF4nJFuKeE1utcOkguCGzgQ6o5J+BWjphWDfE4 A3pYbP9n3OreeVSZkOiV15wSjUS0Y8xkixIDDk5PjElWBzjnFhEA6uBpvWufX9kh 3CTqVq7V0/SmnvUvNg7Fqf7thxjTs0OgKm8oX/X/n4m3EkhoUUkl0+I4xyQJgR79 WDIrtHhJ35RiGooNGZdXc51E8Fgx1Ek= -----END CERTIFICATE-----Generated at Wed Sep 9 03:42:55 2026 by rpki-client