$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa File: 38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa (raw, json) Hash identifier: cDOteaE3b8hi3mgeWjuD4Dfr/lL6MkKQMoqW2cFg7aQ= Subject key identifier: 94:B6:96:C3:4C:5D:58:3D:0B:13:7E:17:33:98:0A:8B:83:7D:67:33 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E6F3A3DE06F09D512DCF9ABE0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 3360 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:3d:e0:6f:09:d5:12:dc:f9:ab:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=20b41d02-c6e2-4aa2-833e-9f6a191f4af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:61:7c:fe:27:f2:7e:44:ab:50:c0:db:08:25: a7:d3:d9:d2:2a:31:16:36:ca:95:df:14:0a:c0:29: 9f:e2:ac:21:53:48:46:ff:ad:2b:c2:8d:d4:db:3c: de:8a:d9:51:c1:49:6d:38:36:ec:d4:48:bf:dd:95: a4:fb:0c:69:25:a9:d1:fa:a1:3c:45:f7:07:ba:19: 61:2d:d9:1a:5f:e0:9c:80:93:40:b5:fc:4e:a3:3d: 44:d1:85:69:81:ea:14:42:c4:78:ef:60:ad:8f:8e: 35:93:b1:04:27:ef:f0:62:33:d5:35:00:f9:9d:94: c4:ac:3e:e0:fb:66:a2:39:b9:7c:79:a3:a9:2c:e8: 95:26:d0:e7:25:4b:39:cd:42:f7:e2:8c:a6:fd:42: c1:89:57:30:a7:c6:81:7e:47:f9:2d:a0:b0:fb:8e: 2e:b1:cc:6c:a9:19:97:e0:93:40:a7:c1:6f:91:46: b7:47:fc:fe:8f:bf:69:29:70:4a:22:84:fb:ee:8c: f8:86:25:94:df:10:9f:42:29:ed:dd:3c:43:46:49: 54:1e:fc:5d:62:25:a9:5e:3a:f6:a6:6f:9b:c6:ba: 1b:e6:00:25:01:26:20:b3:cd:db:a9:c6:c5:e6:46: d9:da:54:76:30:59:12:0d:c0:f3:3b:49:fa:6e:82: 8f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B6:96:C3:4C:5D:58:3D:0B:13:7E:17:33:98:0A:8B:83:7D:67:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:60:e0:44:65:8a:42:fa:bd:98:2c:bc:17:39:d0:4a:87:37: 1f:80:5b:4c:ac:b0:78:97:ef:a3:94:34:de:72:be:64:a5:17: 15:92:5b:43:a9:73:14:a0:1c:2b:2d:1c:e2:a4:ab:d7:81:ce: 0c:98:f6:84:61:fa:b8:ba:16:7c:28:53:48:af:ae:79:23:d6: 3c:69:79:96:89:9a:d2:6f:17:d0:2c:79:c4:f7:f7:4f:89:d9: 4c:15:b3:36:fd:f1:fe:66:b2:5a:e1:cd:94:18:ee:cd:9e:ad: 14:c1:6d:3f:ed:4c:6a:7b:53:a7:20:16:95:ae:b9:2c:b9:c0: d5:0e:86:27:fc:eb:62:c1:48:a9:db:1e:3d:02:f0:8e:21:94: 97:79:05:44:3d:c7:84:dc:6a:19:af:73:ce:dd:1f:42:92:3d: fd:e3:82:07:05:ce:4c:99:da:3d:8a:35:86:a4:be:78:41:99: dd:75:92:f3:6e:ce:2e:04:60:ed:7a:63:5c:8b:b5:7b:ee:6c: 3a:1a:ba:33:e6:9e:82:b8:dd:7c:20:30:a2:e3:b6:fb:ef:ed: 14:00:72:d2:ef:c8:a4:88:59:d9:40:a9:cb:84:79:81:38:d9: 94:ad:b0:70:ff:a9:21:75:bb:26:e2:3c:66:52:10:44:d7:a0: db:21:c4:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOj3gbwnVEtz5q+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MjBiNDFkMDItYzZlMi00YWEyLTgzM2UtOWY2YTE5MWY0YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGF8/ifyfkSrUMDbCCWn09nSKjEWNsqV3xQK wCmf4qwhU0hG/60rwo3U2zzeitlRwUltODbs1Ei/3ZWk+wxpJanR+qE8RfcHuhlh LdkaX+CcgJNAtfxOoz1E0YVpgeoUQsR472Ctj441k7EEJ+/wYjPVNQD5nZTErD7g +2aiObl8eaOpLOiVJtDnJUs5zUL34oym/ULBiVcwp8aBfkf5LaCw+44uscxsqRmX 4JNAp8FvkUa3R/z+j79pKXBKIoT77oz4hiWU3xCfQint3TxDRklUHvxdYiWpXjr2 pm+bxrob5gAlASYgs83bqcbF5kbZ2lR2MFkSDcDzO0n6boKP1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS2lsNMXVg9CxN+FzOYCouDfWczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhmNWYyYzQtYzFiMS0z YmU4LWFhNmYtMmVkNzg3MTNiMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhg4ERlikL6vZgsvBc50EqHNx+AW0yssHiX76OUNN5yvmSlFxWSW0Op cxSgHCstHOKkq9eBzgyY9oRh+ri6FnwoU0ivrnkj1jxpeZaJmtJvF9AsecT390+J 2UwVszb98f5mslrhzZQY7s2erRTBbT/tTGp7U6cgFpWuuSy5wNUOhif862LBSKnb Hj0C8I4hlJd5BUQ9x4Tcahmvc87dH0KSPf3jggcFzkyZ2j2KNYakvnhBmd11kvNu zi4EYO16Y1yLtXvubDoaujPmnoK43XwgMKLjtvvv7RQActLvyKSIWdlAqcuEeYE4 2ZStsHD/qSF1uybiPGZSEETXoNshxDo= -----END CERTIFICATE-----Generated at Fri Jul 24 14:48:42 2026 by rpki-client