$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa File: 4f87b28e-b073-3165-93da-edbf13ef0a9d.roa (raw, json) Hash identifier: YsjbCOVquXbdPZM0mpYJnx37IYQIa4SKuC8xNxuMDSQ= Subject key identifier: 46:40:C6:90:90:15:1E:BF:26:21:EE:F2:82:0F:0C:E5:FA:60:1E:A8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7E7DC27E8C311B399579F180 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 202 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c2:7e:8c:31:1b:39:95:79:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=db246ef3-5e39-4b39-a897-031ed447a2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:c2:25:f7:ca:ea:ed:99:8a:b8:6b:29:18: 9b:b2:d2:bf:ed:12:d4:37:93:72:d8:75:b3:4f:f0: d0:9a:dd:4d:56:d5:ed:79:25:19:84:b7:57:4c:6e: 77:67:92:83:2b:54:57:22:eb:b9:df:08:5a:43:92: f1:fe:e3:0d:b8:ff:3a:e4:ff:2d:22:9a:fa:ea:31: 44:52:1e:21:0f:18:de:43:f9:69:38:dc:ed:a2:bc: fb:e8:7e:f1:fa:19:ae:dc:5c:99:b3:3e:8d:33:d4: e4:76:2d:d9:07:1c:1f:ad:fb:e5:6f:5a:3d:63:42: 22:8c:0c:b5:d0:db:1a:83:51:ff:de:9f:7f:ca:52: ef:ba:42:9a:b8:83:ad:0a:9f:dc:f9:4c:6a:b8:e7: a1:20:f9:89:d9:22:00:fe:a6:80:af:2a:ae:e5:cd: bd:92:76:9f:9b:df:fd:fe:aa:98:06:19:fc:4e:8f: 99:15:42:cd:d7:bf:eb:77:c9:59:75:9f:76:f5:3f: 46:8d:48:2e:d9:0b:ec:77:6f:28:e9:3b:dc:04:b0: 14:06:b9:49:ac:44:1e:c0:69:43:b2:a7:48:1b:5f: 50:2e:18:86:cf:6c:17:82:cd:95:ae:e9:8e:e5:58: 0d:a6:bc:56:c6:53:d6:8f:02:68:db:ab:e0:46:2f: 4b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:40:C6:90:90:15:1E:BF:26:21:EE:F2:82:0F:0C:E5:FA:60:1E:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c7:4f:10:77:17:be:de:92:a5:1a:21:84:33:4e:c0:61:08: 1f:9b:9b:20:e6:09:8b:b3:17:ec:ff:45:af:8e:a9:ef:77:24: 10:aa:35:4d:b2:3d:f7:32:b5:95:80:1e:95:c3:e3:fe:11:54: 32:d1:d5:a3:01:03:a2:29:b0:7f:91:e0:92:5d:9d:b6:b6:35: d4:2a:8f:26:41:d6:9e:2a:16:4d:48:ee:00:89:72:0e:90:8e: 2e:b0:4b:e3:b6:36:21:8a:44:86:be:a9:46:ab:d2:ad:f8:a9: d9:1b:d1:b5:29:8e:80:24:18:01:6f:57:28:ce:a2:fa:93:8f: 08:48:5a:8c:19:f0:80:2e:2d:50:7d:fe:b2:a4:a5:55:4e:bf: 34:91:f7:11:05:4b:d6:cc:08:ac:93:4c:79:29:7e:3e:20:04: d4:2e:53:aa:70:bb:d9:6c:47:65:5f:b2:06:d3:9d:89:25:a8: 44:09:da:6d:d6:d1:e1:ba:b1:f6:e8:36:f4:b8:8a:6c:44:3c: e9:cc:37:1c:68:1a:49:03:8e:0c:da:f9:32:6c:0d:5e:be:02: 25:d5:75:4c:29:50:69:58:87:12:7b:99:98:88:d0:e6:97:04: f6:b5:d1:b0:b4:5b:fb:be:df:4a:8a:04:4f:6f:2a:23:bc:7c: d6:7a:8e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcJ+jDEbOZV58YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZGIyNDZlZjMtNWUzOS00YjM5LWE4OTctMDMxZWQ0NDdhMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupDCJffK6u2ZirhrKRibstK/7RLUN5Ny2HWz T/DQmt1NVtXteSUZhLdXTG53Z5KDK1RXIuu53whaQ5Lx/uMNuP865P8tIpr66jFE Uh4hDxjeQ/lpONztorz76H7x+hmu3FyZsz6NM9Tkdi3ZBxwfrfvlb1o9Y0IijAy1 0Nsag1H/3p9/ylLvukKauIOtCp/c+UxquOehIPmJ2SIA/qaAryqu5c29knafm9/9 /qqYBhn8To+ZFULN17/rd8lZdZ929T9GjUgu2Qvsd28o6TvcBLAUBrlJrEQewGlD sqdIG19QLhiGz2wXgs2VrumO5VgNprxWxlPWjwJo26vgRi9LKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZAxpCQFR6/JiHu8oIPDOX6YB6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNGY4N2IyOGUtYjA3My0z MTY1LTkzZGEtZWRiZjEzZWYwYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/HTxB3F77ekqUaIYQzTsBhCB+bmyDmCYuzF+z/Ra+Oqe93JBCqNU2y PfcytZWAHpXD4/4RVDLR1aMBA6IpsH+R4JJdnba2NdQqjyZB1p4qFk1I7gCJcg6Q ji6wS+O2NiGKRIa+qUar0q34qdkb0bUpjoAkGAFvVyjOovqTjwhIWowZ8IAuLVB9 /rKkpVVOvzSR9xEFS9bMCKyTTHkpfj4gBNQuU6pwu9lsR2VfsgbTnYklqEQJ2m3W 0eG6sfboNvS4imxEPOnMNxxoGkkDjgza+TJsDV6+AiXVdUwpUGlYhxJ7mZiI0OaX BPa10bC0W/u+30qKBE9vKiO8fNZ6jjg= -----END CERTIFICATE-----Generated at Wed Oct 28 11:42:26 2026 by rpki-client