$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa File: d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa (raw, json) Hash identifier: BG5CZtraL9ZQ1zgYesnkl59hHFFg+kVRe2+bIUqT7J4= Subject key identifier: DD:F0:99:52:92:76:D6:60:62:77:EA:8F:03:17:7C:45:1B:A0:E0:1B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F4975E69E109D20264E85C2E0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 20.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e6:9e:10:9d:20:26:4e:85:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=309e73c3-5b8c-4529-8b74-d014d970fce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:60:7b:06:68:f0:81:a1:b8:76:6d:a1:24: 71:71:9e:5d:55:c5:a5:9f:b2:da:18:0d:d9:8b:43: 40:e2:f8:e3:38:5a:18:fe:fd:f4:b6:4a:89:bc:05: d5:bf:61:09:c4:4b:97:3b:68:1b:8f:de:70:91:2d: c7:5f:5e:04:ce:3f:08:25:21:8d:41:01:c5:1b:86: 25:14:76:04:99:f5:03:c5:af:11:f9:8f:9c:ca:02: 3f:d9:fe:59:9b:c9:bf:93:fd:89:7c:e8:3a:18:f3: ec:8e:43:5f:00:f8:53:8c:a1:f7:09:29:5a:82:c9: d9:ca:b6:73:f7:47:50:e8:53:e1:a0:65:78:e4:80: 88:4f:9a:92:1a:bf:9e:6e:7e:89:d6:b9:9e:18:3c: 6d:9d:cd:88:04:d5:f3:cc:01:9c:cf:af:70:04:eb: da:f5:c5:04:94:59:d3:d4:13:e3:19:81:b1:bf:2f: 0f:05:04:38:b3:3d:7d:a8:a2:eb:fd:45:a4:2a:b6: f5:25:20:50:27:e8:a0:9f:f4:18:7f:ee:ee:a4:0e: 55:8e:81:c3:7f:a7:a7:41:7e:cc:0c:70:f6:fa:a1: e9:fa:3d:5a:b0:30:5c:b0:a4:e4:fc:97:1e:24:0c: 3e:61:38:41:40:24:24:72:12:72:02:e7:de:a9:27: db:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F0:99:52:92:76:D6:60:62:77:EA:8F:03:17:7C:45:1B:A0:E0:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:98:0d:b5:26:5a:60:c8:58:c2:57:ef:13:74:69:d3:a5:5f: 48:ef:3c:e5:e4:e8:f5:56:09:f8:39:ad:d8:a6:2a:8f:bc:90: ee:19:07:2d:a0:3a:17:f6:a8:b8:2f:a3:e7:96:a3:0a:58:c6: 4e:88:09:f5:19:8e:a3:24:20:89:05:e0:9c:dd:fa:58:a4:05: c4:50:ce:ba:15:9d:2c:0a:3f:17:31:76:18:75:52:38:c4:47: 61:38:3d:fa:2c:ee:b2:f2:34:87:4b:79:9f:c4:34:7b:d6:06: 7a:77:2f:5e:7c:17:05:03:d5:0a:af:13:d2:e3:ef:f9:f7:84: 4c:65:4e:dc:6e:3b:6e:4d:ba:f3:25:68:31:4d:40:22:dd:81: e8:9a:57:51:6c:d7:7b:53:db:40:56:d8:ca:11:df:54:f9:b3: 21:6c:08:52:0d:a1:26:aa:19:31:1e:a0:2f:46:4a:61:a1:fb: c4:11:41:72:10:a1:60:25:d1:24:a3:6c:5f:68:fa:d1:a8:66: 57:a3:9b:88:02:83:10:3c:13:c8:a4:f5:dc:38:1e:59:29:be: 1e:20:3b:fb:8a:20:23:1c:0c:e1:df:90:e9:bb:39:ab:cb:3e: da:57:02:d7:a0:72:78:74:90:e5:81:ac:d1:7d:27:86:4c:2d: 1c:84:52:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdeaeEJ0gJk6FwuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzA5ZTczYzMtNWI4Yy00NTI5LThiNzQtZDAxNGQ5NzBmY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqdgewZo8IGhuHZtoSRxcZ5dVcWln7LaGA3Z i0NA4vjjOFoY/v30tkqJvAXVv2EJxEuXO2gbj95wkS3HX14Ezj8IJSGNQQHFG4Yl FHYEmfUDxa8R+Y+cygI/2f5Zm8m/k/2JfOg6GPPsjkNfAPhTjKH3CSlagsnZyrZz 90dQ6FPhoGV45ICIT5qSGr+ebn6J1rmeGDxtnc2IBNXzzAGcz69wBOva9cUElFnT 1BPjGYGxvy8PBQQ4sz19qKLr/UWkKrb1JSBQJ+ign/QYf+7upA5VjoHDf6enQX7M DHD2+qHp+j1asDBcsKTk/JceJAw+YThBQCQkchJyAufeqSfbUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3wmVKSdtZgYnfqjwMXfEUboOAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDFkOWIzMTEtY2U5ZS0z ODZhLWI1ZTUtYjZmMDFjZDFjZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCYDbUmWmDIWMJX7xN0adOlX0jvPOXk6PVWCfg5rdimKo+8kO4ZBy2g Ohf2qLgvo+eWowpYxk6ICfUZjqMkIIkF4Jzd+likBcRQzroVnSwKPxcxdhh1UjjE R2E4Pfos7rLyNIdLeZ/ENHvWBnp3L158FwUD1QqvE9Lj7/n3hExlTtxuO25NuvMl aDFNQCLdgeiaV1Fs13tT20BW2MoR31T5syFsCFINoSaqGTEeoC9GSmGh+8QRQXIQ oWAl0SSjbF9o+tGoZlejm4gCgxA8E8ik9dw4Hlkpvh4gO/uKICMcDOHfkOm7OavL PtpXAtegcnh0kOWBrNF9J4ZMLRyEUsU= -----END CERTIFICATE-----Generated at Mon Sep 28 10:18:35 2026 by rpki-client