$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/381453b7-1e6e-3c6f-b7be-eda673e18282.roa File: 381453b7-1e6e-3c6f-b7be-eda673e18282.roa (raw, json) Hash identifier: Nm39fGbfA3kIoc1xNix8P5yXuusVAjGgRRj2DxF9T4w= Subject key identifier: 76:77:D2:BC:84:7C:4C:58:D4:27:E5:AA:3C:62:F0:62:F3:65:B0:EF Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62BC7D3250716CECC22800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/381453b7-1e6e-3c6f-b7be-eda673e18282.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 3356 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:bc:7d:32:50:71:6c:ec:c2:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=044300e7-07dd-4cd5-967a-06337f130bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:85:85:8c:17:88:5a:2a:a0:ce:81:f7:d6:f1: 55:4f:df:16:21:fb:bc:22:bf:8b:83:89:8c:5a:9c: ca:4c:7f:75:b8:59:70:4d:fd:3e:76:25:bb:83:5b: 29:e5:05:81:db:88:5b:e5:64:b2:fe:69:63:19:7a: 5e:85:e7:9a:00:d8:1a:b9:9c:d4:47:b2:4a:b5:f3: 40:d6:ec:8c:d8:fc:3c:2b:2f:28:76:f9:ad:53:39: 18:cc:0a:07:db:85:26:77:80:19:fe:20:2b:60:ae: e6:5c:50:75:1c:50:4f:39:79:f4:60:7f:b7:b9:bc: 29:10:5d:a4:7c:b1:ed:d7:13:d9:bf:ba:02:a6:e9: 35:f6:4c:94:79:ea:a0:bb:bb:59:8a:6d:93:73:7b: 32:29:6b:69:c1:5b:e7:75:a9:e1:20:a6:e0:56:24: e2:e3:d8:ad:1e:c0:a8:a5:d5:3b:f4:dc:2f:54:65: d4:f3:4a:03:3a:d3:00:d2:a4:7e:f7:8c:2a:16:a7: b9:ad:8e:d9:19:ac:86:4f:5c:ee:b7:0d:80:fd:61: ea:21:55:10:94:b7:b4:1c:71:8d:71:a0:a6:45:b9: ae:05:41:38:e4:03:b5:73:60:94:5f:84:f7:0f:41: 91:ed:52:1b:16:cd:57:76:22:a4:b3:d6:97:ab:cb: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:77:D2:BC:84:7C:4C:58:D4:27:E5:AA:3C:62:F0:62:F3:65:B0:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/381453b7-1e6e-3c6f-b7be-eda673e18282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:28:d6:04:3f:f5:72:28:5f:a4:26:40:18:b7:da:9a:13:6c: 82:bd:b0:43:75:03:fb:92:20:4d:3d:ae:48:15:86:2e:b9:70: b3:04:7f:f0:fc:cc:86:e3:77:94:2a:37:4b:74:83:1b:e8:e1: f2:b1:e5:48:ff:60:1d:51:92:94:ee:a4:3b:80:3e:a7:ee:ef: 69:6c:41:10:b8:6d:54:fb:5f:e2:71:f8:62:b1:54:4f:c1:e6: 10:7a:b7:d8:55:63:37:d4:93:59:e1:2d:5b:eb:75:fd:bf:54: 11:40:58:34:06:c9:36:35:2a:3a:e8:09:0c:7c:a6:bb:be:92: b8:27:fb:92:fe:25:64:57:99:08:18:71:d9:c3:50:e4:30:5e: 46:49:bc:f4:56:c4:b7:5f:67:7d:fc:3e:76:ad:fe:07:05:21: cb:8a:c6:9c:fb:92:4d:e8:73:38:53:fc:9c:dc:22:9b:94:76: 8e:54:e9:71:88:df:5a:66:03:00:bf:c4:9a:7a:0a:58:7b:d8: bc:c4:ac:ac:a2:fd:b7:d7:9c:e6:c0:45:d0:75:5c:d8:26:2e: 3c:e0:8e:f8:70:ef:e7:33:72:24:da:7a:e8:ca:78:a5:f8:ee: ed:3e:20:a1:5b:05:5b:89:2d:91:d7:41:2b:c7:4c:8f:e4:86: d8:2b:79:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYrx9MlBxbOzCKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MDQ0MzAwZTctMDdkZC00Y2Q1LTk2N2EtMDYzMzdmMTMwYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoWFjBeIWiqgzoH31vFVT98WIfu8Ir+Lg4mM WpzKTH91uFlwTf0+diW7g1sp5QWB24hb5WSy/mljGXpeheeaANgauZzUR7JKtfNA 1uyM2Pw8Ky8odvmtUzkYzAoH24Umd4AZ/iArYK7mXFB1HFBPOXn0YH+3ubwpEF2k fLHt1xPZv7oCpuk19kyUeeqgu7tZim2Tc3syKWtpwVvndanhIKbgViTi49itHsCo pdU79NwvVGXU80oDOtMA0qR+94wqFqe5rY7ZGayGT1zutw2A/WHqIVUQlLe0HHGN caCmRbmuBUE45AO1c2CUX4T3D0GR7VIbFs1XdiKks9aXq8sc5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZ30ryEfExY1Cflqjxi8GLzZbDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzgxNDUzYjctMWU2ZS0z YzZmLWI3YmUtZWRhNjczZTE4MjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8o1gQ/9XIoX6QmQBi32poTbIK9sEN1A/uSIE09rkgVhi65cLMEf/D8 zIbjd5QqN0t0gxvo4fKx5Uj/YB1RkpTupDuAPqfu72lsQRC4bVT7X+Jx+GKxVE/B 5hB6t9hVYzfUk1nhLVvrdf2/VBFAWDQGyTY1KjroCQx8pru+krgn+5L+JWRXmQgY cdnDUOQwXkZJvPRWxLdfZ338Pnat/gcFIcuKxpz7kk3oczhT/JzcIpuUdo5U6XGI 31pmAwC/xJp6Clh72LzErKyi/bfXnObARdB1XNgmLjzgjvhw7+czciTaeujKeKX4 7u0+IKFbBVuJLZHXQSvHTI/khtgreb8= -----END CERTIFICATE-----Generated at Sun Oct 11 10:36:21 2026 by rpki-client