$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa File: c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa (raw, json) Hash identifier: TByCWm5Hzedjtsf4vDwMBuBiawrgTBYRjxcE9W0hfko= Subject key identifier: A9:92:8E:6D:0F:72:23:EE:AB:24:08:4F:8C:54:13:74:A3:58:F3:5A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E66DA1DF27FFAC720ECD072C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 4237 IP address blocks: 20.137.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:1d:f2:7f:fa:c7:20:ec:d0:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=70b05f4f-4f9a-4ce2-a384-aad1c5b719a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:e4:a1:cd:54:c2:fc:f0:c8:4b:f9:14:2f: 0e:99:0f:bd:fd:5d:bc:a3:1c:79:8b:f1:2a:5e:07: ce:c8:ed:f9:8a:1b:75:6c:66:7a:c6:63:c3:1a:a2: 7d:1e:60:00:eb:23:e8:df:7e:28:92:91:6a:71:f3: 43:8a:02:c4:00:92:d6:91:2c:af:12:3a:49:5f:01: 4b:f8:36:7b:64:87:64:ce:74:71:64:6a:35:59:9f: a3:82:af:02:fa:3a:5a:15:b3:83:27:df:96:4e:20: 54:b6:61:28:fe:3b:e8:1b:fb:38:fe:38:4f:a1:4e: 09:9b:61:6c:41:c9:32:09:99:65:d0:8b:7b:ee:e2: 7a:b2:2f:82:7d:64:4e:c9:d8:2d:83:6e:5f:44:fe: 6b:4d:67:3e:c7:2f:7f:6c:b1:09:7a:2f:dc:11:cf: a5:68:c1:43:e6:c5:7e:93:eb:c9:19:ed:b9:e1:ed: aa:75:89:a9:f7:d3:cc:69:d2:a4:4d:b0:68:de:2a: 2a:a0:be:49:67:7a:60:82:03:a3:8a:cf:95:92:03: a6:2d:1e:18:e5:4a:06:30:64:04:f2:ae:78:70:1d: 9c:2e:bf:56:da:58:8c:63:53:9f:96:38:ba:0d:28: e6:4d:ea:cd:a8:66:3e:91:46:77:65:18:29:71:6f: 42:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:92:8E:6D:0F:72:23:EE:AB:24:08:4F:8C:54:13:74:A3:58:F3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:20:5d:ed:b5:36:0e:b8:ae:68:2b:c3:0a:ea:32:93:61:2b: 58:1d:22:d7:5f:fa:1f:c2:af:47:72:c1:ec:00:68:2f:98:d2: 08:4a:5e:7c:60:a3:62:4c:9d:6f:01:b9:a6:ba:b6:f8:f1:2d: fb:4a:7a:40:eb:b9:2d:d4:cc:ed:8d:7f:9e:21:94:4a:6c:29: 0a:58:e8:4a:1d:c4:4e:2c:1c:2c:22:0f:e7:f1:ba:78:bb:b2: 8e:ce:ca:f2:59:d1:e3:2a:d9:76:1c:d4:15:65:18:1f:34:d4: 22:8d:ff:3e:1f:a5:f7:67:2c:ec:81:51:f7:ec:b7:32:3f:4a: cc:71:fe:30:fd:f0:55:33:df:bb:13:de:15:66:00:7f:e0:15: 5a:a3:91:f3:62:d8:19:17:37:85:26:9b:be:82:f5:07:f1:e3: 21:95:51:3b:e7:b4:e2:54:42:c3:b8:01:4c:a9:0d:99:76:09: bb:21:cd:80:6f:91:d9:6d:a1:c0:a7:1a:fb:f8:ee:25:4c:70: bd:3c:ab:0c:a0:c9:d0:a3:ab:f2:73:c7:ac:22:b5:3a:67:e1: 97:1a:e3:31:b4:5d:5f:67:05:28:67:7c:e5:89:20:84:fd:8b: 9a:3b:86:a6:27:18:63:a3:8a:9f:1c:86:9d:a4:83:4b:f5:7f: e7:05:b3:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2h3yf/rHIOzQcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NzBiMDVmNGYtNGY5YS00Y2UyLWEzODQtYWFkMWM1YjcxOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3bkoc1UwvzwyEv5FC8OmQ+9/V28oxx5i/Eq XgfOyO35iht1bGZ6xmPDGqJ9HmAA6yPo334okpFqcfNDigLEAJLWkSyvEjpJXwFL +DZ7ZIdkznRxZGo1WZ+jgq8C+jpaFbODJ9+WTiBUtmEo/jvoG/s4/jhPoU4Jm2Fs QckyCZll0It77uJ6si+CfWROydgtg25fRP5rTWc+xy9/bLEJei/cEc+laMFD5sV+ k+vJGe254e2qdYmp99PMadKkTbBo3ioqoL5JZ3pgggOjis+VkgOmLR4Y5UoGMGQE 8q54cB2cLr9W2liMY1Oflji6DSjmTerNqGY+kUZ3ZRgpcW9CqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmSjm0PciPuqyQIT4xUE3SjWPNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzdkM2Q2NWUtYjQ4NS0z ZDhjLTk1ODgtZjQ0ZTdmMzFmM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYgXe21Ng64rmgrwwrqMpNhK1gdItdf+h/Cr0dywewAaC+Y0ghKXnxg o2JMnW8Buaa6tvjxLftKekDruS3UzO2Nf54hlEpsKQpY6EodxE4sHCwiD+fxuni7 so7OyvJZ0eMq2XYc1BVlGB801CKN/z4fpfdnLOyBUffstzI/Ssxx/jD98FUz37sT 3hVmAH/gFVqjkfNi2BkXN4Umm76C9Qfx4yGVUTvntOJUQsO4AUypDZl2CbshzYBv kdltocCnGvv47iVMcL08qwygydCjq/Jzx6witTpn4Zca4zG0XV9nBShnfOWJIIT9 i5o7hqYnGGOjip8chp2kg0v1f+cFs1k= -----END CERTIFICATE-----Generated at Fri Jul 24 21:14:11 2026 by rpki-client