$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa File: 5237c2a4-4861-320a-8193-cd92a08fc31f.roa (raw, json) Hash identifier: ysbaWBU543puv5ppkyXTNKIzkF0cPx9b7Lj45agt62U= Subject key identifier: 2D:17:F8:D9:AA:6D:D2:F8:C0:A5:9B:B4:D4:DC:FD:0A:65:FC:27:35 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F4976ECD701A4F30227836480 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:ec:d7:01:a4:f3:02:27:83:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4d5a3126-3cb3-456f-8fa0-696287378c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d1:3c:80:4e:4c:c8:4e:86:6a:6b:42:56:a6: ea:75:0f:6f:05:2c:d1:a4:11:43:a6:e8:9b:d6:2e: 06:0e:cd:9a:60:5e:fa:21:10:b2:0c:6a:40:31:15: 9d:b5:fd:56:70:e1:8f:06:b2:a7:5f:aa:ec:b7:1a: f8:d1:07:eb:a2:d8:c8:d3:8d:07:fd:9b:10:ae:5e: ef:96:17:49:aa:a9:95:ea:c8:b2:39:56:9e:b7:07: b0:d4:35:7b:9b:61:2f:c0:c4:bf:b9:30:d5:04:6f: b9:72:92:d3:c3:3f:b5:3c:7d:e6:d7:8c:c0:07:35: f8:3a:89:c7:12:c0:da:d0:80:18:d4:7f:55:f2:e9: 02:57:c2:2a:c3:6c:cd:31:e0:a3:46:ec:6f:8b:b9: ec:d7:97:19:57:ac:28:61:01:24:ed:d2:2f:32:78: 8c:9f:15:d2:7c:38:53:a0:28:ee:3d:97:c2:2e:e5: 18:e5:5f:3b:a5:17:05:51:6c:b6:85:ce:74:14:8d: b6:d3:32:49:07:c4:7b:46:42:99:58:02:d4:be:be: 20:23:eb:b1:b8:69:1a:a9:b3:85:26:8e:fb:38:e2: 7d:ca:da:ec:14:6c:bd:b1:f4:da:41:b4:4d:0b:05: 3a:2d:be:d0:80:0d:75:3a:05:4b:80:9c:65:59:7b: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:17:F8:D9:AA:6D:D2:F8:C0:A5:9B:B4:D4:DC:FD:0A:65:FC:27:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6d:05:a5:95:8b:72:3f:8b:aa:9d:76:73:24:97:78:a0:30: ae:a1:9f:b8:18:d1:03:0b:8d:8b:e4:c0:0a:b1:70:bf:c3:65: f0:41:2a:29:c9:39:d8:07:91:41:23:b0:5f:ac:7f:0d:08:c9: 72:e2:cc:51:55:7d:5c:48:0f:2b:a1:d3:24:ed:28:9f:e0:ae: a3:2e:ed:66:07:4f:0e:1a:c3:69:82:ae:1f:e9:10:fb:4d:c8: a2:31:7d:26:05:9c:d7:4c:e9:e0:4f:f4:5f:39:3a:74:16:a1: 06:63:cc:17:4a:9b:14:11:f6:3a:d9:9e:17:4d:d3:ca:23:1b: 24:13:d9:ce:37:a8:47:67:76:c4:30:70:69:22:cd:89:9e:cf: 06:d5:59:ab:37:a6:db:4d:ee:67:f5:4b:e8:77:f3:85:5c:11: b0:20:45:4f:43:03:49:ef:57:1e:e7:ad:ff:49:ed:49:0b:e8: 32:c9:9e:12:f4:0c:eb:14:fe:4c:fc:e3:ff:50:f4:fa:eb:ef: 77:73:34:61:ce:53:d6:af:a8:f7:29:59:0c:46:e1:24:c4:58: f4:5e:c4:10:f0:97:5f:b6:e9:73:6a:c9:a1:5e:13:66:f5:cc: df:16:bc:61:9f:8c:af:ab:5e:de:4b:53:19:77:96:ec:98:d5: 8c:d9:cb:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JduzXAaTzAieDZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGQ1YTMxMjYtM2NiMy00NTZmLThmYTAtNjk2Mjg3Mzc4Yzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tE8gE5MyE6GamtCVqbqdQ9vBSzRpBFDpuib 1i4GDs2aYF76IRCyDGpAMRWdtf1WcOGPBrKnX6rstxr40QfrotjI040H/ZsQrl7v lhdJqqmV6siyOVaetwew1DV7m2EvwMS/uTDVBG+5cpLTwz+1PH3m14zABzX4OonH EsDa0IAY1H9V8ukCV8Iqw2zNMeCjRuxvi7ns15cZV6woYQEk7dIvMniMnxXSfDhT oCjuPZfCLuUY5V87pRcFUWy2hc50FI220zJJB8R7RkKZWALUvr4gI+uxuGkaqbOF Jo77OOJ9ytrsFGy9sfTaQbRNCwU6Lb7QgA11OgVLgJxlWXvUowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0X+NmqbdL4wKWbtNTc/Qpl/Cc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTIzN2MyYTQtNDg2MS0z MjBhLTgxOTMtY2Q5MmEwOGZjMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAttBaWVi3I/i6qddnMkl3igMK6hn7gY0QMLjYvkwAqxcL/DZfBBKinJ OdgHkUEjsF+sfw0IyXLizFFVfVxIDyuh0yTtKJ/grqMu7WYHTw4aw2mCrh/pEPtN yKIxfSYFnNdM6eBP9F85OnQWoQZjzBdKmxQR9jrZnhdN08ojGyQT2c43qEdndsQw cGkizYmezwbVWas3pttN7mf1S+h384VcEbAgRU9DA0nvVx7nrf9J7UkL6DLJnhL0 DOsU/kz84/9Q9Prr73dzNGHOU9avqPcpWQxG4STEWPRexBDwl1+26XNqyaFeE2b1 zN8WvGGfjK+rXt5LUxl3luyY1YzZy9U= -----END CERTIFICATE-----Generated at Thu Oct 8 10:49:11 2026 by rpki-client