$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa File: 0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa (raw, json) Hash identifier: w5ozVxSaYRC6jkAj74D7MWaLc5DR2KvzQ4EDhQ/Lo74= Subject key identifier: E2:E2:8E:20:83:23:68:55:7D:70:2E:37:0C:BF:4C:14:AB:19:C1:FD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E6F3A3EB1AE12BEBF044EFB80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 203 IP address blocks: 20.148.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:3e:b1:ae:12:be:bf:04:4e:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=006e3861-06f6-4c5b-b4f3-bf46af01e136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:d9:c8:bc:1f:57:a6:54:d1:52:59:01:cb: b4:4c:21:b2:9f:72:6b:d5:67:2c:a6:34:0a:9c:6b: e8:56:2d:20:4c:e4:ec:c1:49:aa:5b:2a:d5:fc:c9: b7:f0:7b:5e:5c:42:fe:29:dc:0e:4e:3f:59:b6:c7: 1f:4d:05:b3:71:26:a0:c1:c9:1e:a1:77:23:de:92: 55:ef:43:27:ee:ee:56:03:8f:f6:db:bf:20:48:f7: 48:33:01:75:47:d4:36:20:26:fd:7d:37:be:14:ad: 72:9c:12:98:51:27:77:ec:fa:55:6d:12:a6:13:27: f4:ba:98:cd:f8:44:3b:a7:8c:cc:21:20:14:8e:e9: 68:a6:75:14:94:a9:d0:32:22:b1:50:51:b4:0c:db: ab:a9:45:0e:dc:38:32:96:d3:46:74:2e:97:e6:24: 14:89:13:ff:9d:c3:55:e9:ee:2f:a1:be:18:2f:ff: b0:c3:5e:0e:ab:6f:93:be:79:4a:5b:d9:c9:c8:a1: e2:b1:f4:77:27:89:97:22:55:1b:7c:cb:e7:fe:33: 85:91:83:c3:ff:5f:1f:29:7e:9b:c4:79:fd:52:2d: 4f:de:7e:a8:08:99:3e:97:ff:65:d8:fe:fc:1c:59: 73:7b:b3:96:30:ba:3f:23:28:a6:ee:43:4e:10:78: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E2:8E:20:83:23:68:55:7D:70:2E:37:0C:BF:4C:14:AB:19:C1:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a4:5d:8b:cd:3b:06:68:87:a7:5e:c9:08:66:c5:5f:5c:08: 37:96:47:d6:8f:89:23:11:22:b7:0c:61:dd:ac:62:7f:76:f5: 57:2e:47:30:fa:92:d2:45:37:5e:c1:52:32:14:71:7c:6e:f2: b5:98:02:b0:44:23:27:1a:d8:b0:08:7a:bc:fc:f0:a6:48:00: 44:4d:8e:82:c4:b2:7b:98:f4:5d:68:1d:4e:68:92:9c:86:8b: 1a:fe:3c:c1:a4:f2:f1:0f:0b:0a:5c:76:d7:5a:11:40:8b:fc: 6b:ef:95:4a:bc:de:f6:0c:d9:a6:15:b9:f1:8d:16:a9:7a:69: 64:4d:51:b5:98:6e:9e:dc:4a:ea:0f:5c:25:55:7c:e2:f5:ce: 7e:b5:13:0a:f2:e4:30:f3:00:3e:05:0a:1e:cd:8d:c9:45:1a: 37:98:23:d2:b4:b8:c3:09:75:8b:38:26:b7:c8:72:0a:22:7f: 11:c0:06:34:15:9e:ea:43:a9:ff:04:33:9d:79:35:ba:3a:e5: d2:1a:d9:05:ec:78:39:3d:f6:66:d3:f1:25:ce:5c:6a:73:bf: 70:12:d4:6c:81:66:98:c0:64:48:8a:73:91:cf:7b:f4:c5:e8: 43:6b:8e:b7:3a:89:31:ea:0b:89:b9:2a:0c:b3:b2:09:e0:b1: 86:a0:92:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOj6xrhK+vwRO+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MDA2ZTM4NjEtMDZmNi00YzViLWI0ZjMtYmY0NmFmMDFlMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9bZyLwfV6ZU0VJZAcu0TCGyn3Jr1WcspjQK nGvoVi0gTOTswUmqWyrV/Mm38HteXEL+KdwOTj9ZtscfTQWzcSagwckeoXcj3pJV 70Mn7u5WA4/2278gSPdIMwF1R9Q2ICb9fTe+FK1ynBKYUSd37PpVbRKmEyf0upjN +EQ7p4zMISAUjulopnUUlKnQMiKxUFG0DNurqUUO3DgyltNGdC6X5iQUiRP/ncNV 6e4vob4YL/+ww14Oq2+TvnlKW9nJyKHisfR3J4mXIlUbfMvn/jOFkYPD/18fKX6b xHn9Ui1P3n6oCJk+l/9l2P78HFlze7OWMLo/Iyim7kNOEHjs6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLijiCDI2hVfXAuNwy/TBSrGcH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGZhMWFmNTMtY2U5Yi0z Y2I3LWFkNmEtNzZkNDlhZGQ3ZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCkXYvNOwZoh6deyQhmxV9cCDeWR9aPiSMRIrcMYd2sYn929VcuRzD6 ktJFN17BUjIUcXxu8rWYArBEIyca2LAIerz88KZIAERNjoLEsnuY9F1oHU5okpyG ixr+PMGk8vEPCwpcdtdaEUCL/GvvlUq83vYM2aYVufGNFql6aWRNUbWYbp7cSuoP XCVVfOL1zn61Ewry5DDzAD4FCh7NjclFGjeYI9K0uMMJdYs4JrfIcgoifxHABjQV nupDqf8EM515Nbo65dIa2QXseDk99mbT8SXOXGpzv3AS1GyBZpjAZEiKc5HPe/TF 6ENrjrc6iTHqC4m5KgyzsgngsYagkno= -----END CERTIFICATE-----Generated at Fri Jul 24 22:16:50 2026 by rpki-client