$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa File: 0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa (raw, json) Hash identifier: mgFiSvP5pj4tr/d24yKaGM5py1e+8IM/nsUUEfEYzUw= Subject key identifier: C4:EE:76:CB:92:5D:B3:ED:F9:6D:94:11:73:95:5B:A2:18:C6:5D:20 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F093CF0D7E93E607E17580000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 20.137.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f0:d7:e9:3e:60:7e:17:58:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=27af1eb3-84fb-4e47-8003-925ee55408d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:15:4c:c6:31:92:ae:d6:5f:7e:d3:8e:9b:65: 34:d1:43:e4:20:5b:dc:fb:a5:10:1e:66:d5:69:62: 45:aa:8c:99:ae:c4:e8:42:91:e8:ba:e2:e8:bb:a3: 5d:1c:ba:9a:f4:ce:22:73:c7:d8:ab:bb:f0:db:ac: b3:c0:ea:46:0f:63:26:f6:42:09:93:65:0e:db:b7: 34:eb:be:d5:35:ec:67:95:cb:ff:fd:19:9a:ba:c9: 2d:94:a5:07:6b:aa:57:67:c8:21:65:d3:a3:4b:4d: 7b:00:00:48:dc:9a:b5:09:d3:3e:74:84:a8:6d:07: ab:14:62:3d:7c:bf:9a:62:ed:a6:2c:31:94:26:0c: ae:4a:95:2d:0a:1f:1e:2d:5d:d9:58:0f:21:c3:f3: 84:67:15:26:61:6c:32:a3:38:69:46:df:24:de:23: 40:5d:17:cb:9b:77:5d:9d:31:fc:7c:7a:ce:20:d8: f6:b2:f5:cd:15:30:8b:9e:86:83:da:a6:d9:43:f2: a3:2d:f4:80:88:50:c9:05:fb:ba:31:0e:54:1f:4d: 0f:24:a0:40:d6:37:22:91:7c:22:d1:f6:ca:a5:61: 24:42:85:74:0d:bc:ae:26:ae:77:16:2b:90:d5:ec: 6c:bc:de:90:c6:83:5d:db:83:83:c7:cc:fe:b5:c5: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EE:76:CB:92:5D:B3:ED:F9:6D:94:11:73:95:5B:A2:18:C6:5D:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:19:7d:2e:40:7f:65:33:10:18:c0:36:3c:0e:33:bd:07:00: bb:48:f4:72:a6:99:ff:b6:0b:be:3c:71:cf:b4:ca:e0:89:33: d8:0e:f8:6d:2d:e0:9a:d9:04:e4:ea:68:0b:6f:f6:65:38:9d: 58:07:69:72:8c:17:7b:48:16:ae:b3:b0:e2:8b:7a:9c:cd:c1: 4b:79:72:78:9a:2b:d3:9e:81:77:2c:63:84:15:03:da:d2:80: 29:bb:5b:7b:ff:70:de:a9:f9:7f:da:c9:1d:4f:0d:69:0b:8f: 20:6f:4b:d6:08:32:6f:da:e7:12:56:52:f4:61:94:dc:02:29: 83:26:65:9d:5a:ba:db:89:6e:f2:61:32:88:0c:68:20:d7:f1: c8:99:7e:59:5c:68:25:05:41:65:23:2c:c7:7a:73:73:27:14: ad:54:f2:17:af:4b:a0:0a:20:3d:63:08:06:8d:e1:e2:e8:c6: 17:d2:3b:a7:ac:da:87:f0:56:55:01:c8:8c:37:10:ce:59:81: 62:52:e7:ed:a4:4b:cb:23:65:e5:2e:e1:49:58:4f:04:a4:d1: 3a:8d:01:1c:1e:76:25:b7:86:b9:68:1f:80:d6:da:53:93:2c: 93:a6:b6:0b:bc:7e:b2:b7:0a:ba:c3:b4:7f:4e:d2:04:05:d6: 3d:1a:35:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPDX6T5gfhdYAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MjdhZjFlYjMtODRmYi00ZTQ3LTgwMDMtOTI1ZWU1NTQwOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRVMxjGSrtZfftOOm2U00UPkIFvc+6UQHmbV aWJFqoyZrsToQpHouuLou6NdHLqa9M4ic8fYq7vw26yzwOpGD2Mm9kIJk2UO27c0 677VNexnlcv//RmausktlKUHa6pXZ8ghZdOjS017AABI3Jq1CdM+dISobQerFGI9 fL+aYu2mLDGUJgyuSpUtCh8eLV3ZWA8hw/OEZxUmYWwyozhpRt8k3iNAXRfLm3dd nTH8fHrOINj2svXNFTCLnoaD2qbZQ/KjLfSAiFDJBfu6MQ5UH00PJKBA1jcikXwi 0fbKpWEkQoV0DbyuJq53FiuQ1exsvN6QxoNd24ODx8z+tcX+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTudsuSXbPt+W2UEXOVW6IYxl0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGRkMTFiZDEtMGRmZC0z NDViLTlkNjgtNGRkMDI2NjA1ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgZfS5Af2UzEBjANjwOM70HALtI9HKmmf+2C748cc+0yuCJM9gO+G0t 4JrZBOTqaAtv9mU4nVgHaXKMF3tIFq6zsOKLepzNwUt5cniaK9OegXcsY4QVA9rS gCm7W3v/cN6p+X/ayR1PDWkLjyBvS9YIMm/a5xJWUvRhlNwCKYMmZZ1autuJbvJh MogMaCDX8ciZfllcaCUFQWUjLMd6c3MnFK1U8hevS6AKID1jCAaN4eLoxhfSO6es 2ofwVlUByIw3EM5ZgWJS5+2kS8sjZeUu4UlYTwSk0TqNARwediW3hrloH4DW2lOT LJOmtgu8frK3CrrDtH9O0gQF1j0aNS4= -----END CERTIFICATE-----Generated at Wed Sep 9 03:42:54 2026 by rpki-client