$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa File: 2358e127-b9cd-321b-a2ed-09882df26c20.roa (raw, json) Hash identifier: wFwAz3NsCmb8j76ewZzAFbi/z6mZyc6NFvLjP6KyuRA= Subject key identifier: 9B:03:B4:F9:B9:57:5A:B1:52:EF:35:E0:20:EF:39:15:CD:09:FB:A5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA7884F3212E86F4CE9770240 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 202 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4f:32:12:e8:6f:4c:e9:77:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9caa19ea-e236-4029-b106-4db7299551a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:54:50:b7:51:dd:6b:b8:0f:d1:ba:4c:f2: c7:4a:33:32:c0:92:8e:4d:56:1a:00:92:4d:26:42: 58:90:86:28:2b:bd:27:05:e9:d4:ef:df:cc:33:23: 52:b7:ba:52:b7:1f:86:7a:57:1f:27:d2:05:f0:6a: 86:83:41:27:9c:98:25:ee:05:af:8d:69:b2:d8:ca: d8:b8:1b:d7:b3:1c:fd:b9:39:50:45:75:74:bc:2b: 54:d8:7b:02:6a:ee:84:d9:e2:1a:cc:8b:0b:92:fc: e7:dc:b0:c8:a6:d2:c1:2d:f8:17:4a:c2:00:c6:1a: aa:b2:8c:37:35:de:1a:c9:4c:b9:92:b7:aa:3f:62: 8d:08:82:a5:41:a1:f3:33:24:49:26:43:54:d7:73: aa:aa:35:e4:6f:3e:61:d6:d2:15:bd:23:ff:ce:d4: b4:b0:7e:e2:e4:31:e6:ed:76:a9:de:5e:e5:93:48: ab:a8:b2:a6:41:7d:12:21:20:47:fc:8d:bc:0c:8f: 84:30:75:85:47:1f:0b:8e:91:10:dd:14:73:1e:ab: 6a:bf:54:69:36:d5:9f:af:12:d0:ef:85:ec:22:79: a0:63:9f:bb:ba:44:70:ed:f1:d3:bf:33:4b:1a:59: 83:e5:cf:2e:50:b2:21:c8:1d:a7:b4:e5:eb:73:9a: c9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:03:B4:F9:B9:57:5A:B1:52:EF:35:E0:20:EF:39:15:CD:09:FB:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2b:92:f1:68:6d:43:72:8b:54:3a:95:a0:1f:ea:51:9d:13: de:7f:92:1c:9c:34:fa:f6:5f:49:f5:df:6b:ba:8b:37:d2:bd: 46:e9:b7:04:f0:38:95:4d:8b:bd:1e:06:69:7a:25:8e:9c:c6: 0f:7a:f6:a1:e9:58:c4:b4:1f:37:1c:37:d3:fa:a9:76:c8:9b: 5e:13:68:58:af:d2:50:75:6b:bb:b4:ad:d3:be:01:56:b7:e3: a6:07:c6:58:3d:b4:d6:37:a8:bd:b6:53:09:6f:ea:c8:1d:a2: 0a:e9:b4:7d:ff:0a:b9:ac:57:05:23:d9:9d:b4:e6:78:33:7e: d4:a8:6f:42:f2:2d:12:91:51:4c:2e:32:56:1f:c8:be:78:83: 11:f7:c6:89:ce:97:07:6e:63:1d:a3:c7:34:81:ed:73:98:b5: ad:cc:0a:0f:37:22:b9:a2:28:63:68:51:c2:81:69:d0:6e:85: 47:c3:58:27:43:1b:08:7e:60:2c:4e:87:dc:fb:2b:3e:94:db: 5e:44:a5:37:16:eb:9a:d1:60:16:72:bb:50:c6:11:ff:9d:67: ac:14:12:e4:c5:76:02:0e:0a:3e:9e:8a:fd:17:6e:72:62:01: de:b9:b0:00:48:90:b9:8d:06:32:54:6d:64:0c:c0:f8:a0:bf: 12:04:fb:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE8yEuhvTOl3AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWNhYTE5ZWEtZTIzNi00MDI5LWIxMDYtNGRiNzI5OTU1MWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcVUULdR3Wu4D9G6TPLHSjMywJKOTVYaAJJN JkJYkIYoK70nBenU79/MMyNSt7pStx+GelcfJ9IF8GqGg0EnnJgl7gWvjWmy2MrY uBvXsxz9uTlQRXV0vCtU2HsCau6E2eIazIsLkvzn3LDIptLBLfgXSsIAxhqqsow3 Nd4ayUy5kreqP2KNCIKlQaHzMyRJJkNU13OqqjXkbz5h1tIVvSP/ztS0sH7i5DHm 7Xap3l7lk0irqLKmQX0SISBH/I28DI+EMHWFRx8LjpEQ3RRzHqtqv1RpNtWfrxLQ 74XsInmgY5+7ukRw7fHTvzNLGlmD5c8uULIhyB2ntOXrc5rJwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsDtPm5V1qxUu814CDvORXNCfulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjM1OGUxMjctYjljZC0z MjFiLWEyZWQtMDk4ODJkZjI2YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkrkvFobUNyi1Q6laAf6lGdE95/khycNPr2X0n132u6izfSvUbptwTw OJVNi70eBml6JY6cxg969qHpWMS0HzccN9P6qXbIm14TaFiv0lB1a7u0rdO+AVa3 46YHxlg9tNY3qL22Uwlv6sgdogrptH3/CrmsVwUj2Z205ngzftSob0LyLRKRUUwu MlYfyL54gxH3xonOlwduYx2jxzSB7XOYta3MCg83IrmiKGNoUcKBadBuhUfDWCdD Gwh+YCxOh9z7Kz6U215EpTcW65rRYBZyu1DGEf+dZ6wUEuTFdgIOCj6eiv0XbnJi Ad65sABIkLmNBjJUbWQMwPigvxIE+4o= -----END CERTIFICATE-----Generated at Wed Sep 9 03:43:20 2026 by rpki-client