$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c4278091-e4ff-3d76-8a49-96b1befd55c8.roa File: c4278091-e4ff-3d76-8a49-96b1befd55c8.roa (raw, json) Hash identifier: R94eLyhUL1FyQMwNN83MSSuNjaKhKwar6HtzmjDxapM= Subject key identifier: 57:3C:D3:D1:19:B5:2A:5E:5F:0D:5F:E5:CB:8A:5D:85:80:B9:20:3B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EAFE70997282B44EE5C236580 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c4278091-e4ff-3d76-8a49-96b1befd55c8.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 202 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:09:97:28:2b:44:ee:5c:23:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=1410e2f7-336b-4351-8b02-0c542730ec7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:da:af:cb:87:87:93:e4:0c:7d:52:93:29:5c: 02:0e:b4:0c:dd:3e:b4:76:c2:44:5b:f0:da:78:0f: 43:4d:a3:a1:06:6f:b2:d0:61:39:1d:e3:b0:0e:c8: 1a:17:a3:38:30:ce:64:65:54:5c:38:3d:f8:5c:3f: 31:aa:a3:b2:c5:5d:66:70:d0:8f:fd:0f:83:6a:fe: 55:09:74:2c:33:1e:90:ad:f8:cb:35:af:b7:27:3f: cd:50:7a:28:04:9c:1f:f2:ed:66:51:6a:7d:fb:87: a4:b0:26:12:b5:a4:4e:b0:f2:d2:af:2d:20:a4:05: 8a:0c:4c:c8:0b:52:d6:7f:52:ad:dd:ba:ae:03:49: 7f:ea:df:6f:ef:1a:ae:15:a6:b7:98:c8:41:78:39: cd:6e:f5:d2:f9:3e:04:c9:9d:c2:8c:41:c0:12:6b: fb:6f:6d:fb:fa:1a:d2:0f:3d:aa:98:24:b3:c7:a1: 5a:8a:4f:0a:85:ae:83:4a:b6:61:4f:86:ab:1f:4a: 28:1f:c3:3d:b5:12:68:f0:b2:a2:fa:67:e1:2e:ec: 30:95:c1:ae:3b:09:2f:95:33:be:5b:b0:67:6f:4f: c5:67:34:40:70:c0:a9:a6:03:98:f9:3b:70:87:d2: 40:ee:88:45:58:8c:0d:f0:3e:b3:a5:4c:92:8b:e4: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3C:D3:D1:19:B5:2A:5E:5F:0D:5F:E5:CB:8A:5D:85:80:B9:20:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c4278091-e4ff-3d76-8a49-96b1befd55c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:95:0f:f1:c8:19:3b:8e:38:63:5f:fe:62:3d:3a:5e:04:2f: 87:5b:bf:c3:87:52:71:92:50:2d:1c:68:97:0c:7e:51:04:54: 31:cf:56:22:03:62:1d:bb:b8:24:fe:91:a6:1d:dc:a2:49:1b: d3:5e:2c:84:59:d6:75:c1:09:05:85:47:24:6f:6d:ea:8a:7e: 59:c7:e8:fd:8b:fe:90:0a:c3:f8:06:7e:99:ed:5a:74:4d:d5: dd:b9:86:47:78:ac:02:4f:1e:b8:90:4b:ef:b6:d3:7d:67:69: 94:2d:d9:6d:0e:64:7d:8e:7c:34:d6:a0:ec:7e:3a:62:12:77: 06:63:0b:58:71:2d:bc:d6:51:47:91:8d:5d:a6:f0:a7:84:8a: 1c:ac:e5:d3:8a:84:8c:11:76:ef:ac:52:f4:c5:79:fd:72:1d: 88:90:53:7b:ff:b0:e3:f3:1d:89:52:83:48:75:92:14:48:4d: a5:c9:04:50:99:7c:23:33:d6:3c:c3:05:40:2e:13:e7:ab:cf: 99:48:6b:c3:a4:1c:36:dc:41:06:55:98:30:a4:03:22:c6:56: 65:17:9c:0b:08:90:55:d1:c5:ec:3b:0d:3d:b9:d4:63:4e:47: e0:87:b0:c9:90:64:36:ba:e9:55:4d:0c:fc:a4:d4:b6:53:ba: 87:37:e3:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5wmXKCtE7lwjZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MTQxMGUyZjctMzM2Yi00MzUxLThiMDItMGM1NDI3MzBlYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9qvy4eHk+QMfVKTKVwCDrQM3T60dsJEW/Da eA9DTaOhBm+y0GE5HeOwDsgaF6M4MM5kZVRcOD34XD8xqqOyxV1mcNCP/Q+Dav5V CXQsMx6QrfjLNa+3Jz/NUHooBJwf8u1mUWp9+4eksCYStaROsPLSry0gpAWKDEzI C1LWf1Kt3bquA0l/6t9v7xquFaa3mMhBeDnNbvXS+T4EyZ3CjEHAEmv7b237+hrS Dz2qmCSzx6Faik8Kha6DSrZhT4arH0ooH8M9tRJo8LKi+mfhLuwwlcGuOwkvlTO+ W7Bnb0/FZzRAcMCppgOY+Ttwh9JA7ohFWIwN8D6zpUySi+SLIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc809EZtSpeXw1f5cuKXYWAuSA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzQyNzgwOTEtZTRmZi0z ZDc2LThhNDktOTZiMWJlZmQ1NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6VD/HIGTuOOGNf/mI9Ol4EL4dbv8OHUnGSUC0caJcMflEEVDHPViID Yh27uCT+kaYd3KJJG9NeLIRZ1nXBCQWFRyRvbeqKflnH6P2L/pAKw/gGfpntWnRN 1d25hkd4rAJPHriQS++2031naZQt2W0OZH2OfDTWoOx+OmISdwZjC1hxLbzWUUeR jV2m8KeEihys5dOKhIwRdu+sUvTFef1yHYiQU3v/sOPzHYlSg0h1khRITaXJBFCZ fCMz1jzDBUAuE+erz5lIa8OkHDbcQQZVmDCkAyLGVmUXnAsIkFXRxew7DT251GNO R+CHsMmQZDa66VVNDPyk1LZTuoc348M= -----END CERTIFICATE-----Generated at Wed Sep 9 03:42:14 2026 by rpki-client