$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54d282d0-eeb2-3eca-8c35-c17c87927d1e.roa File: 54d282d0-eeb2-3eca-8c35-c17c87927d1e.roa (raw, json) Hash identifier: E9XzmY2dblCvQT8RPdgG1ZOIWi6QGaXaWL5OpYH3hfE= Subject key identifier: 3E:2A:8C:4B:E3:31:E1:AF:45:8F:9F:EC:61:7F:4A:73:B4:0C:AF:7D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E885A5788FAC37BE5AF7E5440 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54d282d0-eeb2-3eca-8c35-c17c87927d1e.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 3360 IP address blocks: 20.138.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:57:88:fa:c3:7b:e5:af:7e:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=a580fb06-d3e0-4156-ba79-48e160a6f905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:b3:e3:5c:05:0c:32:ef:c7:61:f2:cd:6d: 8e:a8:66:77:2d:01:f3:65:51:eb:17:92:5f:d5:6a: 14:ec:2a:6b:90:6e:2b:64:ee:61:e2:47:ae:ff:46: e5:05:f1:e8:de:7b:af:94:da:2e:cf:13:09:a5:6b: 9c:39:d6:41:5b:c5:fd:47:a9:77:60:01:f2:8f:59: 15:40:ed:9c:03:67:dc:99:35:ad:1c:f9:f0:1c:e5: bf:9a:98:ab:64:b5:07:3f:90:4c:23:56:06:a5:fd: 27:c5:c2:6b:b7:a6:e0:e9:70:e0:a3:4b:9e:b5:be: aa:61:22:89:ec:f0:24:5a:b8:bb:8f:56:33:c4:cd: f3:fe:79:49:fc:09:d0:10:24:de:17:fb:ee:f5:53: a0:b3:1f:5b:f0:c9:75:8b:7b:c0:70:bc:6a:2a:03: f2:43:9d:dd:3d:59:21:85:bf:e6:47:0b:8b:a6:d2: f9:ab:9f:ef:64:1d:62:6f:65:a9:4b:8c:19:17:76: 40:4c:f3:a1:3e:d5:fe:6b:26:16:88:8c:aa:da:ae: 2e:dd:4f:05:10:19:1b:aa:2c:79:23:ec:b7:3c:82: fa:81:93:25:55:37:7c:81:1a:89:ad:2d:83:eb:f4: ae:71:e7:96:61:ca:f0:01:4e:fd:6f:d7:9b:4c:bb: 74:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2A:8C:4B:E3:31:E1:AF:45:8F:9F:EC:61:7F:4A:73:B4:0C:AF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54d282d0-eeb2-3eca-8c35-c17c87927d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e4:8a:0e:04:d6:e7:20:b4:51:bc:e8:e1:52:9c:bb:c2:d7: d2:04:a0:a6:e7:20:4a:40:fb:5c:b5:3a:6d:55:cb:b6:6e:b6: f2:7b:79:28:e0:cc:52:ad:14:d1:b2:bb:2f:7e:52:b9:e3:23: 3c:de:68:93:f3:88:6e:57:74:7d:1d:53:b4:01:32:00:5c:d6: fc:08:00:8d:0d:08:67:31:95:52:12:6b:0d:dd:88:78:8f:66: a9:0a:bd:b1:60:7e:e7:03:a3:be:04:24:17:15:13:97:76:c5: 15:d3:6b:d6:84:b0:6e:d6:3c:87:93:2d:ec:58:ea:8e:e9:f7: 22:5f:7f:77:73:29:5e:f2:da:d5:e4:b5:b0:40:33:64:f2:67: fd:e0:92:db:40:9f:b0:ea:16:54:18:6b:9b:8b:39:ad:34:51: 31:25:75:d4:86:4b:b1:7a:5e:16:e0:ff:25:aa:c1:af:2c:35: a2:b0:f5:b2:83:a4:95:86:c0:db:76:89:88:e0:73:5c:e0:b5: 77:e3:26:45:c4:2b:c6:12:5a:b5:1b:a6:b0:18:6f:25:c3:d4: 34:e7:81:e9:d5:66:5b:42:70:de:cc:4d:01:19:c8:f1:96:8a: dd:58:a4:62:77:8b:b5:9c:75:c7:ef:84:a2:c8:cf:98:f7:49: df:bd:55:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWleI+sN75a9+VEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk YTU4MGZiMDYtZDNlMC00MTU2LWJhNzktNDhlMTYwYTZmOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx6z41wFDDLvx2HyzW2OqGZ3LQHzZVHrF5Jf 1WoU7CprkG4rZO5h4keu/0blBfHo3nuvlNouzxMJpWucOdZBW8X9R6l3YAHyj1kV QO2cA2fcmTWtHPnwHOW/mpirZLUHP5BMI1YGpf0nxcJrt6bg6XDgo0uetb6qYSKJ 7PAkWri7j1YzxM3z/nlJ/AnQECTeF/vu9VOgsx9b8Ml1i3vAcLxqKgPyQ53dPVkh hb/mRwuLptL5q5/vZB1ib2WpS4wZF3ZATPOhPtX+ayYWiIyq2q4u3U8FEBkbqix5 I+y3PIL6gZMlVTd8gRqJrS2D6/SuceeWYcrwAU79b9ebTLt0qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4qjEvjMeGvRY+f7GF/SnO0DK99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTRkMjgyZDAtZWViMi0z ZWNhLThjMzUtYzE3Yzg3OTI3ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIr2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELkig4E1ucgtFG86OFSnLvC19IEoKbnIEpA+1y1Om1Vy7ZutvJ7eSjg zFKtFNGyuy9+UrnjIzzeaJPziG5XdH0dU7QBMgBc1vwIAI0NCGcxlVISaw3diHiP ZqkKvbFgfucDo74EJBcVE5d2xRXTa9aEsG7WPIeTLexY6o7p9yJff3dzKV7y2tXk tbBAM2TyZ/3gkttAn7DqFlQYa5uLOa00UTElddSGS7F6Xhbg/yWqwa8sNaKw9bKD pJWGwNt2iYjgc1zgtXfjJkXEK8YSWrUbprAYbyXD1DTngenVZltCcN7MTQEZyPGW it1YpGJ3i7WcdcfvhKLIz5j3Sd+9VZQ= -----END CERTIFICATE-----Generated at Fri Jul 24 19:56:32 2026 by rpki-client