$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa File: 3b274f1e-b389-388a-a8fd-f2216056bc4e.roa (raw, json) Hash identifier: Y8jC4RI5r/8Yh9AnWGb/ro6KKtyCjrzhJbEfBGQD3dQ= Subject key identifier: DF:6E:18:C8:2C:9A:1B:58:AC:95:AE:05:6B:74:11:00:06:33:A1:37 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7E7DC32E2D09C6197E0B3080 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 203 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c3:2e:2d:09:c6:19:7e:0b:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=944af3cb-1e44-4c48-9540-b6a1f64dcfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:a3:48:aa:a3:34:fb:d1:fa:bd:8b:3d:0f: 1e:7b:cc:08:6d:39:f9:84:a5:3b:ff:e6:a6:bb:bd: 07:7c:82:d6:f1:8e:17:5c:59:35:e9:3d:f8:cf:10: 9f:fb:89:16:43:4a:a7:70:d3:da:a2:24:f4:b7:63: c9:49:ef:fa:5f:96:80:6f:92:26:45:e5:cc:12:37: 9a:91:02:9d:4b:88:4e:e6:a8:d0:b4:f4:9d:f1:50: c1:70:32:e4:92:28:ea:fc:3e:ea:42:14:1d:68:9c: 0e:10:cc:8d:5b:e5:93:1f:97:f5:f7:11:0d:26:8b: cd:06:d5:22:ec:cc:17:eb:f3:49:1a:bc:dc:91:61: 72:c4:85:ed:a2:87:69:89:26:a7:df:11:ca:03:e2: 00:a6:59:1d:22:01:7b:a6:7d:01:14:68:02:2b:1f: 68:9d:ce:6d:bc:d7:9a:a3:fa:e5:5c:ef:fd:1c:10: 0e:78:54:ed:c9:4f:af:b4:2e:5b:85:45:6a:d9:a3: bf:c6:56:75:e4:94:53:a1:c3:8d:b6:6b:2a:5f:6e: 84:70:84:9f:2c:d7:cf:de:2b:c1:72:42:07:e4:85: 5a:6a:84:e9:8d:59:0f:2a:f8:9c:a9:5e:b2:77:fc: ad:2a:20:40:f0:4d:98:26:35:2b:ad:98:4e:53:11: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6E:18:C8:2C:9A:1B:58:AC:95:AE:05:6B:74:11:00:06:33:A1:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:06:0a:6f:64:49:c2:be:c7:b3:82:37:9e:e7:df:d8:e8:ea: 0c:87:ed:ba:94:97:3d:2e:58:b0:46:6a:1b:a0:c2:c5:30:52: 81:73:55:44:96:2e:98:55:e8:57:99:91:c2:3d:2a:35:b4:2d: 7f:10:d4:0a:51:12:84:77:bb:73:e6:d5:88:9a:d9:f3:31:b3: 59:cc:4b:4d:0c:92:e3:02:e2:e4:0f:0e:2d:12:ff:e1:e5:da: 28:48:eb:2d:9e:f2:5f:7b:c6:4f:8d:40:7a:52:74:fb:d2:36: 95:30:d9:03:83:87:d9:72:6b:b8:cf:6b:57:aa:bd:f4:9c:d8: 34:98:af:2c:84:79:e9:d1:a6:0c:3b:27:8b:dd:85:9d:48:7a: 8c:7b:de:71:a1:c0:6d:32:ce:45:30:a4:dd:2d:eb:02:2a:0c: 54:38:3a:cd:ce:91:18:9d:47:80:75:50:82:54:55:09:58:a5: 90:66:b4:13:f0:76:23:41:4b:97:07:27:21:81:94:d0:e3:99: 46:1f:8e:83:3f:e3:58:cc:a5:28:38:5d:bf:21:c4:50:4d:08: 09:3e:f8:81:63:7b:60:a4:0d:a2:48:a7:f7:8e:e6:47:9e:95: 07:f6:b6:23:a5:33:6c:e0:e5:70:5e:84:41:46:81:4f:d6:95: 93:99:06:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcMuLQnGGX4LMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk OTQ0YWYzY2ItMWU0NC00YzQ4LTk1NDAtYjZhMWY2NGRjZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/2jSKqjNPvR+r2LPQ8ee8wIbTn5hKU7/+am u70HfILW8Y4XXFk16T34zxCf+4kWQ0qncNPaoiT0t2PJSe/6X5aAb5ImReXMEjea kQKdS4hO5qjQtPSd8VDBcDLkkijq/D7qQhQdaJwOEMyNW+WTH5f19xENJovNBtUi 7MwX6/NJGrzckWFyxIXtoodpiSan3xHKA+IAplkdIgF7pn0BFGgCKx9onc5tvNea o/rlXO/9HBAOeFTtyU+vtC5bhUVq2aO/xlZ15JRTocONtmsqX26EcISfLNfP3ivB ckIH5IVaaoTpjVkPKvicqV6yd/ytKiBA8E2YJjUrrZhOUxGrpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9uGMgsmhtYrJWuBWt0EQAGM6E3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2IyNzRmMWUtYjM4OS0z ODhhLWE4ZmQtZjIyMTYwNTZiYzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQGCm9kScK+x7OCN57n39jo6gyH7bqUlz0uWLBGahugwsUwUoFzVUSW LphV6FeZkcI9KjW0LX8Q1ApREoR3u3Pm1Yia2fMxs1nMS00MkuMC4uQPDi0S/+Hl 2ihI6y2e8l97xk+NQHpSdPvSNpUw2QODh9lya7jPa1eqvfSc2DSYryyEeenRpgw7 J4vdhZ1Ieox73nGhwG0yzkUwpN0t6wIqDFQ4Os3OkRidR4B1UIJUVQlYpZBmtBPw diNBS5cHJyGBlNDjmUYfjoM/41jMpSg4Xb8hxFBNCAk++IFje2CkDaJIp/eO5kee lQf2tiOlM2zg5XBehEFGgU/WlZOZBrs= -----END CERTIFICATE-----Generated at Mon Oct 26 08:46:34 2026 by rpki-client