$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4126ee82-288b-3022-99fa-acba46d2e16d.roa File: 4126ee82-288b-3022-99fa-acba46d2e16d.roa (raw, json) Hash identifier: EjuWhSkB5EiWA1aRIMzuuhr3a7U1PbFlooDO5D6tMJI= Subject key identifier: 8A:46:ED:34:49:A5:53:43:BD:1D:B3:4E:23:F9:39:CA:B5:6C:58:DF Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7A4D9D563898AA59F3450480 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4126ee82-288b-3022-99fa-acba46d2e16d.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 3360 IP address blocks: 20.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:9d:56:38:98:aa:59:f3:45:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=d44c78e8-6a9e-4d3b-9628-be555f4fc52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:85:48:c6:c0:e3:e6:9b:b2:fc:d8:56:21: 0d:50:6d:21:f7:6b:ec:8a:dc:7b:3b:d3:1c:a3:de: 26:48:5f:95:5b:ea:3e:92:2b:aa:8a:d3:37:91:89: d4:2e:95:b5:c2:3d:53:eb:5a:63:4c:01:88:4c:c4: f0:9d:1e:03:e3:03:f9:75:f4:99:d3:58:96:6d:ad: 46:6c:42:0d:7d:9f:26:7e:c4:8d:8b:71:47:54:49: 13:9b:66:62:ed:3a:cd:02:28:6d:39:e0:88:6d:a4: f2:78:0d:eb:af:9f:7f:61:67:b5:9a:57:bc:36:b7: 0f:41:4c:5d:01:05:d6:ff:2f:e6:e6:24:c2:03:3b: 57:0d:23:44:b1:44:6f:9b:c6:25:8b:d0:c8:0a:37: 7c:3d:9e:1a:38:e7:9b:57:42:3f:4f:8e:f8:21:5e: 83:ad:9f:19:fc:7f:06:e7:9a:63:30:c5:b6:dd:cd: 06:76:fa:ab:f7:a6:e7:25:da:01:bb:dd:06:14:b4: 91:a2:ae:4c:24:b8:b2:3e:0c:b7:3d:a5:65:3d:da: e8:06:aa:c3:d8:7e:de:ad:62:8c:b9:cf:28:2c:bc: 97:75:72:75:91:4c:1b:5c:36:62:6f:d1:25:51:29: 2e:87:0c:08:4b:93:1b:ba:19:e4:0b:ec:53:5e:1f: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:46:ED:34:49:A5:53:43:BD:1D:B3:4E:23:F9:39:CA:B5:6C:58:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4126ee82-288b-3022-99fa-acba46d2e16d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:62:f6:d3:d8:a0:03:8e:dd:d6:93:ae:49:0d:03:5d:c4:6d: 67:d3:0b:14:7c:00:ba:86:3c:27:06:88:ee:4d:49:50:f1:31: cd:12:0a:f6:7c:a3:38:0f:3e:d9:5f:7d:f8:38:ff:73:a7:59: 51:ad:70:52:69:71:39:33:9a:a5:af:5b:27:c6:56:75:ba:9c: 09:ab:2e:53:cd:bd:ce:8b:87:8f:73:e7:46:1c:a7:59:88:f6: b0:fb:0b:50:b0:83:c2:1f:26:a9:34:da:04:82:33:47:3b:8f: 3e:5d:c0:ab:8f:13:65:58:9b:81:0e:41:e8:a2:b6:e3:ab:b4: 5a:20:35:16:87:62:03:89:06:a0:81:6f:f2:03:f3:80:8d:8b: bf:2a:03:7b:d7:f9:d2:59:ac:0a:ac:75:da:34:a8:87:8b:9d: 9e:65:b6:fe:e9:ae:c9:fd:80:34:92:57:a1:45:6b:07:fa:9d: df:91:d1:c2:a5:70:a4:77:05:dc:88:e4:43:60:fe:31:75:61: 98:04:5e:97:4f:2a:03:60:df:91:9a:f2:cd:69:34:cf:12:ec: 19:f4:66:da:4f:c0:f4:63:f6:15:0f:9c:a7:06:a5:c1:98:4a: 88:04:a2:8f:c0:db:1d:96:c7:46:ce:91:e4:64:18:eb:09:9c: 51:22:dc:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZ1WOJiqWfNFBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDQ0Yzc4ZTgtNmE5ZS00ZDNiLTk2MjgtYmU1NTVmNGZjNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAyFSMbA4+absvzYViENUG0h92vsitx7O9Mc o94mSF+VW+o+kiuqitM3kYnULpW1wj1T61pjTAGITMTwnR4D4wP5dfSZ01iWba1G bEINfZ8mfsSNi3FHVEkTm2Zi7TrNAihtOeCIbaTyeA3rr59/YWe1mle8NrcPQUxd AQXW/y/m5iTCAztXDSNEsURvm8Yli9DICjd8PZ4aOOebV0I/T474IV6DrZ8Z/H8G 55pjMMW23c0Gdvqr96bnJdoBu90GFLSRoq5MJLiyPgy3PaVlPdroBqrD2H7erWKM uc8oLLyXdXJ1kUwbXDZib9ElUSkuhwwIS5MbuhnkC+xTXh/UXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpG7TRJpVNDvR2zTiP5Ocq1bFjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDEyNmVlODItMjg4Yi0z MDIyLTk5ZmEtYWNiYTQ2ZDJlMTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9i9tPYoAOO3daTrkkNA13EbWfTCxR8ALqGPCcGiO5NSVDxMc0SCvZ8 ozgPPtlfffg4/3OnWVGtcFJpcTkzmqWvWyfGVnW6nAmrLlPNvc6Lh49z50Ycp1mI 9rD7C1Cwg8IfJqk02gSCM0c7jz5dwKuPE2VYm4EOQeiituOrtFogNRaHYgOJBqCB b/ID84CNi78qA3vX+dJZrAqsddo0qIeLnZ5ltv7prsn9gDSSV6FFawf6nd+R0cKl cKR3BdyI5ENg/jF1YZgEXpdPKgNg35Ga8s1pNM8S7Bn0ZtpPwPRj9hUPnKcGpcGY SogEoo/A2x2Wx0bOkeRkGOsJnFEi3Lg= -----END CERTIFICATE-----Generated at Tue Oct 13 18:40:18 2026 by rpki-client