$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa File: bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa (raw, json) Hash identifier: rnEanWzOsLGMELHw3D7oBEn+ZCa2hl3RQDB/Bu+AtAg= Subject key identifier: 4B:0D:6A:C9:1C:38:01:43:E1:94:82:D1:47:5D:9A:4E:B8:13:30:48 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62AD241490FAFC17362000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 203 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ad:24:14:90:fa:fc:17:36:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=c9c6e0dc-7691-4375-865b-e1dfe4cd8b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:e3:6b:e9:6a:b5:43:2b:fe:7f:19:8e:cd: 0a:7d:1b:00:d4:0d:4f:77:71:76:99:40:36:61:82: af:63:13:50:5d:4e:2c:33:bd:5e:47:bb:69:53:ab: 46:60:f2:37:ed:7e:fd:be:99:f3:c9:07:af:10:5f: bc:b7:6e:fd:33:3a:8e:2f:03:19:50:91:74:0b:7c: fe:f5:57:34:e0:76:76:ec:05:80:ec:4e:d0:70:0d: 20:fc:2e:47:a3:89:22:57:c7:85:80:85:1d:25:7c: 43:c2:35:95:8d:92:69:68:b5:86:d8:46:9c:14:89: 82:33:38:e7:7d:ab:69:72:b7:19:44:91:31:3a:5c: 50:5e:ec:8b:d4:c2:36:9d:48:d2:cb:86:86:a3:f7: 50:7d:1c:7b:eb:48:14:a9:f1:e3:a2:5f:04:cb:5f: fc:12:e1:f0:03:1d:85:e2:cb:60:da:25:87:c7:50: db:cc:f6:f5:81:18:8a:4f:70:77:74:28:63:c3:e0: b5:15:c2:cd:b8:a8:3c:f5:0b:91:53:fc:42:fe:c4: 23:60:01:8c:8e:07:92:53:90:a3:36:8f:8d:69:f3: 1a:19:fe:6e:04:bb:f9:48:a8:97:c2:f4:d0:a8:fc: fc:d6:6e:f3:6f:50:1d:6d:f5:a7:71:6a:83:2a:41: e2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0D:6A:C9:1C:38:01:43:E1:94:82:D1:47:5D:9A:4E:B8:13:30:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2d:cc:18:94:7e:97:ad:2b:a3:48:76:d9:6e:73:34:b5:eb: 3b:aa:ef:77:c9:73:9f:60:c9:3a:be:da:5a:d6:c5:fa:9a:e7: 87:02:53:38:49:ec:a0:1c:e4:21:9f:9e:e4:5d:63:c6:ce:7d: 5e:d2:d4:dd:f8:bd:9d:c3:7e:10:54:ea:f7:29:37:2e:7b:45: 0a:5a:81:f5:99:b1:fc:73:d7:eb:41:a8:ef:08:1a:97:01:de: c9:34:6d:8c:7f:b1:5b:d0:42:b0:f2:a9:a0:41:77:19:69:c3: 70:8a:1b:a4:d1:14:88:8a:37:c1:e4:91:9a:3e:76:5e:c0:82: ab:54:4d:17:55:ab:ce:56:b5:52:1c:53:5b:3c:fe:17:52:59: a9:1f:82:6e:f1:04:84:e9:ec:ed:a2:3e:36:11:d6:38:76:9e: 8c:1b:a8:1d:27:ab:cf:ed:dc:21:38:0e:f0:86:34:c9:d1:d8: 27:12:52:48:de:91:22:ec:2b:cf:f0:1a:0c:81:92:ff:60:5a: 24:a7:ba:eb:a9:f5:69:67:52:ad:b6:04:7b:49:d0:4e:f0:c8: 58:3d:8a:17:d6:4a:35:d2:ed:95:ad:d9:41:9a:a4:de:5d:db: 7b:09:d9:56:11:42:45:7c:b3:6d:cf:92:eb:c6:3b:99:81:36: dd:a6:ba:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYq0kFJD6/Bc2IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YzljNmUwZGMtNzY5MS00Mzc1LTg2NWItZTFkZmU0Y2Q4YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08fja+lqtUMr/n8Zjs0KfRsA1A1Pd3F2mUA2 YYKvYxNQXU4sM71eR7tpU6tGYPI37X79vpnzyQevEF+8t279MzqOLwMZUJF0C3z+ 9Vc04HZ27AWA7E7QcA0g/C5Ho4kiV8eFgIUdJXxDwjWVjZJpaLWG2EacFImCMzjn fatpcrcZRJExOlxQXuyL1MI2nUjSy4aGo/dQfRx760gUqfHjol8Ey1/8EuHwAx2F 4stg2iWHx1DbzPb1gRiKT3B3dChjw+C1FcLNuKg89QuRU/xC/sQjYAGMjgeSU5Cj No+NafMaGf5uBLv5SKiXwvTQqPz81m7zb1AdbfWncWqDKkHirwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsNaskcOAFD4ZSC0Uddmk64EzBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmNkMDhmN2QtODAwNC0z MjdiLTkyZDMtODdiYzdjZmI0NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABctzBiUfpetK6NIdtluczS16zuq73fJc59gyTq+2lrWxfqa54cCUzhJ 7KAc5CGfnuRdY8bOfV7S1N34vZ3DfhBU6vcpNy57RQpagfWZsfxz1+tBqO8IGpcB 3sk0bYx/sVvQQrDyqaBBdxlpw3CKG6TRFIiKN8HkkZo+dl7AgqtUTRdVq85WtVIc U1s8/hdSWakfgm7xBITp7O2iPjYR1jh2nowbqB0nq8/t3CE4DvCGNMnR2CcSUkje kSLsK8/wGgyBkv9gWiSnuuup9WlnUq22BHtJ0E7wyFg9ihfWSjXS7ZWt2UGapN5d 23sJ2VYRQkV8s23PkuvGO5mBNt2muko= -----END CERTIFICATE-----Generated at Sat Oct 10 16:16:42 2026 by rpki-client