$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa File: a6d04891-47ad-353a-8897-df25d664bb32.roa (raw, json) Hash identifier: +SKb7KXikZAxe5P9HDlEeCWQxcSj0czVNPB36p/l77A= Subject key identifier: 1A:69:A2:B0:8D:C1:E3:58:A5:20:40:76:38:4B:C5:A9:1A:B0:C5:0F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F4976EC0A1A6EF99DA2988D80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:ec:0a:1a:6e:f9:9d:a2:98:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f43560d4-cd6e-4c6d-b973-f1b9cd297c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:c1:c5:ea:61:a2:42:d8:e1:e9:9f:c3:62: 77:c6:32:e2:80:6c:ad:71:9d:a3:2a:e9:2c:ee:66: 19:ed:ea:d2:ed:ee:8d:cd:30:a6:9d:f0:b8:fa:79: 56:95:6b:5c:20:ab:7c:a8:64:d8:21:8c:d5:24:98: 6b:e9:b6:e3:61:a7:90:c0:2e:fd:72:d4:85:70:d2: 72:8f:f2:06:27:a6:1b:46:84:f0:1c:21:83:ac:f9: 23:31:fa:3b:ac:15:ae:14:0a:8c:2a:52:62:69:d5: 3b:49:78:6d:d3:96:53:7c:7f:1e:15:a1:d3:0b:a4: 6d:3c:a8:b9:f8:fa:67:75:14:02:f1:b2:ac:5c:57: 8c:35:dd:da:1f:ef:19:5a:3b:45:6e:5a:2a:3f:d5: 5d:9a:e1:6c:be:be:91:b8:80:4f:42:df:33:f6:d3: a9:75:ab:50:44:9b:cf:c0:26:a2:10:cd:93:f0:92: 21:08:ae:0b:79:0f:a8:eb:5c:68:ac:48:0e:61:25: 9e:02:4a:8d:b1:65:76:d3:37:9a:75:80:5e:84:89: 3f:54:b0:7a:17:27:c8:e4:af:d1:2b:38:cc:7c:84: 54:a1:63:54:1a:6e:b7:99:4d:98:24:71:b8:d0:dd: a7:82:7d:fd:70:33:b8:9f:0d:34:d4:7e:ac:d7:a2: 4b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:69:A2:B0:8D:C1:E3:58:A5:20:40:76:38:4B:C5:A9:1A:B0:C5:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:63:39:ab:21:13:4d:43:1e:d8:8b:9e:37:a7:bc:f5:81:31: 17:e7:44:c4:65:b5:6c:bb:f4:5f:a6:96:eb:4a:c8:b7:c1:c8: e6:ad:b9:40:18:cb:45:93:3d:62:a9:b5:3f:31:79:30:77:0e: c7:2b:a7:34:d9:f9:8f:fa:b7:06:e6:dd:34:4f:2f:e5:5b:50: 53:3a:b7:2a:0e:b8:05:45:fe:67:2e:65:8e:04:3e:e1:4f:86: 66:97:ab:01:11:3c:09:22:f5:12:26:9f:a8:cc:bf:91:c3:7e: bb:d0:8b:cb:95:53:22:3e:51:b7:0f:19:94:53:eb:33:a2:0f: 8f:ca:d5:21:4c:6d:fb:74:52:1c:bf:11:0d:5c:d9:30:90:c5: 93:03:13:56:ea:ea:e3:e0:19:bb:10:d5:77:26:ea:c0:2d:09: 63:bf:24:da:b9:1f:61:c3:58:5a:be:8e:ae:ee:df:9c:f1:79: 4d:48:0d:b7:d5:09:a8:e7:cf:5a:a5:93:e3:ba:61:7f:36:21: 85:f1:bf:fa:c5:66:94:71:64:05:ef:c7:41:f3:a9:97:50:b3: be:35:1e:5e:86:52:4b:66:7a:39:38:2e:b5:68:95:1b:42:7a: d9:89:dd:37:a1:a9:e9:f9:fd:5b:f0:26:f6:30:ef:93:42:1e: 2b:70:59:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JduwKGm75naKYjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQzNTYwZDQtY2Q2ZS00YzZkLWI5NzMtZjFiOWNkMjk3YzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcvBxephokLY4emfw2J3xjLigGytcZ2jKuks 7mYZ7erS7e6NzTCmnfC4+nlWlWtcIKt8qGTYIYzVJJhr6bbjYaeQwC79ctSFcNJy j/IGJ6YbRoTwHCGDrPkjMfo7rBWuFAqMKlJiadU7SXht05ZTfH8eFaHTC6RtPKi5 +PpndRQC8bKsXFeMNd3aH+8ZWjtFbloqP9VdmuFsvr6RuIBPQt8z9tOpdatQRJvP wCaiEM2T8JIhCK4LeQ+o61xorEgOYSWeAkqNsWV20zeadYBehIk/VLB6FyfI5K/R KzjMfIRUoWNUGm63mU2YJHG40N2ngn39cDO4nw001H6s16JLPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpporCNweNYpSBAdjhLxakasMUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTZkMDQ4OTEtNDdhZC0z NTNhLTg4OTctZGYyNWQ2NjRiYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBjOashE01DHtiLnjenvPWBMRfnRMRltWy79F+mlutKyLfByOatuUAY y0WTPWKptT8xeTB3DscrpzTZ+Y/6twbm3TRPL+VbUFM6tyoOuAVF/mcuZY4EPuFP hmaXqwERPAki9RImn6jMv5HDfrvQi8uVUyI+UbcPGZRT6zOiD4/K1SFMbft0Uhy/ EQ1c2TCQxZMDE1bq6uPgGbsQ1Xcm6sAtCWO/JNq5H2HDWFq+jq7u35zxeU1IDbfV Cajnz1qlk+O6YX82IYXxv/rFZpRxZAXvx0HzqZdQs741Hl6GUktmejk4LrVolRtC etmJ3Tehqen5/VvwJvYw75NCHitwWbA= -----END CERTIFICATE-----Generated at Sun Oct 11 20:27:49 2026 by rpki-client