$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa File: 74c04573-b423-34d6-a92c-a33a7e85298a.roa (raw, json) Hash identifier: QQ67Cvh//af4QCxhj8oih0US3lkrGdN24ZSBrEnDcUo= Subject key identifier: D8:D6:C9:8E:04:75:11:29:4F:39:B8:53:5F:EF:AF:DF:41:8D:55:88 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7E7DC374AB1D68B99A924100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 203 IP address blocks: 20.139.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c3:74:ab:1d:68:b9:9a:92:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=6ff638c0-6b74-4de7-a8f4-6dad20c0c3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6e:d1:f5:b0:fb:09:4b:cc:86:94:87:6c:a7: 41:f5:5c:6b:ad:ed:01:a1:be:bc:20:28:26:82:82: 72:ee:08:84:c8:85:61:06:41:05:4a:cb:7f:d7:19: 4f:4e:12:91:80:e1:99:56:6b:75:80:d7:73:02:b9: 30:d5:c5:04:33:3b:d5:45:4d:76:58:6f:99:42:2a: 87:39:c4:1a:fa:85:a7:48:fd:13:68:71:6c:15:35: 54:2a:b8:07:b8:bf:14:bd:6f:c4:f2:79:26:1f:c1: ce:31:d2:1d:12:5b:ae:e7:6e:34:83:be:75:4a:9b: ef:37:26:45:4e:16:b4:c5:63:1f:11:f2:6f:b6:eb: 34:f6:4a:4a:ef:71:8f:3e:f2:bc:94:a7:f4:df:bf: f1:6e:06:3b:80:0c:bc:b6:33:b0:68:bb:33:65:74: 6f:f3:42:d7:05:2a:02:16:00:5e:16:e8:2e:09:ea: 52:be:06:ee:94:39:04:bc:42:5a:22:e4:1f:d0:9a: 31:0b:ce:2d:20:b0:31:a0:5f:cc:e9:81:99:d2:04: 3e:b0:e0:64:a9:c2:96:cf:98:37:d6:b2:28:92:44: 20:cd:cf:0f:e0:d7:81:7e:59:1a:0f:cd:53:13:26: b8:a6:ac:42:b0:d2:06:c3:b8:b5:42:7e:29:54:80: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D6:C9:8E:04:75:11:29:4F:39:B8:53:5F:EF:AF:DF:41:8D:55:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d8:52:00:7a:98:e2:4e:c7:73:e3:7b:a2:3a:49:e7:c8:4f: 35:e0:f0:cf:90:b1:e8:9c:c3:04:c1:63:ce:89:44:b4:60:c1: bf:a1:15:fb:f6:b3:e1:82:09:cb:71:b4:0d:97:ce:2a:2d:18: 8e:8f:d9:0e:24:4f:e4:7d:cf:28:f3:f1:68:78:ef:2f:64:3b: ac:b0:ca:88:a0:ac:eb:c0:69:0f:38:7b:1d:0d:31:11:d4:f2: a8:82:a6:e3:ee:26:c6:71:00:bc:6a:80:2b:5f:b7:50:0d:6d: f5:f1:5f:56:d6:20:23:3b:ba:d2:66:97:b6:14:a3:74:79:8f: 00:35:56:2f:04:06:f5:bd:84:88:76:bb:f5:38:ef:4e:36:c9: bf:9c:fb:72:19:3f:7e:5c:cf:05:9f:29:20:3f:59:04:34:fd: 0e:2a:e8:9f:e8:f2:9f:20:f6:09:3a:e7:09:46:f2:0a:e7:ef: 60:7e:8d:4e:a2:48:91:34:26:a8:79:22:92:e2:52:b8:84:42: dc:0c:6b:33:cc:e2:07:15:1e:9a:07:41:d9:d4:1b:dc:96:ee: 32:39:8e:57:cb:8a:8d:55:a7:1e:c5:8d:f0:2b:ab:60:eb:e4: ae:83:60:7b:e2:87:dd:b8:e1:97:d3:f6:c1:52:13:fb:eb:a8: 4e:e0:9e:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcN0qx1ouZqSQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NmZmNjM4YzAtNmI3NC00ZGU3LWE4ZjQtNmRhZDIwYzBjM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm7R9bD7CUvMhpSHbKdB9Vxrre0Bob68ICgm goJy7giEyIVhBkEFSst/1xlPThKRgOGZVmt1gNdzArkw1cUEMzvVRU12WG+ZQiqH OcQa+oWnSP0TaHFsFTVUKrgHuL8UvW/E8nkmH8HOMdIdEluu5240g751SpvvNyZF Tha0xWMfEfJvtus09kpK73GPPvK8lKf037/xbgY7gAy8tjOwaLszZXRv80LXBSoC FgBeFuguCepSvgbulDkEvEJaIuQf0JoxC84tILAxoF/M6YGZ0gQ+sOBkqcKWz5g3 1rIokkQgzc8P4NeBflkaD81TEya4pqxCsNIGw7i1Qn4pVIB82wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjWyY4EdREpTzm4U1/vr99BjVWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzRjMDQ1NzMtYjQyMy0z NGQ2LWE5MmMtYTMzYTdlODUyOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7YUgB6mOJOx3Pje6I6SefITzXg8M+QseicwwTBY86JRLRgwb+hFfv2 s+GCCctxtA2XziotGI6P2Q4kT+R9zyjz8Wh47y9kO6ywyoigrOvAaQ84ex0NMRHU 8qiCpuPuJsZxALxqgCtft1ANbfXxX1bWICM7utJml7YUo3R5jwA1Vi8EBvW9hIh2 u/U47042yb+c+3IZP35czwWfKSA/WQQ0/Q4q6J/o8p8g9gk65wlG8grn72B+jU6i SJE0Jqh5IpLiUriEQtwMazPM4gcVHpoHQdnUG9yW7jI5jlfLio1Vpx7FjfArq2Dr 5K6DYHvih9244ZfT9sFSE/vrqE7gniY= -----END CERTIFICATE-----Generated at Wed Oct 28 18:34:58 2026 by rpki-client