$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa File: e3806760-7d79-3d01-859b-ff7d8faa361a.roa (raw, json) Hash identifier: T6KVoPtvY7+TC1HoBDk8YmwKwZyYED12OVMVUcJqNFU= Subject key identifier: B5:F3:CB:76:B4:1C:6C:9C:56:5F:50:E1:E6:6D:0D:4A:BE:CE:1A:3A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EBB11B24040B2F39AD7B1B4C4 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:b2:40:40:b2:f3:9a:d7:b1:b4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=b67661bf-3c1e-4059-89b9-1ae179d23c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:a6:b5:fd:9d:f2:44:d5:67:95:28:35:24: b5:77:91:5c:66:d3:d5:fc:6d:93:97:46:65:aa:9f: 3c:e1:b9:98:af:cc:a1:4c:49:b1:c2:b0:c1:d6:87: 29:98:1e:07:0b:f6:23:d5:7e:6e:ff:37:5c:53:44: c7:c4:af:dc:a8:4c:af:c7:bd:40:bd:14:35:3f:b8: ae:5a:80:c7:b1:8e:b3:9a:d0:d3:c2:c7:92:c0:4c: d0:0b:c6:90:29:94:c5:72:b4:86:4d:22:7e:bd:bd: 85:46:9c:06:db:93:c4:36:bc:82:cc:89:81:f9:73: 70:ec:25:30:16:43:2c:d5:e7:a8:a3:af:9f:73:c3: b6:de:f9:27:22:c0:c4:d9:8c:3c:5a:5c:f4:4d:20: 9b:86:bb:09:76:87:95:51:71:d1:bf:f4:98:1f:7b: ed:7b:f2:b4:8d:74:c4:6d:9f:c6:9f:d7:3d:7d:0c: 84:b8:46:dc:d5:66:19:40:ff:52:dd:10:3c:d7:60: 01:6f:d7:52:01:eb:56:dc:eb:b3:89:d4:21:f5:46: 61:63:e4:af:b3:74:25:0b:41:19:14:39:8a:02:07: 0b:07:be:a2:03:7d:da:40:e7:9c:e2:c1:e9:aa:d6: 44:3c:74:7a:76:f1:45:1c:3c:63:0e:ce:19:d2:1a: 8d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F3:CB:76:B4:1C:6C:9C:56:5F:50:E1:E6:6D:0D:4A:BE:CE:1A:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3c:a5:c3:fe:ab:a0:5f:55:08:fa:6c:c0:56:b4:6d:ac:71: a9:f6:f6:72:c5:35:5e:67:48:31:f1:96:bd:85:5f:4b:19:69: 89:05:16:bb:b1:36:1c:5a:3f:00:e3:2c:1a:14:4d:67:fd:a2: 0f:76:fc:ee:44:9e:fa:61:1c:6d:3e:2e:c1:a1:b2:a9:c1:64: 53:89:fb:f9:4f:b7:79:7f:b6:eb:86:ae:cf:9f:33:74:84:c5: 93:92:69:75:02:76:78:52:70:08:e5:25:7e:dc:86:2b:98:7d: 2a:95:e1:bb:5e:6f:89:9c:5b:78:61:07:30:a3:39:ee:25:4a: 97:8f:e0:ce:d3:16:96:a6:c9:11:63:fb:2d:d0:e0:7e:a2:ad: 31:a2:52:ba:7f:2f:2e:3e:38:b5:fc:56:fd:bb:40:5d:86:2f: 24:ae:aa:4f:ec:8c:ef:e9:b8:4d:6a:e7:84:88:d8:99:1d:b4: 2b:b8:f9:33:1f:7c:d8:ab:62:d7:b6:a8:8e:19:d5:21:a1:b7: f5:39:ae:15:6e:fa:02:66:99:81:67:13:55:03:f5:93:6d:fe: 6e:ed:c6:ce:9b:10:9a:b6:53:10:8b:3b:c1:b6:22:6e:8e:70: b4:22:ae:a8:f9:22:25:41:e8:9e:72:20:09:75:a8:24:31:6c: 65:6c:7b:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EbJAQLLzmtextMQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YjY3NjYxYmYtM2MxZS00MDU5LTg5YjktMWFlMTc5ZDIzYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH2mtf2d8kTVZ5UoNSS1d5FcZtPV/G2Tl0Zl qp884bmYr8yhTEmxwrDB1ocpmB4HC/Yj1X5u/zdcU0THxK/cqEyvx71AvRQ1P7iu WoDHsY6zmtDTwseSwEzQC8aQKZTFcrSGTSJ+vb2FRpwG25PENryCzImB+XNw7CUw FkMs1eeoo6+fc8O23vknIsDE2Yw8Wlz0TSCbhrsJdoeVUXHRv/SYH3vte/K0jXTE bZ/Gn9c9fQyEuEbc1WYZQP9S3RA812ABb9dSAetW3OuzidQh9UZhY+Svs3QlC0EZ FDmKAgcLB76iA33aQOec4sHpqtZEPHR6dvFFHDxjDs4Z0hqNJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXzy3a0HGycVl9Q4eZtDUq+zho6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTM4MDY3NjAtN2Q3OS0z ZDAxLTg1OWItZmY3ZDhmYWEzNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ8pcP+q6BfVQj6bMBWtG2scan29nLFNV5nSDHxlr2FX0sZaYkFFrux NhxaPwDjLBoUTWf9og92/O5EnvphHG0+LsGhsqnBZFOJ+/lPt3l/tuuGrs+fM3SE xZOSaXUCdnhScAjlJX7chiuYfSqV4bteb4mcW3hhBzCjOe4lSpeP4M7TFpamyRFj +y3Q4H6irTGiUrp/Ly4+OLX8Vv27QF2GLySuqk/sjO/puE1q54SI2JkdtCu4+TMf fNirYte2qI4Z1SGht/U5rhVu+gJmmYFnE1UD9ZNt/m7txs6bEJq2UxCLO8G2Im6O cLQirqj5IiVB6J5yIAl1qCQxbGVse08= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:30 2026 by rpki-client