$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa File: 895b35f2-676a-36ad-9bd6-7860fc097fbf.roa (raw, json) Hash identifier: ua00LPrw47gaW/7O6UEsmJizSoa0WI23S386ZRNS5io= Subject key identifier: 27:9B:F9:7A:13:51:49:E8:F4:A7:29:1B:F1:B4:81:F4:50:51:74:D6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F3E47ED3FB85687598DB95400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 203 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ed:3f:b8:56:87:59:8d:b9:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=9399a425-c38a-41d0-9ae8-84c8932d3ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:3b:07:f0:0f:e6:c1:e1:cf:f5:5a:65:e5: 14:c1:40:d3:f6:f6:f5:d1:39:35:32:ea:dc:4b:b2: aa:ec:5c:e0:d4:38:ce:ef:d8:67:29:7f:e0:d5:db: c3:87:89:55:83:6a:06:3c:fd:b7:6c:08:5a:37:ea: 4a:b0:bf:db:86:14:0f:c3:ab:77:36:05:33:1d:bf: e5:fe:cf:e9:66:bd:86:04:d9:ed:81:15:0d:28:bc: ca:d5:36:67:d8:f8:e0:68:90:05:75:2e:c2:ba:39: ea:31:9a:2c:4e:a5:4e:c2:7d:e1:a0:a6:d3:5b:2e: b8:53:c6:08:a6:77:a4:69:9b:c0:99:25:de:6c:83: cf:59:ca:52:72:ad:e3:c4:67:76:8b:33:1c:0b:64: 63:db:67:72:94:a5:ef:0a:69:de:b0:fe:01:93:a0: bf:10:0a:9e:c3:c2:e6:a6:b3:dc:c2:78:1b:4d:8d: c3:55:d8:fa:2f:6e:a6:01:21:0e:88:a4:8f:47:50: 53:b9:fb:2c:f6:01:8f:0b:8a:c1:5c:12:be:fb:a1: 83:1a:56:45:85:81:f2:a5:f4:0e:88:ac:f0:dc:1d: 86:86:62:b1:3d:1f:74:c4:1e:7d:ec:0a:9b:d1:b2: fc:e2:4b:0d:44:84:4b:44:54:b9:37:eb:49:e9:3a: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9B:F9:7A:13:51:49:E8:F4:A7:29:1B:F1:B4:81:F4:50:51:74:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:65:55:9c:a1:ba:7c:f5:92:01:bf:ae:9f:1c:c1:26:57:0d: 99:61:c6:b1:93:ba:30:67:d7:10:b6:8e:24:90:85:3b:57:58: 3d:9c:3b:9d:05:32:ea:d4:71:50:70:5e:c0:33:46:68:34:eb: 51:fa:44:12:cb:5a:92:9c:e9:d4:ff:b9:07:c8:a9:92:cc:96: 04:a4:84:af:94:23:8c:8f:70:4d:6f:d1:7a:de:74:52:a7:17: 73:4a:87:a2:16:da:62:46:6f:af:8f:02:4b:54:04:51:51:aa: 16:24:f4:e6:2a:d7:e7:94:12:d5:00:b9:89:d6:02:65:9e:ba: 5e:69:ef:6b:61:4f:72:02:37:a6:03:36:e5:1c:72:8b:53:7d: df:6e:48:28:39:7b:2c:67:f9:00:59:52:75:e0:d5:15:b0:0b: 96:f1:1b:aa:5f:44:4c:e8:43:5d:4a:85:83:f9:50:f8:7c:30: 1d:1a:a8:08:a4:b7:f6:ce:01:0d:56:25:75:e7:5a:35:fd:88: 47:47:e4:88:38:fe:22:4e:65:28:5e:72:db:60:0b:26:c4:ea: 9d:55:d8:c6:1b:6b:93:68:94:25:db:1c:4f:11:02:c1:df:93: 04:f3:9e:95:ce:98:a6:1a:3d:99:8c:3f:58:60:00:49:d6:f0: 06:a3:1c:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+0/uFaHWY25VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk OTM5OWE0MjUtYzM4YS00MWQwLTlhZTgtODRjODkzMmQzZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAs7B/AP5sHhz/VaZeUUwUDT9vb10Tk1Murc S7Kq7Fzg1DjO79hnKX/g1dvDh4lVg2oGPP23bAhaN+pKsL/bhhQPw6t3NgUzHb/l /s/pZr2GBNntgRUNKLzK1TZn2PjgaJAFdS7CujnqMZosTqVOwn3hoKbTWy64U8YI pnekaZvAmSXebIPPWcpScq3jxGd2izMcC2Rj22dylKXvCmnesP4Bk6C/EAqew8Lm prPcwngbTY3DVdj6L26mASEOiKSPR1BTufss9gGPC4rBXBK++6GDGlZFhYHypfQO iKzw3B2GhmKxPR90xB597Aqb0bL84ksNRIRLRFS5N+tJ6TqToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeb+XoTUUno9KcpG/G0gfRQUXTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODk1YjM1ZjItNjc2YS0z NmFkLTliZDYtNzg2MGZjMDk3ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBlVZyhunz1kgG/rp8cwSZXDZlhxrGTujBn1xC2jiSQhTtXWD2cO50F MurUcVBwXsAzRmg061H6RBLLWpKc6dT/uQfIqZLMlgSkhK+UI4yPcE1v0XredFKn F3NKh6IW2mJGb6+PAktUBFFRqhYk9OYq1+eUEtUAuYnWAmWeul5p72thT3ICN6YD NuUccotTfd9uSCg5eyxn+QBZUnXg1RWwC5bxG6pfREzoQ11KhYP5UPh8MB0aqAik t/bOAQ1WJXXnWjX9iEdH5Ig4/iJOZShecttgCybE6p1V2MYba5NolCXbHE8RAsHf kwTznpXOmKYaPZmMP1hgAEnW8AajHLU= -----END CERTIFICATE-----Generated at Mon Oct 12 04:13:15 2026 by rpki-client