$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa File: 5d2179de-2db2-31e0-91ae-22d99860f145.roa (raw, json) Hash identifier: xUFMnxsxOyFIDxwebTuzOB6hZ/Vq1ABXXSk96+5VnZc= Subject key identifier: DD:00:CC:AB:CF:F0:FA:59:67:14:A7:92:A9:94:E9:6C:86:8E:E5:D0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62AED5C38A5A786E80E480 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 3360 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ae:d5:c3:8a:5a:78:6e:80:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=f91dfd67-5b08-4bf0-b818-4b5709e88a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d3:f8:7e:2a:32:69:f0:38:98:e3:69:62:c4: 8b:1b:bf:7c:a4:33:ba:81:9f:ae:d8:73:c6:b6:9e: 4d:d7:55:85:da:a4:39:9d:66:bf:df:41:30:03:3f: d3:2d:9a:08:db:5a:9a:65:5d:ba:5c:c3:f2:fe:f4: 63:f3:1e:9d:a9:8c:d8:8d:55:fd:b9:01:2b:0c:17: e2:24:69:69:c6:2a:6d:e2:01:cd:1c:50:91:3c:f6: 87:e1:fc:23:65:96:fd:5c:1a:1e:f1:2a:03:7a:be: 99:fc:34:97:7d:5f:1f:59:b0:d3:c8:a5:98:e5:c5: 0d:9e:5f:27:4c:83:88:8a:45:01:e0:d1:32:bf:89: 9c:1d:b7:2d:0d:a9:b0:6c:1e:f7:15:6d:b6:41:fa: 89:49:f4:94:50:c7:6e:11:e7:2f:c0:c1:56:08:96: 6e:da:9f:cd:86:08:6c:d1:0d:fc:84:70:cd:9a:ab: 6d:f2:3a:bc:4c:62:67:e1:39:3b:be:0c:f2:2d:38: d5:f8:bd:81:3a:d1:31:a1:df:b0:6a:ca:cd:2d:2f: 9e:9f:9a:59:ab:ab:1e:14:c8:1a:df:1a:6b:b3:80: b0:ea:bc:81:da:6d:cb:7c:c6:e4:06:39:f8:a1:66: 35:69:4e:9b:45:54:16:19:69:2c:26:39:fa:a6:73: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:00:CC:AB:CF:F0:FA:59:67:14:A7:92:A9:94:E9:6C:86:8E:E5:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f8:05:ec:25:f9:5c:ab:0d:a3:0b:50:c0:22:19:37:c3:4f: ea:79:36:8b:ed:d8:e0:79:cc:8e:59:71:36:fb:bc:71:ce:25: 0b:36:d8:ec:b2:5c:ac:77:6c:8f:6e:1b:3d:5d:bb:aa:24:6d: 7f:fc:f2:12:b2:37:67:13:cf:5a:a3:b7:5e:2f:e9:f1:b6:3e: 9d:28:2e:28:65:61:82:57:c8:56:3d:b2:c8:6e:82:62:3a:7a: 18:9e:e6:e5:58:93:c2:b7:81:60:f2:db:6b:de:d4:8a:bf:8d: ec:05:87:24:06:50:f9:e6:9a:da:f2:ed:93:de:c0:a9:ed:7b: 9d:cf:e8:7f:e8:8d:05:a8:43:14:77:2b:94:32:6f:0d:54:ec: a3:c8:ef:fa:f2:e8:aa:9b:7e:bb:b4:82:45:c5:f6:54:e8:60: db:99:9d:cf:b1:c4:49:41:6c:af:7f:64:02:1f:05:6c:e5:aa: d1:49:86:03:e3:e4:98:4f:63:3f:b7:91:79:93:d2:a8:96:ad: 16:da:8d:92:06:b0:1a:90:d7:30:65:19:9a:f0:e4:e6:ca:7b: 02:0f:38:9e:b6:af:6a:4d:4f:8a:e8:73:52:98:00:5f:b2:19: aa:f3:40:1a:91:2e:ca:25:ca:53:c9:15:f5:32:a0:dd:9a:f5: 76:38:31:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYq7Vw4paeG6A5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZjkxZGZkNjctNWIwOC00YmYwLWI4MTgtNGI1NzA5ZTg4YTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntP4fioyafA4mONpYsSLG798pDO6gZ+u2HPG tp5N11WF2qQ5nWa/30EwAz/TLZoI21qaZV26XMPy/vRj8x6dqYzYjVX9uQErDBfi JGlpxipt4gHNHFCRPPaH4fwjZZb9XBoe8SoDer6Z/DSXfV8fWbDTyKWY5cUNnl8n TIOIikUB4NEyv4mcHbctDamwbB73FW22QfqJSfSUUMduEecvwMFWCJZu2p/Nhghs 0Q38hHDNmqtt8jq8TGJn4Tk7vgzyLTjV+L2BOtExod+wasrNLS+en5pZq6seFMga 3xprs4Cw6ryB2m3LfMbkBjn4oWY1aU6bRVQWGWksJjn6pnPeKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0AzKvP8PpZZxSnkqmU6WyGjuXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWQyMTc5ZGUtMmRiMi0z MWUwLTkxYWUtMjJkOTk4NjBmMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP4Bewl+VyrDaMLUMAiGTfDT+p5Novt2OB5zI5ZcTb7vHHOJQs22Oyy XKx3bI9uGz1du6okbX/88hKyN2cTz1qjt14v6fG2Pp0oLihlYYJXyFY9sshugmI6 ehie5uVYk8K3gWDy22ve1Iq/jewFhyQGUPnmmtry7ZPewKnte53P6H/ojQWoQxR3 K5Qybw1U7KPI7/ry6Kqbfru0gkXF9lToYNuZnc+xxElBbK9/ZAIfBWzlqtFJhgPj 5JhPYz+3kXmT0qiWrRbajZIGsBqQ1zBlGZrw5ObKewIPOJ62r2pNT4roc1KYAF+y GarzQBqRLsolylPJFfUyoN2a9XY4MSU= -----END CERTIFICATE-----Generated at Sun Oct 11 09:00:56 2026 by rpki-client