$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa File: 5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa (raw, json) Hash identifier: ZIt6ZHmw6wLRWmywoW6DgQyxQlXHmW5V8uXnPf4zpis= Subject key identifier: 7E:FD:88:BD:64:D3:2B:63:F9:5B:F1:8B:8A:05:DF:84:AA:E7:A7:68 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F51D2C37E464E002FEB2FB800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:c3:7e:46:4e:00:2f:eb:2f:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=dbdaeecc-b1a3-4d87-b01a-ecf82c82545e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:d6:a3:9f:c5:be:8a:2a:35:3b:1c:7d:e8: cd:82:b5:c5:98:62:72:af:0c:5e:12:97:e5:da:44: 48:62:61:76:d5:22:ca:73:e6:28:17:64:04:b1:c0: 27:73:16:f3:51:92:db:05:8f:1d:03:46:6e:f6:3f: 65:c7:1e:1c:53:21:53:09:9f:06:8c:6a:3d:00:70: 06:84:7b:bb:ef:21:80:52:40:e7:33:f4:e5:17:23: 75:5a:d8:99:6c:cf:12:d4:ab:6f:64:67:66:2f:31: e4:8e:4a:be:a7:e1:f7:3f:ad:25:62:9f:3f:3b:6f: 2c:3c:1d:07:93:2a:fc:d6:80:a1:08:57:98:aa:fd: ee:42:90:f6:a7:77:4d:0c:dd:a0:6a:3a:14:1c:f8: 2a:ff:f7:dd:0a:90:e0:cd:e9:cc:f9:49:a5:df:b1: 56:b4:5b:0e:59:84:68:7f:ba:71:82:31:6b:0d:ef: b0:3a:3d:c9:dc:63:17:b6:0c:17:ec:94:d6:86:9f: 99:5b:2a:ba:9a:7e:76:5c:18:de:eb:c4:dd:ec:87: f6:e5:91:62:f4:27:58:3c:f2:8e:8e:ed:62:24:f2: dc:06:9a:1d:4e:2c:4d:f8:75:d0:79:0e:60:b3:e0: e2:0b:1b:63:f6:e1:90:54:b6:b8:cc:db:cb:17:f3: 51:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FD:88:BD:64:D3:2B:63:F9:5B:F1:8B:8A:05:DF:84:AA:E7:A7:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:86:d3:5c:05:6e:de:32:3b:8e:44:7e:ae:66:be:ee:25:96: fc:a1:dd:d8:80:7d:a7:b9:84:e0:5e:4e:f0:eb:ae:95:c6:4b: 83:35:cc:89:09:4e:a5:57:b2:ab:48:86:b8:a3:2a:f9:19:8d: ff:f4:9c:ff:11:0f:a5:48:9e:74:c6:42:40:98:20:f3:8f:4d: f5:54:cb:ce:8d:cf:87:7b:30:8c:01:ae:61:49:86:5a:d6:5e: 65:82:b4:92:15:0d:ca:7d:68:7c:4b:a7:29:10:c9:3f:4c:4c: e4:91:58:40:0b:a3:a1:df:f2:7d:f5:61:ab:f8:a2:00:f1:00: 6a:c7:fb:38:39:dc:fe:82:43:64:dd:5e:7e:9d:b3:9b:30:87: d4:9c:8a:3d:e0:b7:e8:49:44:2d:46:0d:2b:9e:91:fd:cb:9a: 61:6b:ea:83:11:4f:60:8c:db:f5:02:31:e1:76:39:c3:d7:73: 33:b5:e0:dd:27:d0:32:1d:7f:a4:d8:f2:30:fd:2b:33:60:8f: 25:f6:b8:c8:cf:61:3b:c7:6e:83:2f:23:48:37:48:91:5a:88: 03:a6:fa:6e:15:f7:12:0c:51:24:34:de:47:05:b5:d1:29:45: 06:f2:13:5b:50:dc:ec:5f:37:c3:26:b8:20:2d:db:db:11:12: 61:90:55:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0sN+Rk4AL+svuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZGJkYWVlY2MtYjFhMy00ZDg3LWIwMWEtZWNmODJjODI1NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUbWo5/FvooqNTscfejNgrXFmGJyrwxeEpfl 2kRIYmF21SLKc+YoF2QEscAncxbzUZLbBY8dA0Zu9j9lxx4cUyFTCZ8GjGo9AHAG hHu77yGAUkDnM/TlFyN1WtiZbM8S1KtvZGdmLzHkjkq+p+H3P60lYp8/O28sPB0H kyr81oChCFeYqv3uQpD2p3dNDN2gajoUHPgq//fdCpDgzenM+Uml37FWtFsOWYRo f7pxgjFrDe+wOj3J3GMXtgwX7JTWhp+ZWyq6mn52XBje68Td7If25ZFi9CdYPPKO ju1iJPLcBpodTixN+HXQeQ5gs+DiCxtj9uGQVLa4zNvLF/NRPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH79iL1k0ytj+Vvxi4oF34Sq56doMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWEyYTZkMzEtOGNkMC0z NTIxLWJlYjEtZjY5YzA0NmNiMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiG01wFbt4yO45Efq5mvu4llvyh3diAfae5hOBeTvDrrpXGS4M1zIkJ TqVXsqtIhrijKvkZjf/0nP8RD6VInnTGQkCYIPOPTfVUy86Nz4d7MIwBrmFJhlrW XmWCtJIVDcp9aHxLpykQyT9MTOSRWEALo6Hf8n31Yav4ogDxAGrH+zg53P6CQ2Td Xn6ds5swh9Scij3gt+hJRC1GDSuekf3LmmFr6oMRT2CM2/UCMeF2OcPXczO14N0n 0DIdf6TY8jD9KzNgjyX2uMjPYTvHboMvI0g3SJFaiAOm+m4V9xIMUSQ03kcFtdEp RQbyE1tQ3OxfN8MmuCAt29sREmGQVbw= -----END CERTIFICATE-----Generated at Wed Oct 14 01:45:51 2026 by rpki-client