$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa File: 3b274f1e-b389-388a-a8fd-f2216056bc4e.roa (raw, json) Hash identifier: V1fj7Dze7MKl/EcB8lPaYqb7eaoDRWTYXDDHxnOIc+A= Subject key identifier: 0E:4E:66:22:79:1B:71:F1:5B:A0:75:CC:90:15:EF:2F:79:5D:47:74 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EDC9202CEEED6B61CD45B7980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:02:ce:ee:d6:b6:1c:d4:5b:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=aa46f639-b527-4b94-bf59-6814e2ed3a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f6:ad:cd:7b:8d:8b:c3:71:fb:ee:1f:a6:4d: 32:98:36:c2:0e:3e:65:23:6d:e9:f1:4e:b3:1b:a9: dd:ae:0f:fa:95:13:46:e8:6b:19:ee:31:ac:60:24: 1c:24:cf:76:1b:ac:43:19:3e:1a:ea:e0:66:3d:ff: 7e:36:e7:94:25:b5:4b:72:22:0a:fb:80:f3:18:fc: 93:d0:45:50:60:a3:e9:3b:cf:67:d0:da:fc:46:d6: cc:38:33:34:7f:be:cf:35:6d:e4:fa:02:e8:92:5f: 90:89:e8:76:4a:c7:74:38:d9:59:a3:c7:04:6c:6f: 39:bf:67:6f:2e:e6:35:21:88:fa:b9:a9:4b:7f:ae: a5:72:7e:02:82:62:4d:e1:c3:ec:7f:81:e8:97:b6: b9:45:53:6d:17:82:4e:21:2c:fe:04:8b:2f:af:f1: a1:65:9b:0d:72:e2:cf:8e:11:fa:11:ac:d5:fb:6b: 71:ef:81:a8:ce:5b:ee:01:c9:06:d1:7d:1b:13:3d: 76:aa:c9:4c:cd:50:5b:b7:9c:5c:1f:b1:3c:b6:72: 3e:36:e8:7b:f1:c1:c1:ac:f8:52:f5:db:2a:a3:91: f3:f6:b5:39:ed:49:35:7c:aa:33:52:56:67:bd:53: fb:12:15:6c:d6:7a:28:2f:b6:0d:ab:7d:19:f2:c4: c0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4E:66:22:79:1B:71:F1:5B:A0:75:CC:90:15:EF:2F:79:5D:47:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:38:b5:8b:4c:95:36:88:d1:28:20:5d:6e:df:a1:f7:77:55: e8:eb:16:ab:cf:30:bd:ba:ec:fa:e3:91:0d:7c:d9:34:64:4d: 39:1a:b0:aa:4f:a9:65:c9:32:b8:04:0e:11:d2:00:64:39:50: e6:13:91:17:3f:4e:cf:cc:65:75:11:85:62:37:e7:8d:6f:e0: 9a:f0:0c:da:45:0a:6f:ac:18:ce:13:f9:91:91:40:38:26:12: 11:1f:d3:7d:2e:99:ab:c9:6a:d6:06:51:54:0f:a7:0c:ac:40: e5:da:57:56:40:4a:ea:4b:19:04:31:72:72:c2:76:4d:2c:a0: b0:4c:86:8c:59:7e:06:b5:ef:71:57:04:4f:49:92:ad:b9:fc: f7:f6:46:f5:1c:c6:47:69:6f:db:9d:57:22:63:8e:1b:7c:49: 67:e4:81:b1:9b:f3:8e:c9:e4:33:34:c2:aa:ae:06:49:f5:4e: 01:f0:86:64:4f:a6:dd:5f:d1:64:31:28:ac:37:3b:17:83:17: ac:e4:c1:19:c4:e6:33:03:cb:09:b4:d6:ce:db:bd:cd:64:a9: b0:13:0e:9e:94:e1:4e:81:36:38:76:28:d4:18:d1:a2:1d:98: be:a9:82:34:26:3d:2e:a1:f0:4c:d9:e2:48:62:95:83:96:3a: 5c:ff:c0:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckgLO7ta2HNRbeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk YWE0NmY2MzktYjUyNy00Yjk0LWJmNTktNjgxNGUyZWQzYTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPatzXuNi8Nx++4fpk0ymDbCDj5lI23p8U6z G6ndrg/6lRNG6GsZ7jGsYCQcJM92G6xDGT4a6uBmPf9+NueUJbVLciIK+4DzGPyT 0EVQYKPpO89n0Nr8RtbMODM0f77PNW3k+gLokl+Qieh2Ssd0ONlZo8cEbG85v2dv LuY1IYj6ualLf66lcn4CgmJN4cPsf4Hol7a5RVNtF4JOISz+BIsvr/GhZZsNcuLP jhH6EazV+2tx74GozlvuAckG0X0bEz12qslMzVBbt5xcH7E8tnI+Nuh78cHBrPhS 9dsqo5Hz9rU57Uk1fKozUlZnvVP7EhVs1nooL7YNq30Z8sTAbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5OZiJ5G3HxW6B1zJAV7y95XUd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2IyNzRmMWUtYjM4OS0z ODhhLWE4ZmQtZjIyMTYwNTZiYzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII4tYtMlTaI0SggXW7fofd3VejrFqvPML267PrjkQ182TRkTTkasKpP qWXJMrgEDhHSAGQ5UOYTkRc/Ts/MZXURhWI3541v4JrwDNpFCm+sGM4T+ZGRQDgm EhEf030umavJatYGUVQPpwysQOXaV1ZASupLGQQxcnLCdk0soLBMhoxZfga173FX BE9Jkq25/Pf2RvUcxkdpb9udVyJjjht8SWfkgbGb847J5DM0wqquBkn1TgHwhmRP pt1f0WQxKKw3OxeDF6zkwRnE5jMDywm01s7bvc1kqbATDp6U4U6BNjh2KNQY0aId mL6pgjQmPS6h8EzZ4khilYOWOlz/wBk= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:52 2026 by rpki-client