$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa File: 3844cb66-4923-3faf-8c4d-519000648600.roa (raw, json) Hash identifier: XAJjNf5PV2wNtVn/ogsaYkhL0JCR7BcwP7k4R879v9g= Subject key identifier: 30:FD:6B:F1:B9:ED:DB:2E:1E:09:AE:6E:EA:3C:49:23:79:2C:51:17 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F46A7E749524957B2A6FDB400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e7:49:52:49:57:b2:a6:fd:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=5a642a7b-907f-4132-b5b8-4e30592ab154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:f8:ca:ff:2f:29:a6:90:30:e3:2c:5b:64: b6:d7:ae:1a:06:53:d2:fc:2c:9c:c8:1d:87:c9:8b: b9:5c:b4:a7:1c:00:ea:5f:3b:a3:ce:27:fc:1c:89: 6e:8a:c8:34:eb:09:f7:a6:e6:21:f2:7e:0c:81:86: 41:15:53:93:e9:67:c3:84:0a:14:1f:98:4e:57:41: 15:ff:83:d6:fd:69:0f:0e:88:33:9e:19:ac:ca:70: 96:fe:14:3a:a5:bb:20:d0:56:8d:c0:e0:60:8e:b8: be:34:12:6c:e7:8e:7e:6f:33:75:e2:92:ce:0d:65: 12:5d:9a:99:17:b8:0c:4a:e5:17:38:e1:a3:ee:57: 1e:12:9d:c3:77:96:07:d3:45:f3:2b:f2:92:8d:cc: 87:54:81:cd:1b:0c:60:93:7c:da:a7:53:f6:4f:4f: e3:92:dd:35:54:9a:12:80:6a:f7:2a:85:bf:7f:63: 27:1b:fe:28:57:de:8b:f1:15:b6:f0:48:58:53:79: 6b:6a:90:7a:29:d2:2f:2b:b2:ce:78:cf:98:b0:5e: ac:82:15:4f:d0:d1:66:62:26:91:af:f3:69:50:ea: 6a:be:65:92:a5:0f:30:10:c1:f5:52:f1:0a:f8:f6: b4:eb:84:71:f7:fe:01:09:54:84:2b:87:71:99:52: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FD:6B:F1:B9:ED:DB:2E:1E:09:AE:6E:EA:3C:49:23:79:2C:51:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:cb:fb:02:3d:25:1b:5a:14:54:2e:fc:b4:3b:5e:4d:aa:85: d5:ed:84:55:cf:88:be:ec:63:ee:5f:7b:55:83:93:96:36:b9: 1b:25:f4:56:fc:77:b0:f3:a5:46:28:82:d3:32:14:a3:14:33: 18:7f:c0:29:29:4c:9c:90:5a:85:9b:c9:77:0e:69:c6:5f:0d: f7:83:27:64:a9:14:ed:83:af:c8:72:16:2c:83:a4:a0:e3:74: f8:3c:89:e2:d4:f1:c4:8d:76:2d:c2:43:37:db:b3:fe:e9:26: cf:e0:ab:56:7c:65:04:52:5f:f5:07:db:23:f3:95:55:3c:c0: bc:e5:a7:60:2e:72:d6:66:91:94:a5:6c:de:36:2f:50:02:8e: bc:78:8f:3e:47:2f:11:9d:1e:c9:ac:4a:20:16:1d:3b:09:1f: d2:02:ab:7a:f4:8a:d0:59:70:22:ca:ae:63:f8:95:8a:39:8b: db:89:2a:12:f1:4b:d3:67:c8:9b:f3:92:12:59:f7:b5:b1:19: 48:38:54:ff:92:83:6f:57:00:50:33:fa:b0:31:a0:1c:fb:a0: a3:53:7c:66:00:e5:c5:a8:de:ba:d2:aa:0d:cf:5f:3f:07:bc: 84:b2:6d:5e:81:5e:56:27:cb:ad:16:c3:91:24:7e:4f:d0:36: ff:2b:fc:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+dJUklXsqb9tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk NWE2NDJhN2ItOTA3Zi00MTMyLWI1YjgtNGUzMDU5MmFiMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgX4yv8vKaaQMOMsW2S2164aBlPS/CycyB2H yYu5XLSnHADqXzujzif8HIluisg06wn3puYh8n4MgYZBFVOT6WfDhAoUH5hOV0EV /4PW/WkPDogznhmsynCW/hQ6pbsg0FaNwOBgjri+NBJs545+bzN14pLODWUSXZqZ F7gMSuUXOOGj7lceEp3Dd5YH00XzK/KSjcyHVIHNGwxgk3zap1P2T0/jkt01VJoS gGr3KoW/f2MnG/4oV96L8RW28EhYU3lrapB6KdIvK7LOeM+YsF6sghVP0NFmYiaR r/NpUOpqvmWSpQ8wEMH1UvEK+Pa064Rx9/4BCVSEK4dxmVKF4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD9a/G57dsuHgmubuo8SSN5LFEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzg0NGNiNjYtNDkyMy0z ZmFmLThjNGQtNTE5MDAwNjQ4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjL+wI9JRtaFFQu/LQ7Xk2qhdXthFXPiL7sY+5fe1WDk5Y2uRsl9Fb8 d7DzpUYogtMyFKMUMxh/wCkpTJyQWoWbyXcOacZfDfeDJ2SpFO2Dr8hyFiyDpKDj dPg8ieLU8cSNdi3CQzfbs/7pJs/gq1Z8ZQRSX/UH2yPzlVU8wLzlp2AuctZmkZSl bN42L1ACjrx4jz5HLxGdHsmsSiAWHTsJH9ICq3r0itBZcCLKrmP4lYo5i9uJKhLx S9NnyJvzkhJZ97WxGUg4VP+Sg29XAFAz+rAxoBz7oKNTfGYA5cWo3rrSqg3PXz8H vISybV6BXlYny60Ww5Ekfk/QNv8r/Ks= -----END CERTIFICATE-----Generated at Sun Oct 11 19:57:28 2026 by rpki-client