$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa File: d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa (raw, json) Hash identifier: iaunmdc0sad6BdC8YLLgsYko2nU0UmyV14EkTmFLaG4= Subject key identifier: C5:AA:29:3D:F1:82:40:72:C6:4A:3A:23:F3:EE:16:DF:C2:FA:A8:03 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62D626E940DC192D483864 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 3360 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:d6:26:e9:40:dc:19:2d:48:38:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=f7a5c1ba-42c9-4c42-bc32-87d94af7f216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:1b:8b:24:60:80:79:ba:03:29:cf:2d:76: 5f:b6:96:8d:9c:f0:e5:0c:73:ae:71:8f:f5:89:08: 4e:40:e0:f0:7c:ec:30:20:a2:85:31:87:a8:56:2c: 8d:cd:60:4f:89:d4:18:ed:5e:a1:67:a5:31:0a:e9: e9:ea:c9:b0:95:b0:a7:b9:c8:32:9b:e8:8f:78:bf: c0:12:e6:bf:b6:c2:f0:30:de:ce:38:0b:ec:21:7b: 6f:f3:49:85:2c:a7:0b:c7:23:2b:68:6e:00:8f:af: a2:70:ea:03:b2:76:f3:60:31:8e:d1:89:c7:2c:3c: b2:49:f2:7b:7f:04:9c:01:93:f3:19:3b:6c:a9:f6: 64:24:ec:b5:0f:64:57:b0:2f:4c:c2:19:d0:2f:1a: d3:cd:04:fd:66:98:6e:21:41:38:f9:d7:df:02:c2: 33:1b:54:fb:69:42:4f:15:69:fc:0a:3d:94:57:be: 77:3f:03:24:e3:fd:9b:0f:d1:87:09:2c:ee:2e:ff: 3a:76:30:65:75:b0:94:2b:da:1a:80:d9:25:40:77: f9:00:71:d9:2c:e8:03:0d:74:77:52:e5:26:c5:11: bc:fc:ee:f9:e3:36:8e:1c:f9:05:1b:67:bf:c6:cc: 50:42:e8:d6:a5:9f:7d:d1:ed:24:ac:a2:ce:c9:3a: 6e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AA:29:3D:F1:82:40:72:C6:4A:3A:23:F3:EE:16:DF:C2:FA:A8:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1e:d0:2d:ae:e3:e0:66:69:19:47:66:91:1e:2c:3b:76:a7: da:cb:ed:52:66:25:3f:4c:df:9c:d1:7e:8c:ec:c7:d4:ec:9a: ff:32:c1:7a:e2:b1:88:2f:05:05:f9:76:9c:05:b2:a4:37:85: 0d:57:57:2a:41:a2:39:46:50:78:b0:c6:26:07:a1:2a:fa:c9: 96:ed:06:a3:4a:d1:72:fc:96:92:f1:3f:c5:73:ae:a8:d6:2a: d8:fb:40:08:69:9a:65:9c:89:7f:01:93:93:8c:85:27:ed:e6: f2:43:be:c3:f5:08:bf:93:2c:01:35:5c:03:29:23:2c:a0:0d: ad:ad:47:13:80:03:0b:58:57:0e:db:f7:ae:84:cd:13:7b:63: 47:78:48:cc:74:f7:17:53:00:64:b7:30:fb:30:38:d3:d4:a1: ce:7d:c6:8f:13:84:07:d9:aa:fa:2e:33:a0:3a:a4:ac:6d:17: 1a:57:12:a8:bd:82:7c:11:ac:9a:48:c2:bd:85:40:63:97:68: 11:e2:05:c8:76:e8:08:8a:04:01:3d:88:ac:41:22:33:df:9f: a4:b4:82:76:71:02:8c:79:65:b0:5d:41:5b:09:64:06:6f:5e: c9:8b:26:e6:2c:de:4b:13:53:47:a9:b1:f8:e2:12:d4:87:15: 7e:62:03:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtYm6UDcGS1IOGQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZjdhNWMxYmEtNDJjOS00YzQyLWJjMzItODdkOTRhZjdmMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK0biyRggHm6AynPLXZftpaNnPDlDHOucY/1 iQhOQODwfOwwIKKFMYeoViyNzWBPidQY7V6hZ6UxCunp6smwlbCnucgym+iPeL/A Eua/tsLwMN7OOAvsIXtv80mFLKcLxyMraG4Aj6+icOoDsnbzYDGO0YnHLDyySfJ7 fwScAZPzGTtsqfZkJOy1D2RXsC9MwhnQLxrTzQT9ZphuIUE4+dffAsIzG1T7aUJP FWn8Cj2UV753PwMk4/2bD9GHCSzuLv86djBldbCUK9oagNklQHf5AHHZLOgDDXR3 UuUmxRG8/O754zaOHPkFG2e/xsxQQujWpZ990e0krKLOyTpuswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWqKT3xgkByxko6I/PuFt/C+qgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDhhODg5NGQtZDAzNC0z OWM3LWFhNzEtY2UzOWZiMGQ4YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUe0C2u4+BmaRlHZpEeLDt2p9rL7VJmJT9M35zRfozsx9Tsmv8ywXri sYgvBQX5dpwFsqQ3hQ1XVypBojlGUHiwxiYHoSr6yZbtBqNK0XL8lpLxP8VzrqjW Ktj7QAhpmmWciX8Bk5OMhSft5vJDvsP1CL+TLAE1XAMpIyygDa2tRxOAAwtYVw7b 966EzRN7Y0d4SMx09xdTAGS3MPswONPUoc59xo8ThAfZqvouM6A6pKxtFxpXEqi9 gnwRrJpIwr2FQGOXaBHiBch26AiKBAE9iKxBIjPfn6S0gnZxAox5ZbBdQVsJZAZv XsmLJuYs3ksTU0epsfjiEtSHFX5iA7E= -----END CERTIFICATE-----Generated at Wed Oct 7 00:41:21 2026 by rpki-client