$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa File: da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa (raw, json) Hash identifier: CCoM1lyXcJXSnqxEzt4FMKYLHQlJ+QzbHnHKk6Btms8= Subject key identifier: 2C:A6:BF:A3:06:73:DB:68:6E:25:05:61:82:3D:93:ED:E5:83:9E:A9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F46A7E794A6546678EB856380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e7:94:a6:54:66:78:eb:85:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=99dbf40f-57dc-4a9b-aeea-8c5a7f1b9480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:ba:ad:04:c6:17:bc:20:f8:74:bc:00:63: 82:a6:99:8b:69:a7:81:0f:8a:61:0d:0e:63:d5:6c: 8e:fd:2f:66:b2:ec:0c:b0:20:a2:b2:69:b1:ce:ac: a1:37:cb:d9:2b:36:b5:1d:c4:8c:99:e2:66:90:a8: 01:8a:59:fd:27:bc:64:bd:69:fb:6a:75:c5:5a:bd: da:ed:aa:4c:35:3e:b2:35:0e:31:77:e5:c0:c0:f6: 9a:bc:1f:18:79:36:0e:5d:73:33:a2:96:bb:a8:89: 25:95:af:f7:af:ea:a0:f5:f2:ec:60:ef:19:b6:ba: 51:3f:a8:97:d5:09:be:86:cc:26:bb:4d:a4:52:98: f9:09:13:d2:87:ed:03:25:b6:8e:7f:62:8d:e3:24: ca:98:09:ca:55:7c:68:4b:e3:f3:89:03:72:42:39: 9c:b9:eb:32:0a:1d:9e:e4:d6:51:8e:7a:d8:ec:88: 41:ea:f3:80:ce:47:21:50:df:50:6c:d1:00:cc:e1: 10:ec:01:61:e1:58:68:60:40:ad:f8:34:5b:d8:95: 05:9e:25:96:8b:32:12:6f:c1:13:be:53:af:53:81: aa:3e:2b:06:02:41:cc:f0:36:bb:23:64:2e:45:f5: 89:de:f5:8b:0a:eb:ca:46:99:63:28:e5:6f:e3:98: b8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A6:BF:A3:06:73:DB:68:6E:25:05:61:82:3D:93:ED:E5:83:9E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:3b:45:56:4e:d5:c0:34:50:d4:ed:92:50:82:48:fb:05:52: 16:83:bc:ba:74:cd:58:99:1d:20:0d:81:50:62:f4:dc:9e:73: c4:83:b2:a9:33:0e:41:70:ad:0a:ec:57:85:5e:01:23:a5:d5: f5:5d:5e:d7:88:1b:1f:59:3c:8c:7a:2b:c2:15:f2:55:0c:bd: 55:bd:dc:a0:4e:73:f9:29:02:82:1d:11:2d:ce:20:90:86:b9: 17:62:c3:0b:ae:ac:1a:75:0c:e1:5c:92:09:de:86:90:f2:c7: c8:4a:53:fa:a5:ed:5d:76:b3:80:4f:0e:54:84:d8:d9:b4:f0: d6:d9:33:be:ad:b6:cf:f0:5c:8d:59:56:c3:86:b4:4b:79:2f: 0a:a5:ee:c9:5a:87:6b:f5:aa:54:ee:43:e8:9c:9e:fd:d2:c7: 58:67:55:9e:f5:a4:83:17:00:55:2c:93:3d:58:e0:f8:69:e3: 14:44:51:d7:c2:f8:89:5d:8f:2a:85:fe:28:9d:fe:b0:3d:f9: 45:fe:ac:d8:25:4d:0f:82:57:99:a6:92:f5:fb:b9:a8:7b:40: e7:61:aa:e9:1b:05:df:4f:3c:2b:a0:e6:3e:d1:3b:e9:c3:9a: 90:29:08:3e:ca:5a:ec:7f:cc:6c:bc:7a:7d:26:a1:35:90:ae: 21:65:30:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+eUplRmeOuFY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk OTlkYmY0MGYtNTdkYy00YTliLWFlZWEtOGM1YTdmMWI5NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+26rQTGF7wg+HS8AGOCppmLaaeBD4phDQ5j 1WyO/S9msuwMsCCismmxzqyhN8vZKza1HcSMmeJmkKgBiln9J7xkvWn7anXFWr3a 7apMNT6yNQ4xd+XAwPaavB8YeTYOXXMzopa7qIklla/3r+qg9fLsYO8ZtrpRP6iX 1Qm+hswmu02kUpj5CRPSh+0DJbaOf2KN4yTKmAnKVXxoS+PziQNyQjmcuesyCh2e 5NZRjnrY7IhB6vOAzkchUN9QbNEAzOEQ7AFh4VhoYECt+DRb2JUFniWWizISb8ET vlOvU4GqPisGAkHM8Da7I2QuRfWJ3vWLCuvKRpljKOVv45i48wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCymv6MGc9tobiUFYYI9k+3lg56pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEzOWM3OTctOWFmNC0z ZDcxLWJmYTItNWM0ZmMwYjQ3NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE7RVZO1cA0UNTtklCCSPsFUhaDvLp0zViZHSANgVBi9Nyec8SDsqkz DkFwrQrsV4VeASOl1fVdXteIGx9ZPIx6K8IV8lUMvVW93KBOc/kpAoIdES3OIJCG uRdiwwuurBp1DOFckgnehpDyx8hKU/ql7V12s4BPDlSE2Nm08NbZM76tts/wXI1Z VsOGtEt5Lwql7slah2v1qlTuQ+icnv3Sx1hnVZ71pIMXAFUskz1Y4Php4xREUdfC +IldjyqF/iid/rA9+UX+rNglTQ+CV5mmkvX7uah7QOdhqukbBd9PPCug5j7RO+nD mpApCD7KWux/zGy8en0moTWQriFlMH8= -----END CERTIFICATE-----Generated at Fri Oct 9 00:35:22 2026 by rpki-client