$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa File: 094276eb-a22a-3e33-8c6d-37f68e1f7695.roa (raw, json) Hash identifier: ZvM++P/uSDbpkqh3xFg60SyFNlw2MmVml7n4el6ehfA= Subject key identifier: 4B:EB:3A:A4:26:F5:FA:29:A3:A7:A7:7C:05:64:18:90:55:9C:06:67 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E3A2F2F21864DF4C2A9003E00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 203 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:2f:21:86:4d:f4:c2:a9:00:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=ab52545a-5c08-4bb0-8921-3dd225bf6a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:52:03:84:5d:0c:9d:ff:c6:3e:ec:3b:1f: 0a:6e:79:2f:e0:97:e5:61:ae:b7:ec:9c:c4:35:72: e7:5b:1a:6d:c2:06:8c:aa:03:44:d0:a0:27:2a:1f: 27:57:6f:19:d5:da:4e:23:07:8c:37:82:88:85:e2: 45:6a:49:06:71:24:b8:e4:c2:13:30:fa:5f:98:34: d4:d8:e6:51:a8:8d:21:17:89:51:47:4b:33:24:05: 16:53:21:25:fa:20:e0:a7:2a:de:8e:7a:c1:c7:1b: 88:b8:ed:fd:5f:58:37:08:20:0e:cb:b1:73:f6:11: b6:89:19:cd:26:6e:a0:c7:be:98:50:0e:eb:36:8e: d5:5e:21:49:b6:6e:01:22:06:d0:7f:45:64:82:86: 0f:16:0b:18:66:9d:76:09:18:54:a3:8a:bf:ad:df: 5b:77:32:95:a3:ae:ba:a4:98:74:e6:10:a3:2d:b1: 09:dd:ab:8b:34:2f:ca:87:b4:6b:dd:dc:20:db:8c: 5a:76:f6:b5:97:8a:00:0b:cf:2b:df:06:ae:c8:91: a1:6e:6c:a0:fb:97:ce:c5:bc:b4:c1:58:e5:6b:a9: 5b:c6:f8:7d:5d:1e:0a:7a:4e:b2:af:49:2f:ad:3e: ae:8a:12:97:c2:ad:c8:ed:c9:c3:65:be:a0:fd:54: ce:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EB:3A:A4:26:F5:FA:29:A3:A7:A7:7C:05:64:18:90:55:9C:06:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:af:72:b1:4f:ed:87:10:8c:25:38:01:f1:03:09:3c:a0:72: 24:39:e2:74:86:5b:4c:bb:23:27:e4:a8:8d:6e:2a:d8:e2:43: 63:80:39:67:ac:a0:c7:96:1f:c8:36:9e:f4:9b:2c:94:fc:85: f4:db:8b:d5:99:6c:e6:3e:cc:03:ca:09:8a:24:cf:4e:57:8f: 7c:74:0b:e3:e1:ed:21:e0:17:d1:40:0d:24:ae:3d:da:a0:3a: 16:6b:f2:a5:8e:24:36:4e:54:1a:15:ce:52:c8:df:dc:36:3d: ad:00:d1:dd:28:c5:94:8d:cf:01:ab:34:55:13:64:8c:8f:a4: 9a:91:92:d6:d6:11:52:f7:7b:45:73:66:55:aa:79:0e:da:88: 4f:84:dc:42:40:87:db:96:37:86:e7:28:58:89:9b:e5:c7:fc: 90:07:34:93:37:85:c9:0c:9d:05:06:7e:1f:d7:e4:3c:6d:1e: b2:3b:c6:c3:f3:53:2b:12:94:64:99:49:04:0a:d8:f9:91:59: 94:7b:1f:47:c2:e6:62:d5:f1:79:b8:0a:39:44:55:e3:d2:1d: e7:f1:8f:4f:ad:e7:13:a0:13:e6:b2:d1:03:eb:58:66:cf:2d: 82:af:0f:c9:08:d8:48:df:12:40:61:63:64:bf:31:04:3f:cf: 17:55:90:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Ly8hhk30wqkAPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk YWI1MjU0NWEtNWMwOC00YmIwLTg5MjEtM2RkMjI1YmY2YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue1SA4RdDJ3/xj7sOx8Kbnkv4JflYa637JzE NXLnWxptwgaMqgNE0KAnKh8nV28Z1dpOIweMN4KIheJFakkGcSS45MITMPpfmDTU 2OZRqI0hF4lRR0szJAUWUyEl+iDgpyrejnrBxxuIuO39X1g3CCAOy7Fz9hG2iRnN Jm6gx76YUA7rNo7VXiFJtm4BIgbQf0VkgoYPFgsYZp12CRhUo4q/rd9bdzKVo666 pJh05hCjLbEJ3auLNC/Kh7Rr3dwg24xadva1l4oAC88r3wauyJGhbmyg+5fOxby0 wVjla6lbxvh9XR4Kek6yr0kvrT6uihKXwq3I7cnDZb6g/VTOJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvrOqQm9fopo6enfAVkGJBVnAZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDk0Mjc2ZWItYTIyYS0z ZTMzLThjNmQtMzdmNjhlMWY3Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIevcrFP7YcQjCU4AfEDCTygciQ54nSGW0y7IyfkqI1uKtjiQ2OAOWes oMeWH8g2nvSbLJT8hfTbi9WZbOY+zAPKCYokz05Xj3x0C+Ph7SHgF9FADSSuPdqg OhZr8qWOJDZOVBoVzlLI39w2Pa0A0d0oxZSNzwGrNFUTZIyPpJqRktbWEVL3e0Vz ZlWqeQ7aiE+E3EJAh9uWN4bnKFiJm+XH/JAHNJM3hckMnQUGfh/X5DxtHrI7xsPz UysSlGSZSQQK2PmRWZR7H0fC5mLV8Xm4CjlEVePSHefxj0+t5xOgE+ay0QPrWGbP LYKvD8kI2EjfEkBhY2S/MQQ/zxdVkA4= -----END CERTIFICATE-----Generated at Fri Jul 24 17:43:16 2026 by rpki-client