$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d4fd0cc-a059-3f38-8414-67b2197b7505.roa File: 9d4fd0cc-a059-3f38-8414-67b2197b7505.roa (raw, json) Hash identifier: PgebBvQX5xUFy4/VHOuDaZR6fJuxRt7bfJV0wPPnzes= Subject key identifier: 32:74:31:DD:D9:85:7D:7C:26:7A:0B:A6:B3:2D:FB:3C:FE:B5:07:08 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F093CF0E34A161D4528091F80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d4fd0cc-a059-3f38-8414-67b2197b7505.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.137.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f0:e3:4a:16:1d:45:28:09:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=8e4ac214-3ab5-438f-9643-a167741bb399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fc:e6:ce:fc:7d:b3:45:ab:ad:69:9e:d8:33: 1e:cb:2b:d5:8c:63:e8:aa:ad:94:cc:11:d3:51:58: de:71:e5:d5:e1:90:5b:61:94:b2:e7:75:fb:65:50: 25:1f:27:39:08:56:36:97:55:31:7e:bc:65:e8:04: 48:57:4c:23:77:8f:d0:be:3b:6b:5e:a5:f8:4b:e1: 2d:33:4b:df:39:68:cb:74:cb:f2:f0:6e:96:98:5f: 54:65:a9:83:e9:d8:88:2d:fb:8d:b2:a9:65:4c:da: 51:d6:49:76:53:ec:54:4d:82:c1:2a:49:c4:f5:6e: 50:02:af:f2:d5:39:ef:e4:af:92:d9:89:96:42:37: 8b:5e:0d:b7:28:d0:3f:ce:73:2b:04:a9:9a:76:9d: 2c:98:ab:67:46:d6:91:ab:c5:97:ed:4c:f6:aa:01: 55:98:60:57:e0:30:6a:a4:53:8e:c4:c3:72:1c:bc: 07:c3:c9:c3:90:88:6f:b2:17:ee:cc:1a:86:4b:3f: aa:ef:34:dd:81:fb:64:f5:b6:1f:6d:e8:7e:31:3b: da:28:fb:57:58:d5:33:19:99:ef:40:28:55:50:cd: 08:d0:27:70:1e:81:d5:ce:2a:0b:5e:70:4a:82:2d: 20:c0:27:ad:e4:db:c6:ad:99:dc:88:ab:c2:45:04: 51:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:74:31:DD:D9:85:7D:7C:26:7A:0B:A6:B3:2D:FB:3C:FE:B5:07:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d4fd0cc-a059-3f38-8414-67b2197b7505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b3:cd:01:7a:da:31:b3:41:27:e1:91:54:2e:c9:7d:6b:cb: 2d:2f:05:d6:df:dd:1d:fd:cb:e8:e6:a2:0f:4d:da:4a:5d:9d: d3:b0:ff:eb:56:13:ff:64:b3:2c:79:3f:51:92:fd:03:d0:ec: e5:65:7e:21:70:85:4e:a1:fc:55:9f:1f:24:d4:b2:0e:57:c5: 65:f4:5b:e0:76:95:58:96:64:3b:06:71:0c:a0:ba:73:4c:69: ac:cb:10:7a:7d:fa:9c:df:f6:73:63:82:00:a5:87:c1:ca:4d: 6f:ad:51:c2:11:33:ef:15:5f:cc:d9:c3:0a:04:55:61:68:4a: 23:06:dd:c5:d5:3e:32:d0:fd:05:af:cb:3d:1b:a5:ba:53:16: e7:e2:e3:1f:7e:7a:d7:70:90:a1:1e:47:6d:cc:7c:d9:a6:e6: d0:b9:cd:f5:5f:5c:53:86:60:c7:22:7d:26:8c:5d:e8:38:25: 8f:a4:9c:52:82:ee:fe:df:e8:19:64:00:4b:bd:9e:5f:70:df: 65:58:0e:f8:0f:9c:5c:25:33:15:c5:5c:8d:fd:25:db:55:b2: d8:e2:ac:81:87:67:3b:ed:4f:3f:72:54:bd:61:68:4f:34:7b: 46:d8:83:62:85:7c:3a:51:2e:c3:07:40:6a:d3:41:14:b1:43: eb:61:2d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPDjShYdRSgJH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk OGU0YWMyMTQtM2FiNS00MzhmLTk2NDMtYTE2Nzc0MWJiMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvzmzvx9s0WrrWme2DMeyyvVjGPoqq2UzBHT UVjeceXV4ZBbYZSy53X7ZVAlHyc5CFY2l1Uxfrxl6ARIV0wjd4/QvjtrXqX4S+Et M0vfOWjLdMvy8G6WmF9UZamD6diILfuNsqllTNpR1kl2U+xUTYLBKknE9W5QAq/y 1Tnv5K+S2YmWQjeLXg23KNA/znMrBKmadp0smKtnRtaRq8WX7Uz2qgFVmGBX4DBq pFOOxMNyHLwHw8nDkIhvshfuzBqGSz+q7zTdgftk9bYfbeh+MTvaKPtXWNUzGZnv QChVUM0I0CdwHoHVzioLXnBKgi0gwCet5NvGrZnciKvCRQRRMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ0Md3ZhX18JnoLprMt+zz+tQcIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWQ0ZmQwY2MtYTA1OS0z ZjM4LTg0MTQtNjdiMjE5N2I3NTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyzzQF62jGzQSfhkVQuyX1ryy0vBdbf3R39y+jmog9N2kpdndOw/+tW E/9ksyx5P1GS/QPQ7OVlfiFwhU6h/FWfHyTUsg5XxWX0W+B2lViWZDsGcQygunNM aazLEHp9+pzf9nNjggClh8HKTW+tUcIRM+8VX8zZwwoEVWFoSiMG3cXVPjLQ/QWv yz0bpbpTFufi4x9+etdwkKEeR23MfNmm5tC5zfVfXFOGYMcifSaMXeg4JY+knFKC 7v7f6BlkAEu9nl9w32VYDvgPnFwlMxXFXI39JdtVstjirIGHZzvtTz9yVL1haE80 e0bYg2KFfDpRLsMHQGrTQRSxQ+thLTc= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:48 2026 by rpki-client