$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa File: 5f031e31-67c0-3135-9681-d0bb711aa7d1.roa (raw, json) Hash identifier: skpLaJJY5KPh2GTLvIvxw76ZoQuMRe5J80+cwd3Xodo= Subject key identifier: 15:9D:CD:01:31:FD:42:E3:C1:E0:20:1E:2C:B5:0C:46:85:4E:3E:7F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62D906962B59DB2A0D5D00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 202 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:d9:06:96:2b:59:db:2a:0d:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=278dd65a-f45d-46c2-89e8-f756661e5720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:3a:68:31:d4:12:0c:e7:33:af:dc:b9:51: b7:0f:d6:4b:ce:33:cc:ef:e1:ee:8d:f6:18:0b:00: 84:a9:b9:80:9f:97:b7:ef:98:88:64:d1:38:9d:fd: c9:98:6e:96:e8:65:38:3c:43:dc:94:85:4a:d1:6d: 5b:fc:62:52:69:01:81:83:52:40:e9:c8:c6:a8:f0: 1f:76:75:98:fa:6d:cc:2f:2d:6e:e0:7c:02:06:d7: 32:50:96:0c:78:20:dc:24:46:1d:25:59:b6:19:97: d5:3f:f5:fa:ba:3d:be:e8:83:ed:84:55:29:a2:d1: 1d:cb:51:ca:8b:34:41:53:80:61:5b:ce:b8:f5:8e: a3:24:ed:85:24:2b:f4:66:91:a1:e1:b2:d7:6e:ba: 88:48:75:53:82:85:67:4b:65:85:4f:4e:85:df:db: c0:87:88:9e:52:0f:10:17:8a:91:2b:c0:ac:de:0f: 61:1f:fa:3e:9f:80:0e:c3:71:76:73:d7:ec:7f:95: 82:2e:e0:3a:93:b4:e5:97:8b:f7:0a:7d:1c:ca:46: b8:11:a6:5d:37:83:b2:18:a9:19:33:b8:f4:6e:e5: 87:3d:ca:8d:f9:a2:cf:06:e0:33:e0:59:33:9b:ea: ec:ed:bf:12:76:53:85:38:36:1a:bb:f0:9f:06:af: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9D:CD:01:31:FD:42:E3:C1:E0:20:1E:2C:B5:0C:46:85:4E:3E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:b7:92:05:fa:0e:f5:4a:51:06:1b:80:c5:d2:8f:9f:43:5e: a7:46:9a:53:dc:e2:19:eb:96:86:e2:1c:76:b7:31:a7:89:39: b6:3d:06:8f:94:b1:38:d2:44:8f:39:4d:6b:c9:0c:db:5a:6f: f6:85:30:a1:3e:b3:22:ac:3e:ed:b9:14:bb:d3:86:b5:43:23: 09:b0:01:7f:9e:bd:81:db:7c:1e:4a:70:ae:56:64:ce:8d:71: e0:cf:df:0a:cf:1b:0a:95:eb:35:c9:99:fb:20:a5:73:ea:8d: 09:71:f8:fa:33:cc:dd:e5:31:fe:68:b4:70:14:85:8a:ef:82: 95:7b:3a:f7:ef:fe:29:bb:c7:92:44:3b:2d:cc:a5:30:09:90: e4:37:0b:6f:86:91:a9:83:4f:e8:c0:81:f7:cf:8d:d1:3d:50: 1e:76:ac:36:81:fd:b3:b3:c9:b4:fb:c4:80:6f:85:b2:57:4a: 90:ca:5b:f3:ec:51:69:9e:7a:2c:d2:2f:35:25:e8:82:fe:75: ae:a5:88:6b:44:21:44:68:7f:f4:f5:9c:9b:b6:2d:0a:b8:ec: 2d:c4:e8:55:43:60:c7:c5:15:d2:aa:a4:d4:6c:b5:19:82:9a: f2:47:a9:ac:0c:e9:ab:94:d5:b5:71:4e:32:4e:7a:90:ff:f3: d7:61:be:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtkGlitZ2yoNXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk Mjc4ZGQ2NWEtZjQ1ZC00NmMyLTg5ZTgtZjc1NjY2MWU1NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb46aDHUEgznM6/cuVG3D9ZLzjPM7+HujfYY CwCEqbmAn5e375iIZNE4nf3JmG6W6GU4PEPclIVK0W1b/GJSaQGBg1JA6cjGqPAf dnWY+m3MLy1u4HwCBtcyUJYMeCDcJEYdJVm2GZfVP/X6uj2+6IPthFUpotEdy1HK izRBU4BhW8649Y6jJO2FJCv0ZpGh4bLXbrqISHVTgoVnS2WFT06F39vAh4ieUg8Q F4qRK8Cs3g9hH/o+n4AOw3F2c9fsf5WCLuA6k7Tll4v3Cn0cyka4EaZdN4OyGKkZ M7j0buWHPcqN+aLPBuAz4Fkzm+rs7b8SdlOFODYau/CfBq9vawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWdzQEx/ULjweAgHiy1DEaFTj5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWYwMzFlMzEtNjdjMC0z MTM1LTk2ODEtZDBiYjcxMWFhN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJO3kgX6DvVKUQYbgMXSj59DXqdGmlPc4hnrlobiHHa3MaeJObY9Bo+U sTjSRI85TWvJDNtab/aFMKE+syKsPu25FLvThrVDIwmwAX+evYHbfB5KcK5WZM6N ceDP3wrPGwqV6zXJmfsgpXPqjQlx+PozzN3lMf5otHAUhYrvgpV7Ovfv/im7x5JE Oy3MpTAJkOQ3C2+GkamDT+jAgffPjdE9UB52rDaB/bOzybT7xIBvhbJXSpDKW/Ps UWmeeizSLzUl6IL+da6liGtEIURof/T1nJu2LQq47C3E6FVDYMfFFdKqpNRstRmC mvJHqawM6auU1bVxTjJOepD/89dhvsw= -----END CERTIFICATE-----Generated at Tue Oct 13 00:22:10 2026 by rpki-client