$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa File: cf26bf23-9642-3aae-be69-73e2d9498a25.roa (raw, json) Hash identifier: MxcPYMY0zAQsw0Z7NPNUjCUfjnG9YOsJ7jwLN2mUGJY= Subject key identifier: 56:55:51:73:B5:57:EB:87:D1:D8:EA:0E:C7:94:60:DC:56:66:9E:9E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F093CF111E9BE9CC1E3962700 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 20.137.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f1:11:e9:be:9c:c1:e3:96:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=92e25b25-2dbf-4bb7-b21c-5caf22fada8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6b:af:ee:01:d1:2b:11:1c:ae:51:1c:6e:a2: aa:db:56:1f:33:2d:a0:fa:8a:4b:37:e8:63:69:3a: 2e:5a:9e:f4:05:80:f7:23:0e:ce:47:a4:c2:46:56: a6:34:b5:fc:3a:31:38:ae:00:5c:7d:12:e0:04:12: 2c:54:54:8a:0d:4d:be:13:9b:48:cc:b8:d7:04:eb: c5:5a:6b:a2:e5:aa:f6:2f:04:8a:d2:9f:a9:39:bf: 19:77:6a:72:b1:84:a7:c7:3c:30:2c:41:c6:10:dc: 32:f8:5f:d0:e4:c4:82:ec:4d:4d:49:3f:08:17:82: a1:c4:7c:24:2b:db:6c:ff:9c:3e:36:7d:61:1f:cb: a8:a2:59:b0:b5:00:8c:96:c7:70:57:c1:b2:f3:be: 40:82:06:0b:d4:49:39:78:c6:b5:f0:0f:b4:31:01: 5a:db:83:8b:8f:0b:66:bb:be:3c:5f:fc:92:9a:13: 96:5c:6c:a8:8f:80:6e:d2:e8:50:9f:88:a5:e8:f0: 6a:41:d4:5d:c1:20:a2:97:74:d4:63:36:2b:41:e0: d7:cb:d4:5a:0e:6e:61:31:7e:75:dd:e5:85:73:06: 31:56:d7:2a:97:6b:d2:ff:bf:a4:40:39:d5:48:3f: 76:67:af:4f:24:7c:ab:de:d7:3c:1c:b7:62:e1:44: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:55:51:73:B5:57:EB:87:D1:D8:EA:0E:C7:94:60:DC:56:66:9E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:88:c8:33:97:10:c6:13:d5:ff:8a:14:89:70:b6:57:b1:cd: c2:a6:d6:4b:a8:8a:a7:94:3a:d9:ff:d8:0d:8e:be:c0:ff:92: c3:94:e6:96:0f:40:76:cf:d6:07:72:8c:33:25:ea:34:4f:53: 53:8a:2b:f0:13:7c:eb:5a:7f:5c:bd:92:4c:82:39:da:0a:a1: 1c:65:14:bb:5c:66:e5:95:a1:a2:be:82:16:d9:87:e9:23:d7: 66:2f:73:25:e3:8a:e9:2d:a1:50:3e:a7:ff:e7:6d:2a:d9:76: 0a:ff:81:68:04:09:5d:26:17:4d:c5:37:ec:15:36:43:9a:e6: e7:9c:bd:38:c9:99:89:5c:b4:a1:83:54:50:97:a9:6d:52:fa: fa:b3:c7:65:46:3a:54:74:80:3d:8f:63:09:8f:9a:ae:b0:0c: 99:4f:c3:80:a9:df:9e:96:29:97:f8:cf:7b:be:06:91:21:2d: cd:d1:5e:c5:98:9b:13:06:bb:6c:ac:ac:04:5a:78:47:04:79: 2e:55:48:ea:fa:c6:b9:15:0f:a9:cd:a5:f2:8d:57:8d:af:9a: 13:00:04:19:42:1d:0a:26:e0:49:17:8a:81:ab:82:82:b1:29: c6:c4:ef:98:77:2d:68:35:d5:cf:ba:09:f1:f3:73:8e:f3:8b: f1:6a:cd:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPER6b6cweOWJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk OTJlMjViMjUtMmRiZi00YmI3LWIyMWMtNWNhZjIyZmFkYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Guv7gHRKxEcrlEcbqKq21YfMy2g+opLN+hj aTouWp70BYD3Iw7OR6TCRlamNLX8OjE4rgBcfRLgBBIsVFSKDU2+E5tIzLjXBOvF Wmui5ar2LwSK0p+pOb8Zd2pysYSnxzwwLEHGENwy+F/Q5MSC7E1NST8IF4KhxHwk K9ts/5w+Nn1hH8uoolmwtQCMlsdwV8Gy875AggYL1Ek5eMa18A+0MQFa24OLjwtm u748X/ySmhOWXGyoj4Bu0uhQn4il6PBqQdRdwSCil3TUYzYrQeDXy9RaDm5hMX51 3eWFcwYxVtcql2vS/7+kQDnVSD92Z69PJHyr3tc8HLdi4UTgSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZVUXO1V+uH0djqDseUYNxWZp6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2YyNmJmMjMtOTY0Mi0z YWFlLWJlNjktNzNlMmQ5NDk4YTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiIyDOXEMYT1f+KFIlwtlexzcKm1kuoiqeUOtn/2A2OvsD/ksOU5pYP QHbP1gdyjDMl6jRPU1OKK/ATfOtaf1y9kkyCOdoKoRxlFLtcZuWVoaK+ghbZh+kj 12YvcyXjiuktoVA+p//nbSrZdgr/gWgECV0mF03FN+wVNkOa5uecvTjJmYlctKGD VFCXqW1S+vqzx2VGOlR0gD2PYwmPmq6wDJlPw4Cp356WKZf4z3u+BpEhLc3RXsWY mxMGu2ysrARaeEcEeS5VSOr6xrkVD6nNpfKNV42vmhMABBlCHQom4EkXioGrgoKx KcbE75h3LWg11c+6CfHzc47zi/FqzWk= -----END CERTIFICATE-----Generated at Wed Sep 9 03:43:16 2026 by rpki-client