$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa File: 66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa (raw, json) Hash identifier: XesqC7v8TC+ZZPlT7ttqh5JdI51e/vkgWKiM+zwq3FY= Subject key identifier: B2:62:F7:57:F1:28:F6:E0:DE:95:61:20:73:5A:53:94:1C:BD:7D:41 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F4975E7EEB5965E3F04429EE0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 20.137.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e7:ee:b5:96:5e:3f:04:42:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=07a022c9-db53-437e-b8a7-09365201a542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c0:6e:db:7b:69:27:fa:b2:cd:87:b0:93:54: 08:0d:92:cd:00:0a:fc:62:b0:5d:94:68:4a:e2:cb: 07:a1:0d:7c:62:a8:a1:88:28:63:4d:71:21:dc:40: 03:a2:28:92:1b:6a:fa:aa:04:92:13:3f:43:41:1a: c4:00:03:53:4f:15:c9:41:55:f4:33:49:48:74:e2: 15:36:e0:5d:3b:85:dd:53:fc:fc:a5:87:5b:47:a5: 88:73:89:09:d2:9f:d9:68:5d:05:e6:b5:03:0d:a0: 2d:0a:04:b7:7c:59:a8:09:51:94:6e:f0:00:ad:68: 72:c3:e7:ca:34:95:27:7f:c1:1f:dc:5a:75:dc:b8: d2:ae:0d:84:d1:aa:ca:04:a6:ab:2d:35:e2:98:c0: cc:0d:8e:aa:f9:82:7f:21:cd:0c:f6:19:98:bf:b7: ee:3f:ea:c3:da:b2:63:b7:90:42:67:c8:46:25:fb: 3c:dd:96:0e:fc:6d:b7:d8:87:de:e0:8c:75:e3:48: 68:e7:3f:bf:e2:cc:a8:5f:f0:bc:ac:bd:1c:1c:61: cf:40:1c:d5:62:6a:69:4c:98:b8:e2:b4:40:67:72: 04:4b:cc:08:77:c1:ca:66:3b:52:f2:1b:db:72:98: 14:d4:a9:7d:ca:88:d4:1f:d3:23:07:7b:51:ce:e7: d6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:62:F7:57:F1:28:F6:E0:DE:95:61:20:73:5A:53:94:1C:BD:7D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b6:2d:db:d1:82:50:cb:fe:cd:75:81:53:f8:b0:63:3a:4d: 93:7e:a6:ef:b7:4f:de:78:7f:37:f2:ad:55:04:f8:bd:8a:c2: 2d:62:2d:82:d9:39:0f:25:6e:02:25:82:19:78:86:7d:e6:9d: 56:ca:99:9b:ca:26:5c:8b:ec:0c:a8:ee:dc:92:26:73:1f:a5: b2:20:95:ce:00:7b:ed:33:c3:fd:4f:ee:32:fb:ac:18:3c:1a: c9:b8:7c:28:bd:26:f7:89:dc:93:a2:4c:d7:69:1a:5b:7e:8b: 7e:80:2f:8b:a4:3d:c5:b2:fd:69:71:e5:a9:ff:8a:7e:24:82: e0:1c:47:95:73:4f:d3:12:b6:69:99:7c:5f:8e:87:85:a3:49: 46:14:9e:e4:de:5f:90:ef:24:31:61:8d:be:f3:2f:10:fe:31: 7a:56:5e:46:fd:28:5f:68:4a:02:1e:44:e5:a8:fa:a4:98:5d: ac:ef:cc:6d:ac:d4:cd:c5:12:b5:99:e6:a4:8e:6c:ab:7e:db: 9e:7e:f1:88:ca:b4:11:66:7a:e3:9b:ec:33:13:97:37:af:4a: b0:59:77:14:c7:29:a8:e8:15:d4:64:4b:8c:4e:be:c9:55:5a: 72:48:cf:bb:01:98:e2:01:32:b3:ab:c3:39:42:7a:29:6f:47: 9d:6b:c8:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdefutZZePwRCnuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDdhMDIyYzktZGI1My00MzdlLWI4YTctMDkzNjUyMDFhNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sBu23tpJ/qyzYewk1QIDZLNAAr8YrBdlGhK 4ssHoQ18YqihiChjTXEh3EADoiiSG2r6qgSSEz9DQRrEAANTTxXJQVX0M0lIdOIV NuBdO4XdU/z8pYdbR6WIc4kJ0p/ZaF0F5rUDDaAtCgS3fFmoCVGUbvAArWhyw+fK NJUnf8Ef3Fp13LjSrg2E0arKBKarLTXimMDMDY6q+YJ/Ic0M9hmYv7fuP+rD2rJj t5BCZ8hGJfs83ZYO/G232Ife4Ix140ho5z+/4syoX/C8rL0cHGHPQBzVYmppTJi4 4rRAZ3IES8wId8HKZjtS8hvbcpgU1Kl9yojUH9MjB3tRzufWawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJi91fxKPbg3pVhIHNaU5QcvX1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjZhM2M5MzQtYThhZS0z OWM2LTllMDctOTU3OTRiNjNiOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFInwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq2LdvRglDL/s11gVP4sGM6TZN+pu+3T954fzfyrVUE+L2Kwi1iLYLZ OQ8lbgIlghl4hn3mnVbKmZvKJlyL7Ayo7tySJnMfpbIglc4Ae+0zw/1P7jL7rBg8 Gsm4fCi9JveJ3JOiTNdpGlt+i36AL4ukPcWy/Wlx5an/in4kguAcR5VzT9MStmmZ fF+Oh4WjSUYUnuTeX5DvJDFhjb7zLxD+MXpWXkb9KF9oSgIeROWo+qSYXazvzG2s 1M3FErWZ5qSObKt+255+8YjKtBFmeuOb7DMTlzevSrBZdxTHKajoFdRkS4xOvslV WnJIz7sBmOIBMrOrwzlCeilvR51ryBI= -----END CERTIFICATE-----Generated at Mon Oct 12 15:57:57 2026 by rpki-client