$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa File: da015e1a-f458-3674-9325-2b4dbacc74f1.roa (raw, json) Hash identifier: CTO7UfekoqbnBYiCPCu6H1O+IuGXDr5UW9BT9arCrak= Subject key identifier: 97:F5:ED:C5:38:61:19:61:76:3D:03:EF:40:02:37:BC:33:4A:B1:CF Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F4976EB8BC92A8D4B3B16FD00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:eb:8b:c9:2a:8d:4b:3b:16:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a10cbc8-2fd0-4ae0-9c0e-2b1ae3ad903c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:23:1f:2e:c4:64:79:b6:a5:da:7f:0a:43: cd:b3:ca:93:57:fb:39:bc:d3:a7:21:fd:79:62:ad: eb:f0:b8:ee:df:23:d6:a8:0a:1d:93:74:0b:27:a6: c4:69:85:fd:d4:16:5a:c9:71:34:3a:08:fb:60:7b: f0:94:6b:62:15:01:b2:52:90:ff:8e:b6:10:dd:a9: 8e:2c:3b:24:d6:74:84:63:31:c6:a8:f1:47:d8:33: 94:d9:39:4b:77:b9:13:f5:ab:72:07:98:38:17:b6: 73:8d:df:bc:02:31:a8:00:b5:1c:4c:75:91:6a:96: 19:b4:f7:f6:b5:8d:9c:e9:95:c9:f0:05:94:3c:8a: 9a:04:82:58:1c:31:4e:14:02:22:b2:c1:60:eb:29: a4:eb:ac:ba:15:77:85:29:0d:0a:14:b1:72:62:c9: cf:62:3d:39:40:98:2c:05:c9:5c:0c:a4:81:7f:f1: 25:e1:69:3b:49:64:cc:e5:23:ba:87:23:a0:70:d7: 8c:72:43:a2:d7:23:ff:f8:c8:b4:a4:8e:d6:45:b4: 8c:eb:77:30:95:77:61:42:65:5e:7c:94:26:cd:a8: 18:6b:2c:e2:0b:15:40:93:6a:bc:c8:55:ed:9d:33: 42:37:06:13:30:18:ae:4c:3b:b8:2e:3e:2b:0b:66: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F5:ED:C5:38:61:19:61:76:3D:03:EF:40:02:37:BC:33:4A:B1:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9d:9c:49:66:65:bc:81:55:23:7f:12:d5:a1:7f:29:5b:f7: 23:81:57:26:5c:be:46:ef:e9:dd:a2:91:a4:0a:58:57:f9:e5: f0:88:d5:ac:bf:2e:d2:17:ce:43:b8:97:8c:3c:6d:7d:ac:23: c3:cf:b1:f4:99:e1:52:43:07:08:4b:74:b2:62:18:49:51:d3: dd:eb:c9:b9:d1:98:8b:2a:97:22:d7:8c:ba:e2:bd:08:1d:6f: bd:50:aa:23:ce:10:c9:67:24:e1:ac:e7:8e:87:3c:ad:c6:4b: 2a:ff:37:b2:84:89:2c:0b:4b:37:00:c2:58:93:71:0d:71:ac: ce:75:ea:1b:20:d0:b3:78:88:f5:da:b5:80:d4:7d:12:d1:d7: 3b:eb:75:06:62:bb:73:ad:70:c8:6c:40:07:49:d7:8a:f6:8e: 02:03:ba:63:d4:6e:41:cc:ce:25:94:f1:35:7c:16:36:14:11: bc:7e:f7:35:31:24:5f:25:fa:0a:92:70:dd:b9:a8:f2:bb:b9: 49:07:0e:e5:63:9f:67:6a:f0:3e:dd:5f:94:f8:f2:ac:71:69: fc:48:d6:78:e7:09:56:c3:ab:a0:8c:55:dd:23:35:95:63:44: b8:12:88:46:64:92:db:42:13:43:e5:85:78:fc:b1:5b:5b:90: 4a:2a:5f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JduuLySqNSzsW/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2ExMGNiYzgtMmZkMC00YWUwLTljMGUtMmIxYWUzYWQ5MDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk4jHy7EZHm2pdp/CkPNs8qTV/s5vNOnIf15 Yq3r8Lju3yPWqAodk3QLJ6bEaYX91BZayXE0Ogj7YHvwlGtiFQGyUpD/jrYQ3amO LDsk1nSEYzHGqPFH2DOU2TlLd7kT9atyB5g4F7Zzjd+8AjGoALUcTHWRapYZtPf2 tY2c6ZXJ8AWUPIqaBIJYHDFOFAIissFg6ymk66y6FXeFKQ0KFLFyYsnPYj05QJgs BclcDKSBf/El4Wk7SWTM5SO6hyOgcNeMckOi1yP/+Mi0pI7WRbSM63cwlXdhQmVe fJQmzagYayziCxVAk2q8yFXtnTNCNwYTMBiuTDu4Lj4rC2YHhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf17cU4YRlhdj0D70ACN7wzSrHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwMTVlMWEtZjQ1OC0z Njc0LTkzMjUtMmI0ZGJhY2M3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6dnElmZbyBVSN/EtWhfylb9yOBVyZcvkbv6d2ikaQKWFf55fCI1ay/ LtIXzkO4l4w8bX2sI8PPsfSZ4VJDBwhLdLJiGElR093rybnRmIsqlyLXjLrivQgd b71QqiPOEMlnJOGs546HPK3GSyr/N7KEiSwLSzcAwliTcQ1xrM516hsg0LN4iPXa tYDUfRLR1zvrdQZiu3OtcMhsQAdJ14r2jgIDumPUbkHMziWU8TV8FjYUEbx+9zUx JF8l+gqScN25qPK7uUkHDuVjn2dq8D7dX5T48qxxafxI1njnCVbDq6CMVd0jNZVj RLgSiEZkkttCE0PlhXj8sVtbkEoqX5g= -----END CERTIFICATE-----Generated at Sun Oct 11 08:41:42 2026 by rpki-client