$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa File: 552f37d1-55ae-3591-bc00-063e37bf73cb.roa (raw, json) Hash identifier: HkHfQJ1ej3la2KJYRYw7dnc13aVnw1WZ+M/LOlLkSxY= Subject key identifier: 7D:98:E1:02:25:92:61:A1:54:78:F7:62:37:60:E5:13:E4:53:0A:0A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7A4D9CDC376B6A3CBA660E20 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 203 IP address blocks: 20.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:9c:dc:37:6b:6a:3c:ba:66:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=1d90ecbd-5085-4bea-ad1a-637df45efeed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:d5:fa:35:06:3d:e9:5b:12:a6:3f:9e:1a: 24:8d:38:04:2f:34:0c:7d:cb:be:bd:07:3a:4f:4f: 40:c7:2f:3f:23:f3:c2:1a:c9:f3:c8:24:0f:4f:af: 71:d5:9b:9a:f2:65:7a:40:16:4f:55:91:6f:b5:9f: e6:c1:a2:d9:7f:f0:f9:38:92:e3:c4:20:bc:c6:34: 8e:13:62:6a:aa:2f:8d:fb:45:ca:c1:70:35:d4:d7: a4:c6:77:46:ea:f2:9a:cd:54:5a:92:61:3b:b7:1d: 46:25:3c:ed:54:80:c4:34:a4:01:d3:d7:09:45:0b: 58:b0:92:de:24:89:2b:d5:4a:dd:21:65:e7:c8:72: 2c:92:0a:36:87:75:51:48:6e:f1:55:22:46:a2:58: e3:b4:43:8c:10:bc:bd:b2:58:55:8c:1b:d4:3e:9f: 2e:3b:c9:49:b1:89:c7:bd:54:47:11:40:42:d8:15: 31:27:6b:8f:4a:fa:16:73:7d:a0:38:a9:45:cd:68: 77:b0:23:2b:b8:40:41:2c:a0:18:9d:b9:9b:bb:8c: a8:30:5a:9c:c7:84:20:2e:99:87:2c:b8:ec:c9:ae: af:8c:cb:5f:18:4a:52:f3:92:53:6f:4e:13:8a:36: 5f:43:dc:09:07:be:6c:3e:50:23:89:d1:03:7f:5f: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:98:E1:02:25:92:61:A1:54:78:F7:62:37:60:E5:13:E4:53:0A:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c4:48:9d:6c:d4:3b:15:94:c1:e5:fd:96:71:af:58:0f:39: 6a:3b:39:56:88:5d:68:86:8a:1f:c0:33:77:e1:3e:56:e9:5b: 89:4a:aa:0e:0d:41:38:17:1d:42:56:3a:39:8a:f7:a8:7c:52: 7b:d8:60:08:ff:4d:e5:10:ed:4a:c0:2d:04:8d:7b:87:1b:16: 47:72:78:3a:4b:d8:30:8c:22:bb:2c:fd:aa:3e:61:63:2e:58: 85:60:7c:48:4c:a4:76:ea:f5:44:56:4a:61:f2:65:14:95:b8: dd:39:f6:56:f7:75:80:60:14:7c:06:9d:b5:87:81:fa:7a:34: d6:dc:ec:34:0c:46:d0:c2:73:df:cf:39:31:b8:b9:6d:53:a7: da:5e:b4:44:d8:fc:e2:85:07:9f:7c:75:f7:3a:8e:d3:a4:ce: 2d:a4:49:05:14:d8:f5:b9:85:70:08:f2:a2:81:39:e2:1d:55: 0a:d7:e2:17:e6:69:fa:1a:76:c2:a9:c3:70:52:6c:3d:c5:56: 83:e0:a4:61:60:90:70:0b:c9:5e:91:cb:7e:cc:a0:2f:72:28: 70:92:cd:7a:0c:96:ca:81:95:0b:23:ca:91:09:98:e3:41:20: 44:e1:9b:9a:da:a7:b7:25:3e:57:93:18:3b:7e:d4:53:c0:de: 95:f7:0a:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZzcN2tqPLpmDiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MWQ5MGVjYmQtNTA4NS00YmVhLWFkMWEtNjM3ZGY0NWVmZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJbV+jUGPelbEqY/nhokjTgELzQMfcu+vQc6 T09Axy8/I/PCGsnzyCQPT69x1Zua8mV6QBZPVZFvtZ/mwaLZf/D5OJLjxCC8xjSO E2Jqqi+N+0XKwXA11NekxndG6vKazVRakmE7tx1GJTztVIDENKQB09cJRQtYsJLe JIkr1UrdIWXnyHIskgo2h3VRSG7xVSJGoljjtEOMELy9slhVjBvUPp8uO8lJsYnH vVRHEUBC2BUxJ2uPSvoWc32gOKlFzWh3sCMruEBBLKAYnbmbu4yoMFqcx4QgLpmH LLjsya6vjMtfGEpS85JTb04TijZfQ9wJB75sPlAjidEDf19WfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2Y4QIlkmGhVHj3Yjdg5RPkUwoKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTUyZjM3ZDEtNTVhZS0z NTkxLWJjMDAtMDYzZTM3YmY3M2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDESJ1s1DsVlMHl/ZZxr1gPOWo7OVaIXWiGih/AM3fhPlbpW4lKqg4N QTgXHUJWOjmK96h8UnvYYAj/TeUQ7UrALQSNe4cbFkdyeDpL2DCMIrss/ao+YWMu WIVgfEhMpHbq9URWSmHyZRSVuN059lb3dYBgFHwGnbWHgfp6NNbc7DQMRtDCc9/P OTG4uW1Tp9petETY/OKFB598dfc6jtOkzi2kSQUU2PW5hXAI8qKBOeIdVQrX4hfm afoadsKpw3BSbD3FVoPgpGFgkHALyV6Ry37MoC9yKHCSzXoMlsqBlQsjypEJmONB IEThm5rap7clPleTGDt+1FPA3pX3Cmo= -----END CERTIFICATE-----Generated at Tue Oct 13 13:04:04 2026 by rpki-client