$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa File: 81b11565-f8a6-38ca-8987-5a25512a7a32.roa (raw, json) Hash identifier: G7J0pdMsFDSMvTKq7W5BegO+qqy3FbSgiIy6mQqofnA= Subject key identifier: 97:5B:C6:54:38:F9:15:F9:90:30:14:83:E0:A5:54:6A:5F:41:0F:C6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F3E47ED21E7A88541D1444A00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 3356 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ed:21:e7:a8:85:41:d1:44:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=532d581d-6249-4a57-965e-bf116e5aefb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:57:6a:62:ef:f2:a8:7a:66:4e:9a:f1:9b: f6:5d:35:9b:c3:7e:23:1f:cd:fe:0c:80:52:09:9f: b0:55:64:53:a2:54:02:e3:9e:02:f9:06:50:17:40: bb:1b:00:44:f5:1a:d4:a4:0b:a0:e8:38:db:d2:51: 83:06:f0:97:35:c2:c0:bc:c8:7d:95:69:a7:fc:dd: 5a:c0:fe:8b:5c:c9:80:48:cb:74:3b:82:0a:80:ac: 8c:2e:f3:b8:94:37:42:88:eb:80:35:d2:00:54:a0: f1:6e:43:01:2a:9c:e7:69:02:fe:0c:1a:97:79:d6: 90:40:81:da:26:3f:75:96:b0:c7:ec:57:73:3e:d2: 83:1c:74:30:5b:66:76:bb:75:e1:a7:15:1b:ed:94: 52:17:2c:bb:c3:55:20:62:44:da:77:62:c2:37:8a: f8:43:69:21:20:ea:10:e8:d5:85:f3:a0:ea:62:fa: 90:5f:de:e3:ca:94:b5:6c:c1:75:e7:0c:10:88:9d: f3:d0:5d:a9:47:be:43:89:d3:5b:9a:30:b2:ca:68: ab:d4:65:d7:ae:76:38:87:65:77:63:1f:c9:68:e8: 4b:0c:17:58:7b:24:e7:81:52:f2:59:b8:09:e9:20: a3:68:77:29:2e:05:82:3a:ca:82:25:07:bc:b7:6d: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5B:C6:54:38:F9:15:F9:90:30:14:83:E0:A5:54:6A:5F:41:0F:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a2:44:c2:34:09:f1:ee:e0:fd:dd:a9:a5:79:c9:ff:23:3c: 1e:bd:72:23:51:78:3c:2b:59:4e:27:a5:1b:22:85:40:de:95: 9f:a3:e9:29:2c:57:55:ed:38:39:d3:32:f7:ba:e1:21:96:2e: 7c:a4:89:fe:c0:c9:12:2f:ef:54:64:d9:8c:ff:92:22:d4:90: 40:2f:2b:75:37:0f:5e:09:78:50:9e:06:1a:34:c3:8d:02:20: 6a:a5:65:bc:0e:8b:96:10:5f:eb:e2:df:0f:04:05:2f:4c:b1: 1a:cc:08:31:de:a5:da:fe:db:1a:84:51:0f:08:ea:c3:90:75: ff:8a:cd:60:3c:9f:02:51:01:36:de:55:9f:c1:44:b7:12:d9: 6c:b7:2d:cf:91:32:de:0b:c1:c7:b4:e1:65:e5:52:7e:5a:99: 13:f4:0d:91:84:1a:28:b2:75:38:08:3a:16:fc:8e:60:3e:54: 1c:7d:2f:2f:48:58:3b:6a:70:63:ad:87:84:35:57:7e:ec:d9: 19:83:8e:9c:80:f5:b5:e8:48:55:f4:df:ab:0f:b8:72:89:15: 18:2b:be:43:da:b6:95:11:24:7c:a8:fc:e8:e5:40:c2:21:e4: 11:a3:4d:68:ac:33:cd:07:da:cb:65:87:4e:f6:2e:c3:f4:72: 92:5f:9c:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+0h56iFQdFESgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NTMyZDU4MWQtNjI0OS00YTU3LTk2NWUtYmYxMTZlNWFlZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCtXamLv8qh6Zk6a8Zv2XTWbw34jH83+DIBS CZ+wVWRTolQC454C+QZQF0C7GwBE9RrUpAug6Djb0lGDBvCXNcLAvMh9lWmn/N1a wP6LXMmASMt0O4IKgKyMLvO4lDdCiOuANdIAVKDxbkMBKpznaQL+DBqXedaQQIHa Jj91lrDH7FdzPtKDHHQwW2Z2u3XhpxUb7ZRSFyy7w1UgYkTad2LCN4r4Q2khIOoQ 6NWF86DqYvqQX97jypS1bMF15wwQiJ3z0F2pR75DidNbmjCyymir1GXXrnY4h2V3 Yx/JaOhLDBdYeyTngVLyWbgJ6SCjaHcpLgWCOsqCJQe8t20fcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdbxlQ4+RX5kDAUg+ClVGpfQQ/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODFiMTE1NjUtZjhhNi0z OGNhLTg5ODctNWEyNTUxMmE3YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaiRMI0CfHu4P3dqaV5yf8jPB69ciNReDwrWU4npRsihUDelZ+j6Sks V1XtODnTMve64SGWLnykif7AyRIv71Rk2Yz/kiLUkEAvK3U3D14JeFCeBho0w40C IGqlZbwOi5YQX+vi3w8EBS9MsRrMCDHepdr+2xqEUQ8I6sOQdf+KzWA8nwJRATbe VZ/BRLcS2Wy3Lc+RMt4Lwce04WXlUn5amRP0DZGEGiiydTgIOhb8jmA+VBx9Ly9I WDtqcGOth4Q1V37s2RmDjpyA9bXoSFX036sPuHKJFRgrvkPatpURJHyo/OjlQMIh 5BGjTWisM80H2stlh072LsP0cpJfnGg= -----END CERTIFICATE-----Generated at Sun Oct 11 09:04:00 2026 by rpki-client