$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa File: c00a48d0-53f7-3c34-a123-70fbf7b25125.roa (raw, json) Hash identifier: P+HgPiDhYpRK+6d9gg+4n4DSpnPbTnGqNn746yqtOOE= Subject key identifier: 4F:46:7E:A1:B4:BF:79:52:FF:A0:95:18:6E:8A:87:55:A6:C5:EA:FD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7A4D9D1BAB630927FB973A80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 3360 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:9d:1b:ab:63:09:27:fb:97:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=7b7ff976-f426-43e1-a34c-d99f34054afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:38:37:a4:3e:d6:39:9a:27:ea:ce:c1:67:ea: 4c:3c:ed:1b:e2:c1:bb:92:70:7f:b1:66:41:78:c7: 40:02:f9:d1:4e:3b:07:b4:30:12:9d:d2:63:c6:1a: a2:6f:7d:4a:9d:14:11:b3:c0:c3:00:70:6b:3c:1e: 88:fa:4c:72:9e:cd:b4:9b:e1:bd:bd:74:6f:e7:b2: 44:6c:1d:40:a8:cb:97:26:14:2a:51:ea:cc:47:66: dd:3f:95:85:71:82:ed:ec:bf:5e:4f:a8:00:49:78: 55:49:c1:22:8e:f9:e1:6a:49:20:30:54:e6:36:b1: 23:bb:d4:51:16:62:18:cc:c2:ad:1d:c6:d1:29:ae: d3:30:59:f9:b5:63:4d:41:4e:17:f6:2c:f4:61:38: ad:12:f8:0e:13:c2:72:e5:fb:c0:e0:87:1e:76:b2: 03:66:41:73:49:49:47:93:2c:14:d5:84:aa:64:19: 2d:5b:db:d1:a3:87:69:65:20:83:0e:ba:a6:09:36: bb:f5:a5:92:13:c1:c7:16:0c:03:54:90:f5:7a:a6: 72:f4:62:e0:56:41:8e:fd:e6:52:90:37:2f:a0:a8: 29:bc:6e:a2:6f:c8:89:ef:7a:54:4d:36:98:64:87: 54:73:e1:e4:55:f9:da:30:f2:e9:3a:fa:b5:62:77: 78:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:46:7E:A1:B4:BF:79:52:FF:A0:95:18:6E:8A:87:55:A6:C5:EA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a9:14:45:4b:9a:91:f9:97:b0:09:a6:49:0a:d2:27:6c:d5: a4:3f:da:e3:20:2c:6d:3e:3c:f3:94:67:a1:f0:a2:32:91:bf: 72:25:0e:1d:4a:7e:ad:08:31:45:3d:e7:c7:63:e7:79:18:2a: b5:85:3a:8f:78:86:75:83:9c:97:bd:33:3a:5c:42:d1:fb:8b: 57:da:41:5f:1b:5f:24:32:0f:54:54:46:24:31:31:8f:ba:c9: 68:10:fd:9c:e8:2d:38:95:14:a8:e5:09:c8:1e:29:bd:92:78: 75:f5:85:a0:f8:ee:88:bd:68:a2:28:6e:81:1c:c0:70:15:ae: 3a:ae:f9:ea:c9:00:22:4f:ff:bc:ea:2f:2d:7d:87:dd:d9:7a: 56:6b:3e:93:20:da:26:b3:fa:20:0f:2e:f3:91:83:4f:49:68: a4:5d:d9:71:0c:cb:f9:a1:76:65:e2:b4:25:ef:c3:a2:79:09: 1e:59:af:89:19:6a:8c:56:1b:16:ce:79:ab:94:0f:e8:2a:60: e3:be:bb:41:ca:e1:bb:ef:97:d6:95:0c:86:ed:3d:90:8d:0f: 51:29:b3:b2:50:86:ef:81:70:48:8e:b8:d1:f6:0d:73:84:8c: 4f:0e:64:fe:92:5c:37:c2:fb:46:87:fb:2b:09:97:e0:ce:21: 07:12:22:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZ0bq2MJJ/uXOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk N2I3ZmY5NzYtZjQyNi00M2UxLWEzNGMtZDk5ZjM0MDU0YWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzg3pD7WOZon6s7BZ+pMPO0b4sG7knB/sWZB eMdAAvnRTjsHtDASndJjxhqib31KnRQRs8DDAHBrPB6I+kxyns20m+G9vXRv57JE bB1AqMuXJhQqUerMR2bdP5WFcYLt7L9eT6gASXhVScEijvnhakkgMFTmNrEju9RR FmIYzMKtHcbRKa7TMFn5tWNNQU4X9iz0YTitEvgOE8Jy5fvA4IcedrIDZkFzSUlH kywU1YSqZBktW9vRo4dpZSCDDrqmCTa79aWSE8HHFgwDVJD1eqZy9GLgVkGO/eZS kDcvoKgpvG6ib8iJ73pUTTaYZIdUc+HkVfnaMPLpOvq1Ynd4TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9GfqG0v3lS/6CVGG6Kh1Wmxer9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzAwYTQ4ZDAtNTNmNy0z YzM0LWExMjMtNzBmYmY3YjI1MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHipFEVLmpH5l7AJpkkK0ids1aQ/2uMgLG0+PPOUZ6HwojKRv3IlDh1K fq0IMUU958dj53kYKrWFOo94hnWDnJe9MzpcQtH7i1faQV8bXyQyD1RURiQxMY+6 yWgQ/ZzoLTiVFKjlCcgeKb2SeHX1haD47oi9aKIoboEcwHAVrjqu+erJACJP/7zq Ly19h93ZelZrPpMg2iaz+iAPLvORg09JaKRd2XEMy/mhdmXitCXvw6J5CR5Zr4kZ aoxWGxbOeauUD+gqYOO+u0HK4bvvl9aVDIbtPZCND1Eps7JQhu+BcEiOuNH2DXOE jE8OZP6SXDfC+0aH+ysJl+DOIQcSIoE= -----END CERTIFICATE-----Generated at Tue Oct 13 19:09:18 2026 by rpki-client