$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa File: 1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa (raw, json) Hash identifier: MTvxKf9RgfW0HD3VmDdvWY0bsJzxp0Xkg/G0VdvajaE= Subject key identifier: 6E:96:1D:75:C4:C8:BB:B9:4D:46:EF:E4:D8:CC:11:6C:CA:DE:48:B6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F46A7E77CCFD3B7BCD98ED100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e7:7c:cf:d3:b7:bc:d9:8e:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=6a7974be-3460-4b8b-a906-f2ced9d167f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:a0:21:af:88:36:47:1e:e8:9e:91:4b:40: 1d:11:9f:53:25:2a:2c:07:87:27:6f:cc:b1:e4:c8: 9f:47:11:2a:9c:db:8b:de:85:40:03:66:8a:14:79: 55:4d:a4:07:53:af:5b:7c:a4:b7:34:32:69:22:9c: e1:8b:85:e0:ac:5c:7e:fe:aa:7c:58:d8:5b:c1:90: 10:7c:da:2b:45:ba:2d:04:3d:84:ba:58:de:b8:0b: 5f:95:ad:e2:5a:9d:fa:e8:98:3c:6f:71:4c:48:ea: 0d:05:1f:a6:92:af:4e:1c:dd:22:6f:70:78:fc:f5: a0:19:43:1e:29:a5:c8:b5:c6:84:39:fc:c0:39:e9: 24:55:e8:0e:91:84:3a:07:69:91:6a:c4:a5:a0:ba: 3e:a4:7f:2e:da:1c:32:60:f7:1f:3a:74:3d:70:4c: 29:6f:6f:d4:93:75:19:ac:33:08:57:4a:f5:f1:44: 23:54:2d:a5:8e:c4:a9:9c:54:41:d3:2b:7c:0f:97: b7:70:b4:7a:6c:c4:1a:a6:cc:94:db:98:d7:ea:5d: 76:d8:5d:f0:f3:82:3f:fc:9b:ae:dd:d7:92:22:b9: 4c:57:f8:11:a8:e7:85:6e:ba:c1:c3:46:aa:88:2c: 63:45:40:00:bf:c7:6e:c6:19:19:f4:1f:08:5c:a4: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:96:1D:75:C4:C8:BB:B9:4D:46:EF:E4:D8:CC:11:6C:CA:DE:48:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:01:8a:f5:17:4e:f4:c3:b5:0b:98:91:a0:0c:f4:7a:78:86: 50:ba:21:db:a9:a9:6a:71:1f:37:15:ed:ef:aa:34:d9:c4:fe: 09:bc:6c:8c:68:b1:26:70:5b:6a:0d:99:7d:be:0f:21:d0:a4: 36:5e:58:78:b4:58:e1:47:9d:36:93:1e:a3:ce:07:85:0f:2a: 81:94:33:ef:95:1f:9f:79:3f:93:95:df:31:a8:a0:de:66:8f: 2c:2b:c5:b5:9f:f9:e7:a4:e6:26:62:fd:5b:78:da:b2:ea:94: d7:ba:02:93:64:a5:22:cd:c7:15:51:61:82:54:fb:6c:f1:98: d7:1f:11:f9:b2:58:9a:1d:39:c8:ae:3c:68:64:e9:77:4f:dc: 76:93:b9:3e:57:fc:b4:08:70:d9:36:d0:6c:ac:7f:8f:be:b8: 61:22:b2:85:b9:99:cd:df:5f:af:15:02:62:b2:2f:ea:7e:b7: fd:6a:ed:fb:48:6d:3e:e8:92:97:41:bd:24:52:85:ea:b1:9f: 33:14:a6:bf:46:69:94:f5:67:c8:b9:30:e0:c1:b5:0a:a5:dc: 86:91:ea:ff:91:be:5c:0b:5a:0c:06:51:32:27:79:05:e7:34: 52:e3:5a:83:d2:62:56:e6:a4:08:30:bd:f9:42:41:42:7f:80: dd:98:bf:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+d8z9O3vNmO0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk NmE3OTc0YmUtMzQ2MC00YjhiLWE5MDYtZjJjZWQ5ZDE2N2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKOgIa+INkce6J6RS0AdEZ9TJSosB4cnb8yx 5MifRxEqnNuL3oVAA2aKFHlVTaQHU69bfKS3NDJpIpzhi4XgrFx+/qp8WNhbwZAQ fNorRbotBD2EuljeuAtfla3iWp366Jg8b3FMSOoNBR+mkq9OHN0ib3B4/PWgGUMe KaXItcaEOfzAOekkVegOkYQ6B2mRasSloLo+pH8u2hwyYPcfOnQ9cEwpb2/Uk3UZ rDMIV0r18UQjVC2ljsSpnFRB0yt8D5e3cLR6bMQapsyU25jX6l122F3w84I//Juu 3deSIrlMV/gRqOeFbrrBw0aqiCxjRUAAv8duxhkZ9B8IXKQa1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6WHXXEyLu5TUbv5NjMEWzK3ki2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMWE1NDRhMjEtZjljZC0z MjQ3LWFiMWQtMDI4ZDEzM2MzZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUBivUXTvTDtQuYkaAM9Hp4hlC6IdupqWpxHzcV7e+qNNnE/gm8bIxo sSZwW2oNmX2+DyHQpDZeWHi0WOFHnTaTHqPOB4UPKoGUM++VH595P5OV3zGooN5m jywrxbWf+eek5iZi/Vt42rLqlNe6ApNkpSLNxxVRYYJU+2zxmNcfEfmyWJodOciu PGhk6XdP3HaTuT5X/LQIcNk20Gysf4++uGEisoW5mc3fX68VAmKyL+p+t/1q7ftI bT7okpdBvSRSheqxnzMUpr9GaZT1Z8i5MODBtQql3IaR6v+RvlwLWgwGUTIneQXn NFLjWoPSYlbmpAgwvflCQUJ/gN2Yv3M= -----END CERTIFICATE-----Generated at Sun Oct 11 21:09:27 2026 by rpki-client