$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa File: 40d296d1-278c-3f5b-b993-eb056d922ec1.roa (raw, json) Hash identifier: abaU8yf9WobmWYFyg0eLZWkuO7G3AbRp+xFBKKnTAEk= Subject key identifier: 93:AE:54:F4:EB:8C:E5:A0:3B:62:63:72:A1:E0:EF:79:FF:4E:9E:57 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62D5EA328CE5951B643408 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 202 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:d5:ea:32:8c:e5:95:1b:64:34:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=63e0c430-5eb1-474d-ae53-9c5f10ea3ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:73:4e:fc:41:26:84:64:cb:b1:aa:e8:47: 57:a4:ab:b4:a0:bc:da:dc:85:3f:bb:47:51:da:c3: d4:b4:d9:32:42:82:df:35:f9:15:6a:f8:c9:7f:50: 1d:a0:9f:fe:4c:6c:4b:30:7e:78:29:8d:8a:c4:89: 0a:4e:9e:fa:60:8c:d3:82:38:59:33:61:b1:58:8d: ec:94:ba:6e:08:0b:bc:df:25:a0:e0:a5:03:d4:90: f0:f5:7b:fb:1d:7b:bb:e7:20:27:24:a1:63:e1:bf: c7:e2:e1:43:8e:19:1b:66:90:a7:21:33:bd:ea:e6: 88:b9:bc:01:01:a1:30:c8:ca:66:e5:50:34:3c:71: 0a:60:56:f8:30:5d:c1:06:86:f9:a4:09:ac:36:f2: ea:6f:6b:68:00:3d:a0:98:b8:99:b1:7f:5e:4d:d6: 59:23:bc:4d:ba:34:ab:ba:ea:ce:d0:a3:a1:6b:59: 89:6e:fc:c6:13:d7:87:3e:3c:38:1e:86:c8:70:e8: d2:48:0a:13:8d:ee:7b:e1:01:fc:74:60:33:a9:2a: e9:34:ef:f4:50:21:ba:4c:be:2d:ad:43:f5:ad:3f: 70:ea:13:6b:a3:d4:9f:5f:ea:f6:de:21:79:a8:48: 3c:ab:94:0b:d6:08:b1:08:e5:cd:77:d4:2b:b3:9a: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AE:54:F4:EB:8C:E5:A0:3B:62:63:72:A1:E0:EF:79:FF:4E:9E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:02:69:b1:14:72:75:f6:c1:50:87:d9:10:bf:3f:96:5c:15: d6:0e:5f:36:98:68:59:e4:28:b8:01:b5:32:21:8c:2c:62:6a: c1:9e:43:37:8e:4c:ec:00:eb:ec:a2:1e:00:6f:bd:ed:ad:5d: 2d:32:0c:3d:ce:14:9c:1e:9f:17:a4:ac:70:ec:33:40:12:4d: 2c:e6:4d:08:52:c1:08:98:0e:dd:8f:3c:1b:c4:a6:41:6a:85: 73:dd:5d:a5:fc:9c:84:8a:44:30:73:7f:87:6b:40:d2:9b:d9: a8:72:9c:68:b0:27:16:8f:0a:be:3b:79:20:cd:8d:9a:ef:20: 1d:d4:cc:ea:b7:a4:de:20:b2:e7:86:ca:21:a6:75:8f:73:99: 83:a4:6f:89:69:81:1f:7f:fc:7d:26:a3:7f:39:a1:80:66:e9: fc:d8:75:f4:bc:94:a1:1a:03:0d:81:35:8f:97:d4:77:72:72: 89:4f:3d:06:7a:3c:7d:77:b6:e0:b8:f4:f6:04:5d:14:e8:1e: 8e:3d:4f:2b:47:97:da:75:0b:1a:82:67:d8:1a:dd:10:ed:31: 11:1d:fd:07:55:59:81:8e:bd:df:e5:db:14:6d:88:a9:81:4a: ea:c2:41:31:4b:bd:92:34:c5:62:21:5c:8a:5d:72:75:7e:4f: f9:18:58:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtXqMozllRtkNAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NjNlMGM0MzAtNWViMS00NzRkLWFlNTMtOWM1ZjEwZWEzY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J5zTvxBJoRky7Gq6EdXpKu0oLza3IU/u0dR 2sPUtNkyQoLfNfkVavjJf1AdoJ/+TGxLMH54KY2KxIkKTp76YIzTgjhZM2GxWI3s lLpuCAu83yWg4KUD1JDw9Xv7HXu75yAnJKFj4b/H4uFDjhkbZpCnITO96uaIubwB AaEwyMpm5VA0PHEKYFb4MF3BBob5pAmsNvLqb2toAD2gmLiZsX9eTdZZI7xNujSr uurO0KOha1mJbvzGE9eHPjw4HobIcOjSSAoTje574QH8dGAzqSrpNO/0UCG6TL4t rUP1rT9w6hNro9SfX+r23iF5qEg8q5QL1gixCOXNd9Qrs5pdMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOuVPTrjOWgO2JjcqHg73n/Tp5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDBkMjk2ZDEtMjc4Yy0z ZjViLWI5OTMtZWIwNTZkOTIyZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoCabEUcnX2wVCH2RC/P5ZcFdYOXzaYaFnkKLgBtTIhjCxiasGeQzeO TOwA6+yiHgBvve2tXS0yDD3OFJwenxekrHDsM0ASTSzmTQhSwQiYDt2PPBvEpkFq hXPdXaX8nISKRDBzf4drQNKb2ahynGiwJxaPCr47eSDNjZrvIB3UzOq3pN4gsueG yiGmdY9zmYOkb4lpgR9//H0mo385oYBm6fzYdfS8lKEaAw2BNY+X1HdycolPPQZ6 PH13tuC49PYEXRToHo49TytHl9p1CxqCZ9ga3RDtMREd/QdVWYGOvd/l2xRtiKmB SurCQTFLvZI0xWIhXIpdcnV+T/kYWF0= -----END CERTIFICATE-----Generated at Sun Oct 11 08:44:43 2026 by rpki-client