$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa File: 20b86aff-f738-359b-bf7f-a923168ca468.roa (raw, json) Hash identifier: XDby2wdj/wK/5eOqW8jvdZa1pzLIidd/j3fl7Y7Yg3A= Subject key identifier: 1D:39:1B:61:5E:B5:65:D6:06:1B:5F:68:D9:CC:C2:4C:A2:78:10:2D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F4975E75CE0AE44549A013700 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e7:5c:e0:ae:44:54:9a:01:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8fe18d6f-3fd4-4047-8f84-a1e1e85e8483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:34:05:e6:51:25:bb:9b:39:70:04:36:a6: 12:0c:a8:0e:11:98:4d:7d:1b:fe:7e:41:d0:46:a9: 51:20:82:ed:4e:69:15:10:8e:bc:6e:eb:d8:bf:89: 40:df:84:61:04:ac:2b:18:6b:e6:87:5b:3a:2d:b5: a1:8b:b1:68:49:13:f4:85:61:8a:84:5c:d5:84:a6: b9:17:59:0b:43:78:46:7d:5b:d9:a0:f8:6e:c8:5e: b1:60:1d:ef:46:77:8e:c0:a7:9e:6c:af:d9:3c:f1: d2:a2:ee:b9:5d:b6:45:17:88:4e:a0:9a:26:98:80: a3:1b:4f:ac:9f:ce:b1:c3:89:1b:ba:55:2f:3e:b9: dd:d9:81:5f:76:c2:a2:a3:d3:19:de:dc:d1:bb:a0: ae:b5:91:90:41:9a:8a:ca:fe:33:da:83:23:da:17: e2:74:c9:fb:6d:31:1d:0b:74:57:dc:5e:91:98:ee: 4d:5c:20:ac:c0:68:b3:d7:29:8d:53:20:ce:e6:c4: f0:3f:4c:b7:b8:3f:05:6b:9c:20:bc:5c:51:a0:d5: dc:a5:57:c7:6d:70:c6:be:71:22:d8:68:fa:21:c1: 4e:6c:da:ca:4f:9a:ec:8a:55:d3:ed:07:5d:c3:2d: 1f:bd:7d:18:22:9a:04:dd:8d:36:e9:3d:fc:d2:64: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:39:1B:61:5E:B5:65:D6:06:1B:5F:68:D9:CC:C2:4C:A2:78:10:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:54:6a:21:91:4e:d7:86:d0:b6:95:2d:a6:74:bd:78:ae:3d: a8:6f:5e:25:34:0f:03:0b:fa:87:f4:75:ac:c0:94:c5:10:64: 4f:29:a3:b8:5a:b3:b2:c4:0d:06:79:b6:e5:c9:ff:6c:a3:77: a5:4f:09:b7:fb:b6:c5:4f:8f:7b:23:f7:f6:f0:d1:27:a3:f0: bb:46:66:ab:59:9c:e9:7a:8e:5e:3e:66:71:9b:a4:2d:e5:bf: dd:2c:b5:30:dc:90:63:1f:0b:b3:1e:12:8a:14:d5:5d:b6:8f: cf:6f:9c:24:e1:0a:36:8e:4a:05:9f:ed:9f:c4:55:8f:6d:7c: cf:b5:7b:25:86:4c:e1:0a:da:a5:ef:20:40:87:43:6c:34:0a: f9:c8:fe:66:89:e4:f7:83:5f:2b:d7:7f:32:6d:9c:92:9d:b4: 0c:cd:56:79:05:de:42:6a:28:ba:a9:f9:89:34:a1:7c:89:ee: a0:80:99:2b:c9:09:17:67:da:de:df:1e:d9:db:70:18:c7:c7: 0f:45:65:df:9b:47:0d:66:6b:28:ed:a2:91:61:6d:ba:91:c8: 10:8b:7f:9b:0b:2a:aa:ac:94:57:ee:0d:cd:ae:ac:b2:74:d6: 01:43:41:4d:28:5b:28:5c:95:3f:d4:fb:88:99:d9:c6:a2:43: b9:4b:59:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdedc4K5EVJoBNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGZlMThkNmYtM2ZkNC00MDQ3LThmODQtYTFlMWU4NWU4NDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGU0BeZRJbubOXAENqYSDKgOEZhNfRv+fkHQ RqlRIILtTmkVEI68buvYv4lA34RhBKwrGGvmh1s6LbWhi7FoSRP0hWGKhFzVhKa5 F1kLQ3hGfVvZoPhuyF6xYB3vRneOwKeebK/ZPPHSou65XbZFF4hOoJommICjG0+s n86xw4kbulUvPrnd2YFfdsKio9MZ3tzRu6CutZGQQZqKyv4z2oMj2hfidMn7bTEd C3RX3F6RmO5NXCCswGiz1ymNUyDO5sTwP0y3uD8Fa5wgvFxRoNXcpVfHbXDGvnEi 2Gj6IcFObNrKT5rsilXT7Qddwy0fvX0YIpoE3Y026T380mSPfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB05G2FetWXWBhtfaNnMwkyieBAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjBiODZhZmYtZjczOC0z NTliLWJmN2YtYTkyMzE2OGNhNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhUaiGRTteG0LaVLaZ0vXiuPahvXiU0DwML+of0dazAlMUQZE8po7ha s7LEDQZ5tuXJ/2yjd6VPCbf7tsVPj3sj9/bw0Sej8LtGZqtZnOl6jl4+ZnGbpC3l v90stTDckGMfC7MeEooU1V22j89vnCThCjaOSgWf7Z/EVY9tfM+1eyWGTOEK2qXv IECHQ2w0CvnI/maJ5PeDXyvXfzJtnJKdtAzNVnkF3kJqKLqp+Yk0oXyJ7qCAmSvJ CRdn2t7fHtnbcBjHxw9FZd+bRw1mayjtopFhbbqRyBCLf5sLKqqslFfuDc2urLJ0 1gFDQU0oWyhclT/U+4iZ2caiQ7lLWbo= -----END CERTIFICATE-----Generated at Sun Oct 11 09:04:05 2026 by rpki-client