$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa File: 32054d0b-077d-3e96-8773-c1690e50a953.roa (raw, json) Hash identifier: CYx9An4OYAeObDWO67Hm2SCUFKIcgvL9MHqdFT9hvds= Subject key identifier: 29:F3:98:11:7A:1E:FC:86:3A:3C:B0:D4:1E:15:2B:9C:61:DF:82:A4 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EBB11C473A137B22CFEC178C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 202 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c4:73:a1:37:b2:2c:fe:c1:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=33f15baf-c284-4a9e-aaa3-bf6c521b1b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fe:2b:27:c6:9e:4a:5e:84:4f:c2:54:b8:c5: 19:8a:cb:cb:4a:e8:d1:b9:1c:08:48:95:35:2b:72: c9:ac:df:5b:27:ce:c3:82:75:7b:41:ce:32:1d:76: 28:7e:9c:3d:0a:47:49:1b:6c:51:b1:e1:a1:13:45: 8f:db:0e:3b:07:a4:ea:39:7f:3f:70:a6:b0:08:55: 81:b2:63:78:eb:c2:cb:35:8b:d2:87:ec:1b:75:74: 11:40:48:30:a0:6f:c8:6f:75:70:ba:22:a1:4e:0c: c9:d2:7d:e2:50:fa:a1:2b:b3:21:db:d7:cb:33:a4: af:fe:58:ff:fb:05:37:fc:32:f3:d0:c1:f7:f0:8b: 31:4c:cd:c5:c5:c3:1a:d4:2d:77:cc:72:e5:98:55: 04:8e:ff:d2:20:73:49:29:f3:b2:43:ce:0a:f8:6f: 1b:30:e6:90:ad:29:2b:e1:66:22:48:a9:7e:7b:0f: b0:72:fa:ad:1f:7b:42:aa:af:08:ad:ee:c0:59:80: 80:c2:60:1f:1e:17:c9:21:29:23:2b:50:53:c0:d0: 52:d8:56:a9:11:0b:e0:6b:11:7b:e4:79:c6:c2:cf: 83:b9:f5:99:58:04:a4:e7:8f:bf:83:9b:fe:c0:22: 0d:c8:6e:26:f8:95:9d:60:85:a4:e8:7d:d9:e3:20: d7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F3:98:11:7A:1E:FC:86:3A:3C:B0:D4:1E:15:2B:9C:61:DF:82:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:63:f7:14:67:7e:dd:7a:3e:b9:2b:b5:a6:f8:90:a4:63:53: b9:14:62:05:39:d4:9c:22:90:b5:af:f1:6d:bc:a9:3e:cc:ea: c1:72:ae:80:44:a9:5d:10:84:89:4c:12:08:68:b3:9b:fd:6b: 63:06:9d:09:87:0a:a3:f1:c1:b2:ce:0c:7d:13:c2:d3:15:04: 09:1e:62:b0:88:99:f1:31:7e:53:87:4a:bf:56:83:77:d2:f8: d1:e2:0f:f5:c0:40:8e:7c:2a:bb:92:ae:eb:73:b4:af:12:6c: 23:67:d2:75:f9:65:68:7a:c4:83:6a:f1:37:b9:8f:0c:9d:9d: 22:97:c3:43:4d:ed:31:45:89:5f:36:3c:17:d9:0d:0c:a2:79: f1:da:1f:91:04:71:a4:f8:ea:9e:36:d2:b1:5b:66:c6:9d:b6: ff:87:d9:45:c2:be:86:89:1b:f4:84:50:b5:b2:bc:2a:e9:57: 08:d2:6f:ce:a0:10:2e:e0:01:de:42:aa:f1:d9:1c:60:08:f6: f2:04:12:2a:d1:40:f4:d4:0f:89:d1:a3:f2:b0:16:c4:4c:93: 91:03:fd:5b:1a:9d:e2:43:4d:a3:92:6e:73:cc:c5:a1:3f:f7: fe:d2:45:b5:40:65:30:ea:32:f9:4b:2a:12:11:9f:ca:da:f1: ea:97:d6:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcRzoTeyLP7BeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MzNmMTViYWYtYzI4NC00YTllLWFhYTMtYmY2YzUyMWIxYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv4rJ8aeSl6ET8JUuMUZisvLSujRuRwISJU1 K3LJrN9bJ87DgnV7Qc4yHXYofpw9CkdJG2xRseGhE0WP2w47B6TqOX8/cKawCFWB smN468LLNYvSh+wbdXQRQEgwoG/Ib3VwuiKhTgzJ0n3iUPqhK7Mh29fLM6Sv/lj/ +wU3/DLz0MH38IsxTM3FxcMa1C13zHLlmFUEjv/SIHNJKfOyQ84K+G8bMOaQrSkr 4WYiSKl+ew+wcvqtH3tCqq8Ire7AWYCAwmAfHhfJISkjK1BTwNBS2FapEQvgaxF7 5HnGws+DufWZWASk54+/g5v+wCINyG4m+JWdYIWk6H3Z4yDXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnzmBF6HvyGOjyw1B4VK5xh34KkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzIwNTRkMGItMDc3ZC0z ZTk2LTg3NzMtYzE2OTBlNTBhOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBj9xRnft16Prkrtab4kKRjU7kUYgU51JwikLWv8W28qT7M6sFyroBE qV0QhIlMEghos5v9a2MGnQmHCqPxwbLODH0TwtMVBAkeYrCImfExflOHSr9Wg3fS +NHiD/XAQI58KruSrutztK8SbCNn0nX5ZWh6xINq8Te5jwydnSKXw0NN7TFFiV82 PBfZDQyiefHaH5EEcaT46p420rFbZsadtv+H2UXCvoaJG/SEULWyvCrpVwjSb86g EC7gAd5CqvHZHGAI9vIEEirRQPTUD4nRo/KwFsRMk5ED/VsaneJDTaOSbnPMxaE/ 9/7SRbVAZTDqMvlLKhIRn8ra8eqX1sI= -----END CERTIFICATE-----Generated at Wed Sep 9 03:43:24 2026 by rpki-client