$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa File: 3cb30814-1743-3f4c-9f2b-43e764333641.roa (raw, json) Hash identifier: 4lhIzfSrmzDrUt7RjhyiUFgFOyAleTpdLDVz+eLWNsE= Subject key identifier: 0A:C3:D2:F9:D5:D8:6D:01:D4:07:8A:BA:BE:53:C3:27:7A:41:28:1E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7E7DC25B4A6B567C8ADD93C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 202 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c2:5b:4a:6b:56:7c:8a:dd:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=364e5702-7904-4338-abd7-eac557642d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:68:a0:33:11:cf:a6:50:4b:6b:17:9e:c8:eb: 88:9c:f5:e1:ec:77:fa:6c:3e:50:90:dc:e2:a1:97: ae:2e:8d:52:fe:0f:0d:6e:c4:61:e2:66:8b:7e:cf: 7b:1c:77:5e:01:ee:3f:15:85:53:65:30:5f:06:22: 25:d2:d3:87:6a:86:b4:a7:2c:dd:72:93:9a:a2:c5: a0:01:92:42:a3:29:83:9c:3f:31:f3:c4:62:83:6e: 32:33:12:b7:60:3e:9f:fc:36:0f:ab:0e:8b:e7:8e: 46:39:6c:e3:78:74:d2:bb:96:d6:34:a1:6a:b6:36: b7:b1:f4:c1:c3:6a:32:34:42:d8:c8:b0:21:52:d1: 06:8e:b8:03:0d:fc:69:ee:6b:6d:e5:42:b3:a3:95: 71:34:6d:63:99:03:a0:d1:b6:e8:e7:5b:ed:e8:f4: 3a:58:3e:f7:c1:a3:c6:71:0f:f1:c6:36:6f:f2:2f: 5e:51:3e:67:70:28:44:0a:fe:e3:50:5b:43:ef:aa: 37:1d:6c:36:b1:28:cb:36:64:df:d0:48:30:1e:95: f0:b7:85:b4:c5:e1:59:d1:53:dd:72:b6:be:6d:c8: c3:d1:52:de:c3:6c:1c:46:06:af:b3:0f:83:6d:22: e0:8c:62:37:81:29:95:1d:15:24:55:4b:86:42:a1: f9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C3:D2:F9:D5:D8:6D:01:D4:07:8A:BA:BE:53:C3:27:7A:41:28:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:88:e1:5f:1a:b0:16:d2:e8:1f:98:21:60:e4:ed:15:63:f8: 10:44:c2:da:1a:93:80:80:61:b8:a9:a0:84:b2:4a:05:ed:9f: 7d:65:4b:f2:ce:3a:ed:a2:3d:bb:25:98:2c:06:c5:da:cd:09: c1:76:5c:a9:bb:90:10:8a:40:ad:6c:00:a5:1c:5f:91:28:7c: 0c:2e:f9:23:12:51:27:25:c4:ff:3b:2a:59:03:3a:71:6b:c6: b5:57:79:f8:2a:29:f0:83:c6:d6:d5:84:3f:5d:80:f2:83:bc: ea:79:e0:52:63:93:bb:71:01:fb:67:4b:79:78:29:f9:a7:40: c3:03:70:6e:51:19:07:00:d4:92:e3:5d:b5:6a:77:37:cd:2f: 0e:5c:36:65:26:1c:28:5a:4c:cc:f6:60:cf:89:b4:f7:4a:c6: 8c:0f:91:28:26:f9:d5:d1:0f:46:6c:a1:ab:8a:3a:fb:25:15: e8:bd:65:6d:41:be:e7:f3:49:37:94:12:de:3f:8f:73:f5:59: 0b:13:a2:06:49:b2:d8:b9:36:d2:77:e0:05:1f:91:bf:7e:21: a2:41:19:06:8d:c3:e7:3e:37:d2:4c:b6:7e:11:16:d7:11:f3: b8:8a:db:25:fd:44:be:94:2c:99:46:65:55:09:4a:14:66:87: 2f:3b:d1:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcJbSmtWfIrdk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MzY0ZTU3MDItNzkwNC00MzM4LWFiZDctZWFjNTU3NjQyZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmigMxHPplBLaxeeyOuInPXh7Hf6bD5QkNzi oZeuLo1S/g8NbsRh4maLfs97HHdeAe4/FYVTZTBfBiIl0tOHaoa0pyzdcpOaosWg AZJCoymDnD8x88Rig24yMxK3YD6f/DYPqw6L545GOWzjeHTSu5bWNKFqtja3sfTB w2oyNELYyLAhUtEGjrgDDfxp7mtt5UKzo5VxNG1jmQOg0bbo51vt6PQ6WD73waPG cQ/xxjZv8i9eUT5ncChECv7jUFtD76o3HWw2sSjLNmTf0EgwHpXwt4W0xeFZ0VPd cra+bcjD0VLew2wcRgavsw+DbSLgjGI3gSmVHRUkVUuGQqH5BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArD0vnV2G0B1AeKur5Twyd6QSgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2NiMzA4MTQtMTc0My0z ZjRjLTlmMmItNDNlNzY0MzMzNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOI4V8asBbS6B+YIWDk7RVj+BBEwtoak4CAYbipoISySgXtn31lS/LO Ou2iPbslmCwGxdrNCcF2XKm7kBCKQK1sAKUcX5EofAwu+SMSUSclxP87KlkDOnFr xrVXefgqKfCDxtbVhD9dgPKDvOp54FJjk7txAftnS3l4KfmnQMMDcG5RGQcA1JLj XbVqdzfNLw5cNmUmHChaTMz2YM+JtPdKxowPkSgm+dXRD0ZsoauKOvslFei9ZW1B vufzSTeUEt4/j3P1WQsTogZJsti5NtJ34AUfkb9+IaJBGQaNw+c+N9JMtn4RFtcR 87iK2yX9RL6ULJlGZVUJShRmhy870cI= -----END CERTIFICATE-----Generated at Wed Oct 14 17:53:01 2026 by rpki-client