$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa File: df22a43e-e64f-3eee-a833-cc30d25d5a51.roa (raw, json) Hash identifier: RVrj5tIIZwOABU1jsdX8NLfo6yopmTkrCsVjdy91gts= Subject key identifier: 65:89:4C:76:4C:3E:6C:8C:09:BD:84:B4:84:E8:17:15:AB:D1:AA:AC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EBB11C8025AE11BC27AA444E0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 3356 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c8:02:5a:e1:1b:c2:7a:a4:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=6b4f0a97-1a26-4c7f-b58e-6df30274d9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:76:c8:25:84:ce:65:f6:8c:59:6d:c9:aa: 1c:07:39:bd:e4:90:86:e1:4a:6c:01:f6:b2:39:a9: aa:d0:f8:93:5b:5d:24:38:fa:f5:ca:c6:f7:9d:3c: a6:12:5f:0d:75:ca:45:01:b9:66:96:62:da:7a:84: ab:8a:b2:77:16:41:7b:a2:38:29:e6:9d:42:94:58: c0:43:52:9d:92:71:37:30:8e:14:7c:66:6b:3a:2c: 63:c7:23:59:c6:dd:c2:89:fa:e9:7c:86:e7:e5:72: 40:42:64:65:68:6a:6f:c5:89:08:3b:6e:18:6f:46: 8a:09:7a:ab:38:95:6e:92:a6:0d:3f:9d:5b:1c:fa: 0a:fe:29:1c:d1:7c:5d:c0:64:17:8b:a1:a5:34:fb: 99:40:38:56:8f:e3:55:f3:c7:31:4a:80:00:83:4b: b9:65:44:28:c3:cb:35:1b:75:9c:d7:71:27:56:8e: 1f:3d:1f:1f:fb:ce:0c:b4:2f:a9:51:ae:35:ca:ad: f7:d7:cf:37:96:12:7c:6b:97:b0:6e:bd:56:dc:d3: 3e:6e:75:3b:9f:a7:a8:14:f4:e5:85:7f:f9:7d:97: 42:c3:11:3b:18:a9:10:6c:11:7d:c1:4e:bd:1b:53: 3e:80:cf:73:33:1e:74:44:bd:39:20:f7:79:b3:0c: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:89:4C:76:4C:3E:6C:8C:09:BD:84:B4:84:E8:17:15:AB:D1:AA:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0c:db:d1:a0:5c:d6:e3:b7:f2:ab:fb:0d:71:08:93:ec:07: dd:47:78:fd:5b:89:d3:cc:50:8d:58:c5:d5:99:31:85:77:fe: cc:37:ab:fd:99:7c:1b:8e:d3:49:b5:d2:d4:39:1a:05:87:b4: b6:c6:79:56:da:6a:e5:a7:1b:3d:a4:1a:2f:5d:1f:eb:b5:2d: 95:02:ca:7a:68:cd:5d:70:a8:62:ef:c4:92:4e:c3:b2:69:d0: 38:02:85:a5:25:9b:0f:6a:24:b1:2d:6b:67:54:1f:f3:d5:55: cb:ac:73:a3:2c:91:a3:33:1a:4d:cb:e6:62:35:ab:78:07:79: df:5e:99:36:44:ca:69:f2:e0:89:63:c4:c3:d7:8f:64:5e:f0: 29:d0:28:04:93:99:2c:0d:8c:a0:24:3f:f1:72:5b:59:52:7e: 78:58:c3:3d:24:ae:dd:d7:4b:77:6b:0d:db:59:41:98:22:9b: d3:0b:5d:d1:ff:da:94:fa:33:a2:f7:9e:8d:26:7a:b5:b3:c4: bf:2b:f0:ca:e4:5e:ab:a4:1a:37:46:3a:af:16:f5:df:de:df: 37:98:0f:b1:dd:ae:2b:67:c0:27:8f:8b:15:e2:22:e4:be:98: e3:35:01:fb:18:ab:f9:75:8a:f7:65:f0:da:c6:88:8f:b3:53: a1:fb:e1:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcgCWuEbwnqkROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk NmI0ZjBhOTctMWEyNi00YzdmLWI1OGUtNmRmMzAyNzRkOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFR2yCWEzmX2jFltyaocBzm95JCG4UpsAfay Oamq0PiTW10kOPr1ysb3nTymEl8NdcpFAblmlmLaeoSrirJ3FkF7ojgp5p1ClFjA Q1KdknE3MI4UfGZrOixjxyNZxt3CifrpfIbn5XJAQmRlaGpvxYkIO24Yb0aKCXqr OJVukqYNP51bHPoK/ikc0XxdwGQXi6GlNPuZQDhWj+NV88cxSoAAg0u5ZUQow8s1 G3Wc13EnVo4fPR8f+84MtC+pUa41yq331883lhJ8a5ewbr1W3NM+bnU7n6eoFPTl hX/5fZdCwxE7GKkQbBF9wU69G1M+gM9zMx50RL05IPd5swyYSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWJTHZMPmyMCb2EtIToFxWr0aqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGYyMmE0M2UtZTY0Zi0z ZWVlLWE4MzMtY2MzMGQyNWQ1YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsM29GgXNbjt/Kr+w1xCJPsB91HeP1bidPMUI1YxdWZMYV3/sw3q/2Z fBuO00m10tQ5GgWHtLbGeVbaauWnGz2kGi9dH+u1LZUCynpozV1wqGLvxJJOw7Jp 0DgChaUlmw9qJLEta2dUH/PVVcusc6MskaMzGk3L5mI1q3gHed9emTZEymny4Ilj xMPXj2Re8CnQKASTmSwNjKAkP/FyW1lSfnhYwz0krt3XS3drDdtZQZgim9MLXdH/ 2pT6M6L3no0merWzxL8r8MrkXqukGjdGOq8W9d/e3zeYD7HdritnwCePixXiIuS+ mOM1AfsYq/l1ivdl8NrGiI+zU6H74V0= -----END CERTIFICATE-----Generated at Sat Aug 15 03:17:15 2026 by rpki-client