$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa File: 3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa (raw, json) Hash identifier: ydEdl2GygU4OY8nfKjqCT4VIY4RUDIWyiTMfe9wTdNI= Subject key identifier: 72:D4:C8:0E:5D:A4:C9:FF:5A:30:D7:7E:FB:73:7C:44:69:60:00:DC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62B7E676FC96EEEE3349C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 3356 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:b7:e6:76:fc:96:ee:ee:33:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=4eb94838-fd81-4263-b910-142cdabd7622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:eb:36:8b:af:63:56:04:c7:b6:48:8f:2f: 24:01:6d:56:e9:60:65:79:ae:92:f8:ca:67:94:be: 4b:93:1a:c9:57:89:d2:97:31:c4:0c:8e:f9:58:3f: 85:ec:6a:90:11:c7:1f:2b:e1:7a:79:77:7a:d7:4f: a8:2f:5b:aa:71:0b:f3:28:83:ba:01:96:01:c7:8d: 4f:64:c9:e8:d5:8f:8f:91:9a:10:b8:92:3d:68:99: 2b:ce:39:29:54:43:97:c9:fd:2f:ac:21:20:0a:19: 83:f4:06:8d:15:89:f5:29:da:94:88:1d:78:ef:54: 98:eb:24:17:2b:a1:40:2d:05:2a:bf:6d:5e:47:dd: e9:95:46:89:f1:4e:34:54:96:b6:58:f1:59:91:1c: fe:34:21:36:11:06:00:fe:bf:7a:85:1e:ee:3c:57: b6:7d:84:66:0f:6d:23:71:12:86:d0:cb:da:0d:3b: 0d:1c:bb:58:d5:4a:c2:12:f5:9e:d2:94:f3:f0:7a: 54:ac:ff:9f:4f:ae:59:5a:e5:c5:d8:4a:88:dd:54: 07:f2:f1:2d:3c:76:99:7f:25:55:c8:ae:b5:3a:4e: 5a:d9:89:92:0d:cd:b5:e8:5d:9d:dd:17:91:72:07: 9b:e6:89:6f:52:21:5c:35:00:52:c3:99:65:81:2e: d5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D4:C8:0E:5D:A4:C9:FF:5A:30:D7:7E:FB:73:7C:44:69:60:00:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:51:4b:d1:65:5e:fc:c2:6b:c6:ea:b3:f2:0d:b0:ff:c9:70: 81:fb:2d:15:4d:9b:d3:cc:c1:55:74:91:db:db:5e:d5:18:4f: b2:47:55:2c:9a:ab:64:26:0a:ae:d0:1e:19:fe:77:8f:e3:4a: 51:14:9d:53:6a:b2:94:f6:4e:1b:cd:d3:dc:31:e3:e4:49:0a: 19:51:bf:b7:26:2d:f7:58:ff:e6:60:ae:44:7b:05:eb:7f:b7: 9c:e9:9d:04:fa:f3:90:6d:5c:5a:a9:71:e7:a4:e8:85:c3:d1: 3f:b2:80:00:d2:b6:36:e2:b3:67:2e:37:d8:18:ec:be:57:d1: 33:28:f1:86:ec:e7:ea:ca:ca:28:18:22:b3:d5:07:4b:b6:60: ce:ad:ec:d6:b3:9f:3a:fe:66:55:9e:d2:ac:71:a4:98:c9:a8: 5c:b6:31:9c:9b:3b:3f:39:76:8b:04:f8:69:8c:8b:1e:c0:20: 26:1f:d7:1e:ca:c7:42:0f:52:87:c8:f5:4f:45:9c:de:37:33: f0:97:15:a0:43:dd:ab:5f:ae:94:5e:02:fd:0d:0b:c5:24:14: 08:18:45:3b:61:9e:33:05:dc:0c:a1:8e:ab:5e:21:ca:58:f9: 8c:ef:52:39:c8:90:88:e8:ba:35:a0:01:e6:19:42:90:dc:8a: 87:51:47:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYrfmdvyW7u4zScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NGViOTQ4MzgtZmQ4MS00MjYzLWI5MTAtMTQyY2RhYmQ3NjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEbrNouvY1YEx7ZIjy8kAW1W6WBlea6S+Mpn lL5LkxrJV4nSlzHEDI75WD+F7GqQEccfK+F6eXd610+oL1uqcQvzKIO6AZYBx41P ZMno1Y+PkZoQuJI9aJkrzjkpVEOXyf0vrCEgChmD9AaNFYn1KdqUiB1471SY6yQX K6FALQUqv21eR93plUaJ8U40VJa2WPFZkRz+NCE2EQYA/r96hR7uPFe2fYRmD20j cRKG0MvaDTsNHLtY1UrCEvWe0pTz8HpUrP+fT65ZWuXF2EqI3VQH8vEtPHaZfyVV yK61Ok5a2YmSDc216F2d3ReRcgeb5olvUiFcNQBSw5llgS7VvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLUyA5dpMn/WjDXfvtzfERpYADcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2JmMDg5NjktMWEyYS0z MDk5LThmNjgtYWQxZjRjMGY3ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhRS9FlXvzCa8bqs/INsP/JcIH7LRVNm9PMwVV0kdvbXtUYT7JHVSya q2QmCq7QHhn+d4/jSlEUnVNqspT2ThvN09wx4+RJChlRv7cmLfdY/+ZgrkR7Bet/ t5zpnQT685BtXFqpceek6IXD0T+ygADStjbis2cuN9gY7L5X0TMo8Ybs5+rKyigY IrPVB0u2YM6t7Naznzr+ZlWe0qxxpJjJqFy2MZybOz85dosE+GmMix7AICYf1x7K x0IPUofI9U9FnN43M/CXFaBD3atfrpReAv0NC8UkFAgYRTthnjMF3AyhjqteIcpY +YzvUjnIkIjoujWgAeYZQpDciodRR6M= -----END CERTIFICATE-----Generated at Mon Oct 12 17:24:46 2026 by rpki-client