$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ab1770b-ddcb-3aa3-93bc-b4a95ef6dee3.roa File: 7ab1770b-ddcb-3aa3-93bc-b4a95ef6dee3.roa (raw, json) Hash identifier: yOFKYFuuA9YfqP/vvowqU5sBAvsDCrtNXKREeOmvms4= Subject key identifier: CC:DC:E4:20:DF:19:5F:39:9C:FC:D2:57:E7:38:BB:38:3C:63:51:B2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F4975E6DF1E480093781B51E0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ab1770b-ddcb-3aa3-93bc-b4a95ef6dee3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e6:df:1e:48:00:93:78:1b:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1c7283a5-b7eb-489f-99eb-578551e5d5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e2:65:1a:59:06:77:ef:be:52:81:ff:da:19: 73:8e:61:de:12:9e:ef:93:3b:ba:6b:73:7b:5b:a5: 17:3e:30:4d:8d:71:dd:7d:1d:bc:ba:d3:65:41:5b: 23:9f:ad:67:94:0d:6e:b9:92:31:f2:3c:50:bb:58: 96:9f:91:2c:95:1a:24:41:ff:47:52:f7:84:d9:90: 27:75:c1:79:c6:16:ca:07:9b:be:00:25:68:31:b7: c9:3b:bf:47:5c:1a:ca:3e:3d:a2:cf:66:10:7c:b4: 73:66:34:22:3b:f1:58:77:dd:e3:2f:f2:c9:03:c2: 47:aa:d9:fc:58:d6:98:40:83:ca:d2:e1:92:b4:b2: 87:12:5c:fd:2f:fa:5f:1e:82:be:ad:c4:24:51:a2: 09:d7:e9:87:9f:fe:6c:7e:cb:0e:47:1e:e1:87:e4: 9d:58:f2:17:bb:49:e7:61:ac:78:4b:0a:cc:5e:68: ff:7d:16:f0:76:87:65:4f:6f:62:40:1b:7a:1f:47: 89:16:59:2b:ef:91:f3:48:af:e3:eb:46:34:a5:3a: 30:6a:54:ba:4d:99:21:54:9f:1e:78:97:74:8d:86: 71:d6:27:15:68:97:4c:e3:51:1b:1c:a5:7a:9b:38: 74:8e:7f:f2:c8:23:82:d9:70:6e:35:b6:97:4b:7a: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DC:E4:20:DF:19:5F:39:9C:FC:D2:57:E7:38:BB:38:3C:63:51:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ab1770b-ddcb-3aa3-93bc-b4a95ef6dee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:94:c3:a8:c0:c2:9c:3a:2e:44:07:01:62:79:f6:dd:e7:3c: 91:80:59:69:ff:3f:a2:98:78:47:62:81:18:64:79:42:94:8c: 63:63:98:23:33:1f:18:12:6a:d5:cc:dd:4e:c0:20:2e:e3:d1: d8:9a:74:26:18:56:83:05:eb:00:67:72:16:8d:68:47:b6:42: 7e:76:bb:a0:38:b4:e8:39:92:e1:ae:28:c9:0f:d3:2f:37:6f: b7:f7:91:9c:96:c6:d1:84:2f:98:7d:15:c9:80:44:3e:4b:4f: a6:82:1a:fa:2e:f9:a9:5f:7c:cf:68:7d:ab:6b:3c:da:ce:5e: 5d:16:66:d6:01:99:a0:87:1a:7d:a9:00:ab:f4:88:0b:7d:92: c7:f1:f2:62:6d:8e:f6:46:41:c0:e7:b7:cc:5c:e9:9f:48:44: ad:e0:fb:49:bf:ae:9f:8f:14:29:95:b2:71:21:f7:f3:e2:fe: 4c:8a:67:fc:42:90:3c:7a:88:a9:87:d1:e4:d8:56:d8:63:d2: 66:66:77:8c:ea:2b:c6:43:a3:71:64:83:70:a6:ec:17:98:66: 70:9f:de:fc:b9:6d:07:58:12:87:6d:a8:ae:a3:86:b3:8b:75: 35:d0:db:1c:1a:49:fb:06:c6:5b:4a:16:76:2f:9f:a2:66:e5: 36:5e:c2:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdebfHkgAk3gbUeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWM3MjgzYTUtYjdlYi00ODlmLTk5ZWItNTc4NTUxZTVkNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguJlGlkGd+++UoH/2hlzjmHeEp7vkzu6a3N7 W6UXPjBNjXHdfR28utNlQVsjn61nlA1uuZIx8jxQu1iWn5EslRokQf9HUveE2ZAn dcF5xhbKB5u+ACVoMbfJO79HXBrKPj2iz2YQfLRzZjQiO/FYd93jL/LJA8JHqtn8 WNaYQIPK0uGStLKHElz9L/pfHoK+rcQkUaIJ1+mHn/5sfssORx7hh+SdWPIXu0nn Yax4SwrMXmj/fRbwdodlT29iQBt6H0eJFlkr75HzSK/j60Y0pTowalS6TZkhVJ8e eJd0jYZx1icVaJdM41EbHKV6mzh0jn/yyCOC2XBuNbaXS3rQMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzc5CDfGV85nPzSV+c4uzg8Y1GyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2FiMTc3MGItZGRjYi0z YWEzLTkzYmMtYjRhOTVlZjZkZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2Uw6jAwpw6LkQHAWJ59t3nPJGAWWn/P6KYeEdigRhkeUKUjGNjmCMz HxgSatXM3U7AIC7j0diadCYYVoMF6wBnchaNaEe2Qn52u6A4tOg5kuGuKMkP0y83 b7f3kZyWxtGEL5h9FcmARD5LT6aCGvou+alffM9ofatrPNrOXl0WZtYBmaCHGn2p AKv0iAt9ksfx8mJtjvZGQcDnt8xc6Z9IRK3g+0m/rp+PFCmVsnEh9/Pi/kyKZ/xC kDx6iKmH0eTYVthj0mZmd4zqK8ZDo3Fkg3Cm7BeYZnCf3vy5bQdYEodtqK6jhrOL dTXQ2xwaSfsGxltKFnYvn6Jm5TZewhU= -----END CERTIFICATE-----Generated at Sat Oct 10 16:08:21 2026 by rpki-client