$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa File: 9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa (raw, json) Hash identifier: 9mrXCRlf6HFZPVVTLDcFw0t3qk1tqFfTyVpy26GdnJg= Subject key identifier: 38:96:57:83:B2:03:4C:A2:9C:75:9B:ED:9B:D9:D6:08:4D:0D:F6:CA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F4976EC9A4E5FFAE4CEA33C00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:ec:9a:4e:5f:fa:e4:ce:a3:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3b646c5b-baf8-49e8-9059-351a630a5e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:b3:82:73:9d:54:41:4c:dc:71:8c:67:ea: 61:40:86:86:4c:c1:75:e3:26:16:fe:05:3a:98:67: 17:56:df:ab:51:66:20:09:4d:af:6c:33:9c:b8:3d: ff:47:35:37:1d:28:37:67:e9:cc:2d:ff:01:4e:54: 2b:6e:24:7e:3e:9e:74:68:8a:58:2c:45:c6:54:0f: 22:0d:92:58:46:ec:90:be:f1:65:7f:4f:a2:33:c5: cc:02:85:d5:c1:90:01:4c:c8:e7:ca:a5:bc:73:2c: bc:f8:db:02:d8:1e:6b:3a:fa:f7:32:74:99:04:e8: 6b:17:e7:9f:76:8f:35:ad:4d:b2:84:23:fa:cc:23: 87:86:45:67:1d:55:ad:d4:7b:84:37:9d:dd:ae:46: 14:4e:ed:6a:57:5d:c3:33:bf:8e:1c:89:10:2e:d1: c4:f6:34:d8:d6:af:36:ef:37:47:d6:e9:27:ed:1d: 63:03:36:3b:fc:1d:59:85:8a:f6:73:52:d3:07:83: 24:55:bf:01:ab:1b:64:1a:a2:34:9d:b1:70:ac:ef: e4:a5:f9:e9:74:fa:df:bc:f8:e8:27:2d:66:45:8c: bf:8e:fa:70:9c:93:9d:7f:3d:d7:2d:66:60:ec:5c: 43:c1:80:a7:a3:3b:e6:6e:c4:f9:c6:46:60:be:3f: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:96:57:83:B2:03:4C:A2:9C:75:9B:ED:9B:D9:D6:08:4D:0D:F6:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8f:21:6c:37:b1:e5:71:de:e1:8d:88:45:44:d1:86:86:4e: f6:c5:99:a2:13:e9:98:fc:f0:33:e5:d6:ff:84:23:45:d0:61: 9f:b7:1f:bb:37:aa:94:c9:5e:5d:49:7a:63:10:69:d1:d0:fe: 84:a9:26:e6:d8:f2:92:68:cb:40:4d:2d:98:89:99:af:3e:62: 8f:77:63:2a:b4:38:30:82:0b:ec:65:5e:a7:f6:23:8d:24:31: db:ba:a9:22:9c:68:b6:c7:35:f9:db:90:ba:51:bc:3e:f7:8f: 10:ac:35:86:8a:b5:31:bf:9c:8a:41:89:7d:ab:ca:49:5b:38: 28:66:89:cf:24:e1:63:ae:6b:09:97:64:f8:51:36:76:32:d0: e2:bd:73:87:f3:3f:a2:eb:ed:35:f5:00:15:01:ee:f8:c6:11: f2:0a:f5:17:22:b3:d0:bc:d1:72:c9:4b:e4:e0:97:24:97:d4: c2:99:cc:0d:dd:5c:79:9e:fc:bb:45:54:24:87:c4:81:b5:55: 85:4c:4b:2f:8d:37:85:6e:dc:cb:1b:8a:7a:83:c8:f5:1a:0d: 77:76:1a:0e:a5:1e:a0:fd:e3:bf:7d:eb:fc:ef:aa:a2:2d:dd: fa:54:19:00:fb:0f:81:6e:56:b2:f9:9e:19:8e:56:eb:21:50: 1c:0f:f6:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JduyaTl/65M6jPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2I2NDZjNWItYmFmOC00OWU4LTkwNTktMzUxYTYzMGE1ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3GzgnOdVEFM3HGMZ+phQIaGTMF14yYW/gU6 mGcXVt+rUWYgCU2vbDOcuD3/RzU3HSg3Z+nMLf8BTlQrbiR+Pp50aIpYLEXGVA8i DZJYRuyQvvFlf0+iM8XMAoXVwZABTMjnyqW8cyy8+NsC2B5rOvr3MnSZBOhrF+ef do81rU2yhCP6zCOHhkVnHVWt1HuEN53drkYUTu1qV13DM7+OHIkQLtHE9jTY1q82 7zdH1ukn7R1jAzY7/B1ZhYr2c1LTB4MkVb8BqxtkGqI0nbFwrO/kpfnpdPrfvPjo Jy1mRYy/jvpwnJOdfz3XLWZg7FxDwYCnozvmbsT5xkZgvj+oCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiWV4OyA0yinHWb7ZvZ1ghNDfbKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWE2N2IwYmUtOWI4NS0z ODFmLThmOGItODBmM2E0YjkzYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuPIWw3seVx3uGNiEVE0YaGTvbFmaIT6Zj88DPl1v+EI0XQYZ+3H7s3 qpTJXl1JemMQadHQ/oSpJubY8pJoy0BNLZiJma8+Yo93Yyq0ODCCC+xlXqf2I40k Mdu6qSKcaLbHNfnbkLpRvD73jxCsNYaKtTG/nIpBiX2ryklbOChmic8k4WOuawmX ZPhRNnYy0OK9c4fzP6Lr7TX1ABUB7vjGEfIK9Rcis9C80XLJS+TglySX1MKZzA3d XHme/LtFVCSHxIG1VYVMSy+NN4Vu3MsbinqDyPUaDXd2Gg6lHqD947996/zvqqIt 3fpUGQD7D4FuVrL5nhmOVushUBwP9ik= -----END CERTIFICATE-----Generated at Tue Oct 6 23:28:51 2026 by rpki-client