$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa File: 5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa (raw, json) Hash identifier: XrRmSxT94lXb61txSECPEH1w+mH3wIjkUYlotbiIIeU= Subject key identifier: 7E:AC:7F:C5:39:D0:70:E6:4E:A6:B3:10:A5:1A:B8:35:2F:97:7F:5A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EAFE70980EF7B45EE68D5DB00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 203 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:09:80:ef:7b:45:ee:68:d5:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=c54b897e-ee96-42f1-a9a8-74d233d9b158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:e3:7b:ef:cc:46:3c:64:71:a0:d3:4e:51: 99:f4:de:87:ac:93:26:bf:37:47:6e:43:25:6b:57: 45:ef:20:0c:39:96:af:c6:10:65:77:97:53:d8:27: 7d:a0:08:fa:c4:9c:56:e6:7c:bd:45:50:18:9d:14: 87:04:f0:b8:06:e3:67:2d:18:6f:85:b3:a1:f3:4a: bc:73:ea:88:39:4d:2f:6e:3d:8f:0b:62:9b:ce:44: 40:b8:6e:44:b3:b2:3f:8e:50:78:20:9d:61:1a:b7: ce:cf:ff:de:a0:12:c2:96:7d:35:a1:dd:14:67:e7: 09:2a:47:07:63:4e:f1:0e:3b:2b:e4:c6:02:2f:17: 64:80:c3:63:19:95:a4:5e:4d:4f:81:2c:87:2f:09: f3:70:df:04:1d:9a:2a:be:d0:fa:39:42:51:44:57: ed:d6:67:28:a4:63:04:ca:79:01:cd:0c:8c:00:31: f1:b5:85:de:42:eb:4b:24:4b:aa:48:21:e5:14:d1: 5d:f1:37:11:f0:19:5c:9f:47:56:a9:a5:7b:42:e6: 49:cf:34:af:93:ce:d9:17:36:fd:69:b9:13:d5:4c: bd:92:7a:8c:43:41:5a:af:ad:eb:e9:f4:6a:30:1b: 0f:e6:58:09:42:fb:4d:8b:9d:2f:88:91:61:e2:56: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AC:7F:C5:39:D0:70:E6:4E:A6:B3:10:A5:1A:B8:35:2F:97:7F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1a:4d:56:f8:54:3d:86:b5:c2:b5:2d:b1:cc:21:cb:6b:f5: 6d:90:7b:e1:f4:64:7c:06:c3:7b:af:6d:56:f0:f7:58:41:25: b6:e8:3f:af:b9:ef:15:fd:0a:04:58:9e:13:53:0b:9f:a6:0b: 16:40:69:c3:5e:51:12:76:02:4f:a9:ba:dc:f9:47:0b:a2:98: 47:91:52:c8:b7:86:6e:a6:16:1f:b0:3f:eb:37:e4:c8:bd:94: 37:9c:72:bb:53:59:4c:7e:04:f5:23:8d:22:41:61:2f:db:61: 1f:40:6c:4a:dc:c8:58:24:0a:a7:e0:39:26:e5:df:f7:73:78: 06:4a:6c:f3:9d:18:7d:86:4d:36:e3:8b:bb:e4:58:8f:fe:93: 53:d1:03:ad:0b:cc:04:f0:ac:c7:4a:06:d7:6c:02:40:ec:0b: 98:71:7e:ca:55:83:3f:13:fc:7d:aa:8e:57:f1:ed:c3:6e:26: 0c:77:2f:e5:37:1d:6c:1b:5d:bc:a0:c7:cf:91:eb:f1:bc:37: 66:87:df:3e:c2:0c:be:4b:bb:36:bb:3c:e2:13:c7:8d:db:87: 88:d6:bd:d6:dd:ca:47:28:00:dc:35:dc:9b:a7:47:de:77:d6: 66:a3:f3:cd:20:b6:d6:05:52:82:29:46:3c:76:b5:d8:ff:39: 0a:30:05:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5wmA73tF7mjV2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk YzU0Yjg5N2UtZWU5Ni00MmYxLWE5YTgtNzRkMjMzZDliMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdPje+/MRjxkcaDTTlGZ9N6HrJMmvzdHbkMl a1dF7yAMOZavxhBld5dT2Cd9oAj6xJxW5ny9RVAYnRSHBPC4BuNnLRhvhbOh80q8 c+qIOU0vbj2PC2KbzkRAuG5Es7I/jlB4IJ1hGrfOz//eoBLCln01od0UZ+cJKkcH Y07xDjsr5MYCLxdkgMNjGZWkXk1PgSyHLwnzcN8EHZoqvtD6OUJRRFft1mcopGME ynkBzQyMADHxtYXeQutLJEuqSCHlFNFd8TcR8Blcn0dWqaV7QuZJzzSvk87ZFzb9 abkT1Uy9knqMQ0Far63r6fRqMBsP5lgJQvtNi50viJFh4lYexwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6sf8U50HDmTqazEKUauDUvl39aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWEyYTZkMzEtOGNkMC0z NTIxLWJlYjEtZjY5YzA0NmNiMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4aTVb4VD2GtcK1LbHMIctr9W2Qe+H0ZHwGw3uvbVbw91hBJbboP6+5 7xX9CgRYnhNTC5+mCxZAacNeURJ2Ak+putz5RwuimEeRUsi3hm6mFh+wP+s35Mi9 lDeccrtTWUx+BPUjjSJBYS/bYR9AbErcyFgkCqfgOSbl3/dzeAZKbPOdGH2GTTbj i7vkWI/+k1PRA60LzATwrMdKBtdsAkDsC5hxfspVgz8T/H2qjlfx7cNuJgx3L+U3 HWwbXbygx8+R6/G8N2aH3z7CDL5Luza7POITx43bh4jWvdbdykcoANw13JunR953 1maj880gttYFUoIpRjx2tdj/OQowBQQ= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:34 2026 by rpki-client