$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa File: b012200c-09b0-31d7-a7d9-1df154b56fae.roa (raw, json) Hash identifier: 6CMj2T8GOEztcvvDIzjevLkE49xmgnSnOPQYvHg1jkw= Subject key identifier: E9:9D:87:7F:4C:C7:50:BF:78:35:EB:7D:02:96:77:4D:F9:35:D9:6B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7E7DC2EEBDCDE773B16A8100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 202 IP address blocks: 20.134.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c2:ee:bd:cd:e7:73:b1:6a:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=76721c8f-c680-4281-98f7-acbcec82eef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:52:7e:6e:47:bb:77:5b:52:ae:f0:e5:44: 24:ee:5e:d3:81:8f:8f:f8:16:d7:7d:52:5e:aa:27: 7d:33:79:3f:17:13:f6:93:d1:a9:6c:7d:8f:f8:9b: 31:ef:b7:ac:b3:c6:14:31:01:c2:d0:50:c6:5a:3b: ab:0a:cf:69:2f:91:73:9d:8e:26:f3:75:82:74:f0: 8a:6c:9f:17:8d:d8:f9:22:04:d8:b2:b5:00:fd:f3: fa:b2:b7:8c:03:d9:87:07:b9:e2:12:96:04:ce:b9: da:1c:c8:3c:6c:54:5b:3e:ef:9a:ce:fa:70:48:cd: 03:f8:13:58:fc:df:e4:9b:7f:51:70:e7:fa:ff:79: 3e:b7:e5:03:85:01:c3:2f:0c:1d:70:83:e2:19:3d: e3:b7:20:ee:88:46:c9:13:6b:65:f9:77:24:c4:28: 71:26:cc:fa:d7:ee:ef:c9:22:d4:b8:87:4d:8e:9d: ff:97:24:fc:0b:56:2a:89:04:a0:fa:e5:87:84:e1: 43:98:90:bf:98:11:9f:74:b9:9a:fc:b1:81:a5:c3: 98:4a:08:14:f5:6c:b3:d1:43:93:7b:8a:ea:0d:9c: 14:50:97:c1:e5:2f:f7:5a:74:ff:e9:63:1e:4e:a2: c2:ce:a7:a9:2d:46:4b:61:1c:68:95:51:c1:40:fb: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9D:87:7F:4C:C7:50:BF:78:35:EB:7D:02:96:77:4D:F9:35:D9:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:18:b2:9e:65:53:4d:6b:5d:4b:97:0b:45:89:7b:a1:6b:63: 41:68:af:93:90:39:61:f0:16:1a:54:e5:19:46:a3:e1:33:86: e0:62:dd:22:c4:56:bc:85:25:6b:b3:83:a1:7d:30:96:7d:ae: 06:e3:d1:0b:4c:4b:cf:ac:42:11:83:1e:34:7f:ec:9a:2b:ee: 18:ca:02:9d:fa:67:42:4a:e9:e3:1d:4d:40:77:bf:7d:ff:3e: 57:e8:06:c0:05:f6:53:bd:5f:5f:38:d7:6c:42:ae:87:90:f0: 9c:70:7b:a2:a7:d9:19:41:f8:39:50:42:36:74:2a:ad:2c:97: d4:00:d9:0b:5c:52:26:3f:b5:d3:71:e1:84:34:63:68:2a:81: 46:71:22:fd:bd:e6:7b:ab:09:e1:ec:34:b7:42:51:3a:d7:23: 1e:c7:22:df:51:fa:63:7f:82:76:00:7c:94:e2:bf:34:d4:41: 1d:e6:04:96:63:86:ff:23:27:58:cb:cb:b8:4b:53:66:16:e2: 42:7a:9c:14:90:c0:74:4c:67:da:a9:bf:7a:3a:e9:61:ab:cd: bc:38:ce:5d:bc:16:2b:15:87:c1:1e:c5:09:09:f1:64:b2:76: 72:4b:2b:1f:d1:d7:23:e5:dc:e3:52:be:9c:b1:2b:81:ba:b1: ea:6c:f5:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcLuvc3nc7FqgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NzY3MjFjOGYtYzY4MC00MjgxLTk4ZjctYWNiY2VjODJlZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNRSfm5Hu3dbUq7w5UQk7l7TgY+P+BbXfVJe qid9M3k/FxP2k9GpbH2P+Jsx77ess8YUMQHC0FDGWjurCs9pL5FznY4m83WCdPCK bJ8Xjdj5IgTYsrUA/fP6sreMA9mHB7niEpYEzrnaHMg8bFRbPu+azvpwSM0D+BNY /N/km39RcOf6/3k+t+UDhQHDLwwdcIPiGT3jtyDuiEbJE2tl+XckxChxJsz61+7v ySLUuIdNjp3/lyT8C1YqiQSg+uWHhOFDmJC/mBGfdLma/LGBpcOYSggU9Wyz0UOT e4rqDZwUUJfB5S/3WnT/6WMeTqLCzqepLUZLYRxolVHBQPt8SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmdh39Mx1C/eDXrfQKWd035NdlrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjAxMjIwMGMtMDliMC0z MWQ3LWE3ZDktMWRmMTU0YjU2ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcYsp5lU01rXUuXC0WJe6FrY0For5OQOWHwFhpU5RlGo+EzhuBi3SLE VryFJWuzg6F9MJZ9rgbj0QtMS8+sQhGDHjR/7Jor7hjKAp36Z0JK6eMdTUB3v33/ PlfoBsAF9lO9X18412xCroeQ8Jxwe6Kn2RlB+DlQQjZ0Kq0sl9QA2QtcUiY/tdNx 4YQ0Y2gqgUZxIv295nurCeHsNLdCUTrXIx7HIt9R+mN/gnYAfJTivzTUQR3mBJZj hv8jJ1jLy7hLU2YW4kJ6nBSQwHRMZ9qpv3o66WGrzbw4zl28FisVh8EexQkJ8WSy dnJLKx/R1yPl3ONSvpyxK4G6seps9fs= -----END CERTIFICATE-----Generated at Wed Oct 28 04:38:36 2026 by rpki-client