$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa File: 40d296d1-278c-3f5b-b993-eb056d922ec1.roa (raw, json) Hash identifier: MU1Ph1o67CBaHgLaQwiFuDj9vfhQpgjgChAOqdKq8x4= Subject key identifier: E7:9D:E8:AF:AF:5D:20:9E:9D:36:ED:A3:84:E5:D4:DB:E7:EF:E8:A5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EBB11CE63BA9A4A3FE2D2DF80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 202 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:ce:63:ba:9a:4a:3f:e2:d2:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=1c0c8ab5-1e21-41cb-b0fc-8ba0bcbc7221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:5a:19:cb:be:ee:59:10:a6:eb:e2:bf:9f: 06:3e:41:46:3f:9d:e7:9a:13:99:bd:50:e8:fe:18: 28:5f:22:72:4f:44:68:af:8d:cc:9c:bd:5a:af:9d: fb:6b:2c:69:11:10:1c:06:61:47:78:a0:6f:cb:4c: 61:74:46:38:88:7a:d0:ae:83:42:52:6b:00:d6:f5: 4f:20:d9:df:b5:a5:8a:8a:6c:fc:a9:63:30:20:cb: 8a:0e:8c:fb:ab:3a:92:74:fa:a1:75:18:d2:d0:eb: 15:33:b1:73:d5:b3:6a:a8:56:32:99:ef:f9:fd:e4: d7:a7:69:84:61:1d:b2:09:b5:e7:5f:b7:0f:8f:ea: ad:a1:0f:0b:bc:6b:e3:f2:d8:f9:a7:61:e7:d5:eb: cf:35:2a:5b:70:2b:28:5f:6e:8f:ee:43:65:ff:2b: 87:ee:bd:75:f3:e6:34:39:c3:83:eb:2d:36:62:b2: a5:98:ca:d3:d7:ef:9c:db:ee:9b:1b:88:74:fb:e6: ae:78:6d:09:c8:45:28:06:32:13:8c:97:92:7f:0e: ae:6b:9f:2f:e2:5d:6e:f7:5a:15:b9:38:7e:3e:45: ee:8a:2b:ae:6c:e1:df:c9:a7:b0:16:4b:ec:60:b0: b8:4f:40:b2:66:48:19:0c:02:43:3d:02:92:b7:0d: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9D:E8:AF:AF:5D:20:9E:9D:36:ED:A3:84:E5:D4:DB:E7:EF:E8:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ca:8d:2e:02:ed:3b:ca:3e:46:4e:d1:ea:3a:c0:d9:ea:8f: 6f:77:04:ed:56:f7:24:6f:dd:20:13:af:09:4f:d6:56:15:ef: 0e:0e:4b:2b:21:06:31:af:39:54:36:7e:e3:e7:c2:19:4e:8a: 0e:5b:67:5f:1a:e3:da:dc:3b:07:da:f1:80:79:a4:25:1b:78: 24:ac:78:7e:f2:7e:a6:ea:b3:0d:ae:96:fa:33:94:b8:52:b4: 01:79:c7:93:2e:02:3c:39:54:04:5f:43:9b:ba:a8:90:d8:2d: fd:3b:d6:59:1e:02:60:be:c6:a6:87:88:d0:5d:7c:d9:5b:18: 85:6c:ef:6f:fa:97:8e:ff:f3:18:8e:42:21:c8:97:3d:c7:d7: 86:65:4b:6a:57:96:29:04:f0:e6:98:d7:b2:d6:c0:cc:3f:78: 74:2d:de:7a:a3:a5:b7:59:57:21:69:05:94:2f:c2:6d:a7:9b: b1:96:46:91:92:7f:70:d9:73:14:06:91:7c:3d:9c:60:f4:32: ea:fb:b4:45:ee:85:2e:43:ea:ac:13:07:94:69:43:cd:f1:31: 99:dd:88:03:b2:f3:81:94:a0:31:5c:01:70:3f:0e:ce:48:08: f4:b6:63:08:ed:eb:b5:f9:a2:2c:5e:34:0a:f8:ec:b3:be:a2: 33:c8:be:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67Ec5juppKP+LS34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MWMwYzhhYjUtMWUyMS00MWNiLWIwZmMtOGJhMGJjYmM3MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7VaGcu+7lkQpuviv58GPkFGP53nmhOZvVDo /hgoXyJyT0Ror43MnL1ar537ayxpERAcBmFHeKBvy0xhdEY4iHrQroNCUmsA1vVP INnftaWKimz8qWMwIMuKDoz7qzqSdPqhdRjS0OsVM7Fz1bNqqFYyme/5/eTXp2mE YR2yCbXnX7cPj+qtoQ8LvGvj8tj5p2Hn1evPNSpbcCsoX26P7kNl/yuH7r118+Y0 OcOD6y02YrKlmMrT1++c2+6bG4h0++aueG0JyEUoBjITjJeSfw6ua58v4l1u91oV uTh+PkXuiiuubOHfyaewFkvsYLC4T0CyZkgZDAJDPQKStw0+bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOed6K+vXSCenTbto4Tl1Nvn7+ilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDBkMjk2ZDEtMjc4Yy0z ZjViLWI5OTMtZWIwNTZkOTIyZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPKjS4C7TvKPkZO0eo6wNnqj293BO1W9yRv3SATrwlP1lYV7w4OSysh BjGvOVQ2fuPnwhlOig5bZ18a49rcOwfa8YB5pCUbeCSseH7yfqbqsw2ulvozlLhS tAF5x5MuAjw5VARfQ5u6qJDYLf071lkeAmC+xqaHiNBdfNlbGIVs72/6l47/8xiO QiHIlz3H14ZlS2pXlikE8OaY17LWwMw/eHQt3nqjpbdZVyFpBZQvwm2nm7GWRpGS f3DZcxQGkXw9nGD0Mur7tEXuhS5D6qwTB5RpQ83xMZndiAOy84GUoDFcAXA/Ds5I CPS2Ywjt67X5oixeNAr47LO+ojPIvjE= -----END CERTIFICATE-----Generated at Wed Sep 9 03:43:26 2026 by rpki-client