$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d3ef49cd-8608-350f-8c72-87aecbe7971d.roa File: d3ef49cd-8608-350f-8c72-87aecbe7971d.roa (raw, json) Hash identifier: BC+XDMuxCAnAdPitBCLbe1pDtjXtPWTqte7JdM5qHtc= Subject key identifier: 81:2E:B7:2E:35:29:24:E6:B8:57:12:31:02:3C:B1:A1:34:80:DF:C6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F2ABD160CB215FDC613954E80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d3ef49cd-8608-350f-8c72-87aecbe7971d.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.138.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:16:0c:b2:15:fd:c6:13:95:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=e659b702-5c60-43a5-9e20-1d29b5db1b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:67:19:33:8c:95:3d:23:57:89:f4:c6:6e: d0:cc:be:f4:f1:56:f6:6d:eb:f1:14:32:c0:87:40: f6:3e:55:fe:ad:a6:89:fa:03:f6:99:0e:be:78:9a: a7:c5:79:f6:fd:3e:85:2e:9a:56:1e:07:dc:fe:d2: d4:f5:76:b2:61:57:dc:bd:e0:5c:a7:4c:e7:71:d4: 1a:ed:14:ef:2e:85:8b:eb:e6:f9:49:12:82:ec:af: cb:51:7b:1a:45:99:0d:73:fd:59:53:8d:d6:64:de: b0:8e:c3:4e:60:54:47:96:9e:95:43:1d:cb:85:5d: 79:d9:2d:94:58:f8:57:f6:45:be:a8:52:8a:98:c3: 18:89:7c:99:3c:6e:8e:49:18:e0:5d:ec:b0:ec:33: 42:65:ca:60:ff:49:31:63:79:6d:4a:53:42:e8:90: 8f:15:c3:7f:4c:63:01:cf:68:35:b0:a9:7d:39:08: 8f:99:bb:61:72:c8:c8:2f:3e:cb:64:3c:5a:f2:0b: 09:c4:06:c4:4f:d1:62:91:b0:ee:b9:19:b1:3a:86: 0f:e4:76:02:dc:84:dd:08:68:34:79:6f:d8:28:f8: e6:6b:8b:6c:46:31:ec:e1:7b:b0:ef:8b:a3:7e:41: 9e:3a:9e:e6:25:1b:a8:17:c1:5b:4f:f5:d7:1b:06: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2E:B7:2E:35:29:24:E6:B8:57:12:31:02:3C:B1:A1:34:80:DF:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d3ef49cd-8608-350f-8c72-87aecbe7971d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:de:e2:77:b8:c7:60:47:50:70:a4:67:cb:6a:72:6b:8f:09: a2:39:07:a4:12:5d:de:4a:5f:73:3d:7a:d2:c5:2a:0d:c4:37: cc:bb:f9:48:88:67:f7:16:c1:0f:39:70:d6:9c:9f:13:7e:12: 84:28:46:80:64:9c:01:b6:02:97:b2:25:85:2e:3a:da:36:53: 04:a3:68:35:87:c0:2c:af:5e:49:ea:22:01:97:24:56:39:6b: 41:a2:8a:5c:70:e4:25:1f:f6:30:64:ea:7b:62:48:5b:d0:87: 65:ca:47:ef:0a:22:b2:d9:1a:51:4d:09:da:d9:ad:b2:09:93: ad:d0:49:1f:2d:d8:0c:0f:e0:4c:af:d0:31:33:d8:fa:8c:45: 3c:95:94:07:1a:25:dc:94:40:e6:17:3f:c5:66:00:33:a2:4c: ae:e9:31:52:e5:df:8d:0c:f7:0e:eb:10:68:81:df:bf:d3:ae: 20:93:e1:7c:5d:31:27:c9:c9:c2:07:c5:b1:3c:d7:22:5f:56: fe:b4:b3:cd:be:b0:95:fa:3e:80:65:b5:1a:2c:5a:49:2d:32: 83:e9:81:de:e6:74:ca:5d:dd:08:74:5a:c0:26:66:4b:6c:c9: cf:2e:0c:93:9d:f4:6d:8d:46:e2:b8:13:24:d0:9b:b5:7a:6c: 2b:76:20:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRYMshX9xhOVToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZTY1OWI3MDItNWM2MC00M2E1LTllMjAtMWQyOWI1ZGIxYjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBVnGTOMlT0jV4n0xm7QzL708Vb2bevxFDLA h0D2PlX+raaJ+gP2mQ6+eJqnxXn2/T6FLppWHgfc/tLU9XayYVfcveBcp0zncdQa 7RTvLoWL6+b5SRKC7K/LUXsaRZkNc/1ZU43WZN6wjsNOYFRHlp6VQx3LhV152S2U WPhX9kW+qFKKmMMYiXyZPG6OSRjgXeyw7DNCZcpg/0kxY3ltSlNC6JCPFcN/TGMB z2g1sKl9OQiPmbthcsjILz7LZDxa8gsJxAbET9FikbDuuRmxOoYP5HYC3ITdCGg0 eW/YKPjma4tsRjHs4Xuw74ujfkGeOp7mJRuoF8FbT/XXGwZkmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEuty41KSTmuFcSMQI8saE0gN/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDNlZjQ5Y2QtODYwOC0z NTBmLThjNzItODdhZWNiZTc5NzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIr2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALe4ne4x2BHUHCkZ8tqcmuPCaI5B6QSXd5KX3M9etLFKg3EN8y7+UiI Z/cWwQ85cNacnxN+EoQoRoBknAG2ApeyJYUuOto2UwSjaDWHwCyvXknqIgGXJFY5 a0Giilxw5CUf9jBk6ntiSFvQh2XKR+8KIrLZGlFNCdrZrbIJk63QSR8t2AwP4Eyv 0DEz2PqMRTyVlAcaJdyUQOYXP8VmADOiTK7pMVLl340M9w7rEGiB37/TriCT4Xxd MSfJycIHxbE81yJfVv60s82+sJX6PoBltRosWkktMoPpgd7mdMpd3Qh0WsAmZkts yc8uDJOd9G2NRuK4EyTQm7V6bCt2IC0= -----END CERTIFICATE-----Generated at Sun Oct 11 18:54:15 2026 by rpki-client