$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa File: 2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa (raw, json) Hash identifier: PGHscIeNSwMpM8MSgtQo/cK2UOuMBCFrq0wuml6Y2+0= Subject key identifier: 50:5A:13:1B:68:81:32:FE:9A:93:8E:23:2F:7E:6B:3B:F5:F0:AA:E3 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7A4D9D6E0FD3BB2881EA2EC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 3360 IP address blocks: 20.154.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:9d:6e:0f:d3:bb:28:81:ea:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=5f1d7107-727e-410a-b454-fc2a9ec07910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:a4:b8:55:0c:97:81:74:a0:2c:b6:33:5e: 45:de:8f:01:7d:30:d8:dd:05:56:34:69:8c:39:77: f6:da:a1:c0:d6:56:f5:76:60:4d:ce:05:a5:45:8a: 92:7f:f3:dc:da:9c:a3:b4:aa:09:ee:db:f1:c3:3c: 29:a1:6a:a3:33:7f:b9:00:61:cf:77:fe:f9:1d:d8: fe:14:87:ea:d4:63:2c:1a:28:af:6a:50:87:4d:7c: 5c:d4:79:c9:00:2e:86:69:ed:52:ad:2b:8c:c9:bb: 58:67:19:33:bc:6b:39:54:64:73:49:63:b5:ad:da: 05:b0:a7:1c:4c:89:42:f3:a4:0e:ec:98:b7:2d:b8: 75:5e:99:d5:be:ea:3d:4e:58:32:7c:67:ee:2d:02: a6:f2:64:ff:53:f3:41:98:71:21:72:de:f6:4e:2c: 0c:95:b4:a2:72:97:a6:75:ec:f6:05:a6:e5:64:b3: b8:b0:14:c9:10:a8:6b:40:b3:a5:51:b0:73:5c:31: 44:c7:97:d8:15:7f:69:ed:0a:e4:c8:28:01:0e:28: 8a:30:44:d8:62:7a:9f:49:ed:37:c7:5d:c5:91:f0: 9b:d9:20:8d:fa:6d:70:ed:12:86:28:d5:3e:cf:35: 4b:c3:ab:16:52:c5:f5:d4:51:f5:53:e0:4f:b1:ab: 2e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5A:13:1B:68:81:32:FE:9A:93:8E:23:2F:7E:6B:3B:F5:F0:AA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.154.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e3:80:28:41:b2:cd:40:cc:eb:6b:8d:f4:70:51:43:72:e5: 09:da:64:db:fa:ed:2c:3f:39:f2:fc:88:2f:91:00:78:16:7c: 24:1f:73:be:38:94:1f:34:b8:24:11:3e:82:95:f4:2d:42:11: 32:e6:46:61:e5:71:fa:f2:19:bb:67:d1:7d:16:5b:a6:f3:3d: 0e:d6:b8:05:d0:6d:5b:98:bf:a4:c1:9d:96:8c:62:08:93:f5: aa:7a:1f:c6:45:03:3b:36:a3:71:d4:8e:a7:b5:c2:1b:91:ee: ed:ae:5f:1a:34:fe:a5:8a:bd:7d:aa:db:aa:74:ef:ef:59:e4: 77:3e:21:69:08:c9:78:27:6f:96:0e:7c:01:2b:c1:32:fc:bc: 38:2d:ec:57:c2:c3:7a:15:5f:18:ee:92:ad:7e:66:d6:5e:cf: f8:9e:22:a1:35:ca:29:03:08:2a:a2:4c:0e:eb:94:45:6a:c4: 1f:4d:ea:d3:4d:0a:5b:e4:68:40:cc:e2:df:ef:ec:36:dc:4c: 34:9d:cc:b1:41:c6:24:d6:ac:30:60:f0:fb:be:dd:71:d0:e1: 76:4b:77:5c:8c:10:9e:e6:e4:4f:1a:ff:3e:8d:39:b0:de:a4: 63:9a:c9:88:67:4f:cc:89:fa:b7:ae:94:2e:45:0f:43:7a:75: 70:c0:17:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZ1uD9O7KIHqLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NWYxZDcxMDctNzI3ZS00MTBhLWI0NTQtZmMyYTllYzA3OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjSkuFUMl4F0oCy2M15F3o8BfTDY3QVWNGmM OXf22qHA1lb1dmBNzgWlRYqSf/Pc2pyjtKoJ7tvxwzwpoWqjM3+5AGHPd/75Hdj+ FIfq1GMsGiivalCHTXxc1HnJAC6Gae1SrSuMybtYZxkzvGs5VGRzSWO1rdoFsKcc TIlC86QO7Ji3Lbh1XpnVvuo9TlgyfGfuLQKm8mT/U/NBmHEhct72TiwMlbSicpem dez2BablZLO4sBTJEKhrQLOlUbBzXDFEx5fYFX9p7QrkyCgBDiiKMETYYnqfSe03 x13FkfCb2SCN+m1w7RKGKNU+zzVLw6sWUsX11FH1U+BPsasuPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBaExtogTL+mpOOIy9+azv18KrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMmVhOTdkMjctYjM1Zi0z OWRkLWE4YTEtYWU5NTQwOTg2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJpaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPjgChBss1AzOtrjfRwUUNy5QnaZNv67Sw/OfL8iC+RAHgWfCQfc744 lB80uCQRPoKV9C1CETLmRmHlcfryGbtn0X0WW6bzPQ7WuAXQbVuYv6TBnZaMYgiT 9ap6H8ZFAzs2o3HUjqe1whuR7u2uXxo0/qWKvX2q26p07+9Z5Hc+IWkIyXgnb5YO fAErwTL8vDgt7FfCw3oVXxjukq1+ZtZez/ieIqE1yikDCCqiTA7rlEVqxB9N6tNN ClvkaEDM4t/v7DbcTDSdzLFBxiTWrDBg8Pu+3XHQ4XZLd1yMEJ7m5E8a/z6NObDe pGOayYhnT8yJ+reulC5FD0N6dXDAFyM= -----END CERTIFICATE-----Generated at Tue Oct 13 16:29:53 2026 by rpki-client