$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa File: 7391e80e-1609-311c-b39c-9832fb7cfa4f.roa (raw, json) Hash identifier: 3WsfNKTDGrC2uSOzyvgsdvRMrCBdZ1O8wSZpCl3C80s= Subject key identifier: E4:24:CD:EE:C6:12:AF:32:21:A6:8E:81:59:55:58:19:68:CE:14:EE Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62AF1BB0701390A13BDC80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 3360 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:af:1b:b0:70:13:90:a1:3b:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=3fdbbd4f-6536-4c34-87dd-854c360aaf9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:de:b8:cc:ac:8d:d7:7c:8b:21:cc:d4:8d:55: 0e:b7:f6:72:e9:76:45:23:a1:6e:40:34:25:46:ad: 6a:33:cd:61:c0:25:d7:f9:d1:98:1b:b0:2f:80:4d: 77:f9:71:3f:16:2c:7b:8b:6e:a8:7c:1d:cc:ce:c9: 1d:b2:1e:a2:ca:8c:57:7e:bd:42:78:f6:ef:bd:62: 0b:d1:07:47:7f:2f:29:4c:81:dd:96:b8:60:fc:fa: 65:ab:4b:13:1b:8c:d6:25:72:0d:9f:b2:60:be:37: b0:4a:79:01:c5:7e:98:bd:7b:03:85:0e:41:45:92: 24:1d:20:48:06:52:01:75:d7:c6:30:de:e9:9f:bb: 76:83:86:f6:c0:c4:d2:1a:ee:8f:50:ed:3f:13:ba: 9e:4b:b1:09:ea:5a:a6:22:e2:58:6a:4a:93:76:cf: 8e:53:c7:71:41:9a:23:93:10:0a:15:71:a8:5b:ce: 83:2d:9c:2b:3f:01:47:ea:e1:f0:58:de:8a:76:31: 7d:34:10:0b:69:44:2a:86:ff:58:d2:52:5a:d4:af: 12:a1:85:9d:51:db:99:29:66:d7:2b:55:a5:bf:cb: 36:21:6a:68:fd:82:cd:92:f6:12:e7:f9:e7:14:f9: c6:9c:bd:b1:04:6f:5a:cc:40:38:96:95:4f:59:de: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:24:CD:EE:C6:12:AF:32:21:A6:8E:81:59:55:58:19:68:CE:14:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:67:52:02:78:b0:50:46:33:8f:2c:b4:f5:70:31:d8:10:11: 47:bc:f9:18:0f:26:d7:ad:62:c3:f1:c6:70:a8:70:b5:b6:37: 7e:56:eb:dc:78:75:81:be:bb:38:7e:eb:d3:ed:a4:20:cd:50: 03:0a:cd:72:f2:2b:58:26:21:d8:ec:71:a5:d3:35:cd:9f:4c: 51:fb:cd:3c:55:1d:f0:69:cd:ec:54:e4:9a:cf:04:c5:1d:9f: 84:25:70:c4:37:7b:17:74:13:c8:f8:94:bc:2c:33:53:b4:10: 1a:8c:30:69:ae:00:7f:26:e8:d1:dd:de:87:ae:ed:a0:11:f7: 1a:16:5d:89:ac:81:47:7b:f8:67:53:db:12:2c:5d:9c:d0:d5: 2a:23:8c:8c:b1:99:2a:bb:b5:46:73:4f:93:d7:96:75:40:6f: f9:9a:72:6f:df:37:92:49:30:fa:b9:d8:2a:ac:a1:4a:9d:1b: a6:ce:9f:83:1e:a3:41:29:eb:5d:e4:24:56:9c:73:4b:f9:88: 9b:d7:c1:dd:8d:49:a7:b3:2c:89:7f:4c:e4:b1:d7:b2:8e:5d: 9a:f2:5b:d9:5e:eb:18:76:23:95:09:50:9c:d3:a9:bc:c9:bc: ec:89:be:2b:ff:bc:0b:4b:dd:a8:8e:62:6b:25:fd:c3:2a:15: d2:99:24:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYq8bsHATkKE73IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk M2ZkYmJkNGYtNjUzNi00YzM0LTg3ZGQtODU0YzM2MGFhZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN64zKyN13yLIczUjVUOt/Zy6XZFI6FuQDQl Rq1qM81hwCXX+dGYG7AvgE13+XE/Fix7i26ofB3Mzskdsh6iyoxXfr1CePbvvWIL 0QdHfy8pTIHdlrhg/Pplq0sTG4zWJXINn7JgvjewSnkBxX6YvXsDhQ5BRZIkHSBI BlIBddfGMN7pn7t2g4b2wMTSGu6PUO0/E7qeS7EJ6lqmIuJYakqTds+OU8dxQZoj kxAKFXGoW86DLZwrPwFH6uHwWN6KdjF9NBALaUQqhv9Y0lJa1K8SoYWdUduZKWbX K1Wlv8s2IWpo/YLNkvYS5/nnFPnGnL2xBG9azEA4lpVPWd7jrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQkze7GEq8yIaaOgVlVWBlozhTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzM5MWU4MGUtMTYwOS0z MTFjLWIzOWMtOTgzMmZiN2NmYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdnUgJ4sFBGM48stPVwMdgQEUe8+RgPJtetYsPxxnCocLW2N35W69x4 dYG+uzh+69PtpCDNUAMKzXLyK1gmIdjscaXTNc2fTFH7zTxVHfBpzexU5JrPBMUd n4QlcMQ3exd0E8j4lLwsM1O0EBqMMGmuAH8m6NHd3oeu7aAR9xoWXYmsgUd7+GdT 2xIsXZzQ1SojjIyxmSq7tUZzT5PXlnVAb/macm/fN5JJMPq52CqsoUqdG6bOn4Me o0Ep613kJFacc0v5iJvXwd2NSaezLIl/TOSx17KOXZryW9le6xh2I5UJUJzTqbzJ vOyJviv/vAtL3aiOYmsl/cMqFdKZJOM= -----END CERTIFICATE-----Generated at Sat Oct 10 11:52:05 2026 by rpki-client