$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa File: a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa (raw, json) Hash identifier: izMJtC2zMlNWa1jqZ/qMdZbtHGAcJ86uukb6RfC/o8s= Subject key identifier: B8:CA:F0:50:D1:FD:96:2A:F0:C5:F1:A1:A3:BB:93:6D:0E:C4:E4:96 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7E7DC3083F38A0F46FA2F400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 203 IP address blocks: 20.134.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c3:08:3f:38:a0:f4:6f:a2:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=aad7f430-ebe2-454d-846a-cd1842e47f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:42:37:dd:d9:ad:b2:97:60:8c:2e:1a:5f:d4: 17:42:92:9f:ae:b6:f9:86:a7:a7:e0:c2:c5:62:43: 5f:0b:cc:cf:6e:b5:74:f3:41:78:11:1e:aa:02:b3: 94:9f:37:a2:8d:9a:71:b8:0e:3e:f0:08:66:81:90: 1b:c6:34:07:1e:ef:9c:43:8c:de:2d:59:70:50:10: 9c:b4:c2:5f:67:22:24:f2:d4:04:a2:9a:ce:c5:a1: b6:ca:7e:16:5d:9b:8c:a7:02:c6:2a:5a:2a:a6:1d: 56:a0:09:0e:bd:de:ef:ff:59:04:83:23:0f:e4:72: bf:52:e1:4c:80:12:ea:cc:6a:4a:fc:e2:39:c2:3b: 66:90:cb:a6:2c:b8:5f:d5:b1:46:a9:2a:31:ba:9b: 8c:5a:58:9f:fb:69:cb:f7:8c:07:f6:70:f7:02:29: fb:5c:39:94:eb:17:cd:ab:65:7a:a2:df:21:0d:45: 0e:80:7f:be:74:a3:5a:78:9c:73:7b:d5:41:e7:91: 08:e9:3b:92:00:bf:53:a6:77:e1:d7:6e:a4:87:8a: cb:da:a8:3a:21:bf:c9:fc:05:2e:f9:96:01:2b:2c: f7:ef:34:03:e1:c4:3d:84:e8:ef:92:08:0b:9d:b5: 4d:2c:ed:a6:76:3b:7b:60:ff:b7:57:77:17:8b:64: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CA:F0:50:D1:FD:96:2A:F0:C5:F1:A1:A3:BB:93:6D:0E:C4:E4:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:38:a1:13:4b:05:c1:97:b3:2d:77:a7:f8:c2:99:25:8a:f2: f7:02:dd:5d:53:62:53:ea:34:0c:01:a0:2e:ca:3e:ea:2b:f7: bb:83:f6:fe:76:37:b9:fd:0a:73:0f:e3:04:2a:b8:ee:7a:a5: 17:c7:0e:cb:73:05:5c:36:f6:88:12:36:91:7d:a9:b8:a9:93: cd:7e:3e:72:8d:5c:b6:47:4d:55:c9:7d:bb:bc:41:41:19:1a: ad:d7:4a:47:09:73:9b:f6:02:7c:44:51:ab:ce:2c:60:4a:9a: 04:3d:85:6b:98:b1:83:f9:69:44:c1:80:e4:95:bb:90:c1:17: 59:69:b9:5e:c5:6c:5c:0a:57:74:c5:d1:fd:64:fa:b7:97:aa: ca:42:ad:03:68:ee:ac:cb:33:48:dc:a6:05:6f:54:64:0f:bf: 7b:5e:70:77:2b:37:31:ec:ce:66:3d:c1:de:76:05:e1:79:87: 55:cc:3b:41:1f:10:af:f9:f2:59:ed:fb:3c:f5:71:2b:6d:5b: 8a:37:b5:c9:18:e3:83:ba:35:d9:9c:52:d5:4c:56:48:41:13: 8d:48:f7:c4:59:3e:17:c4:a0:39:3d:1b:f4:f7:56:9c:3b:d8: d2:22:fc:0c:c0:01:7b:47:46:e5:a4:af:2b:96:65:a8:de:31: d5:d8:20:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcMIPzig9G+i9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk YWFkN2Y0MzAtZWJlMi00NTRkLTg0NmEtY2QxODQyZTQ3ZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEI33dmtspdgjC4aX9QXQpKfrrb5hqen4MLF YkNfC8zPbrV080F4ER6qArOUnzeijZpxuA4+8AhmgZAbxjQHHu+cQ4zeLVlwUBCc tMJfZyIk8tQEoprOxaG2yn4WXZuMpwLGKloqph1WoAkOvd7v/1kEgyMP5HK/UuFM gBLqzGpK/OI5wjtmkMumLLhf1bFGqSoxupuMWlif+2nL94wH9nD3Ain7XDmU6xfN q2V6ot8hDUUOgH++dKNaeJxze9VB55EI6TuSAL9Tpnfh126kh4rL2qg6Ib/J/AUu +ZYBKyz37zQD4cQ9hOjvkggLnbVNLO2mdjt7YP+3V3cXi2Rc+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjK8FDR/ZYq8MXxoaO7k20OxOSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTUxYzFiNzEtMmRhMi0z YTlmLWE3MWYtZTE1YzkzNGNjN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY4oRNLBcGXsy13p/jCmSWK8vcC3V1TYlPqNAwBoC7KPuor97uD9v52 N7n9CnMP4wQquO56pRfHDstzBVw29ogSNpF9qbipk81+PnKNXLZHTVXJfbu8QUEZ Gq3XSkcJc5v2AnxEUavOLGBKmgQ9hWuYsYP5aUTBgOSVu5DBF1lpuV7FbFwKV3TF 0f1k+reXqspCrQNo7qzLM0jcpgVvVGQPv3tecHcrNzHszmY9wd52BeF5h1XMO0Ef EK/58lnt+zz1cSttW4o3tckY44O6NdmcUtVMVkhBE41I98RZPhfEoDk9G/T3Vpw7 2NIi/AzAAXtHRuWkryuWZajeMdXYIKI= -----END CERTIFICATE-----Generated at Tue Oct 27 23:29:51 2026 by rpki-client