$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa File: d99a5305-6483-3f7c-aa24-6e3e80884735.roa (raw, json) Hash identifier: wo+W2HS6M1xXaGZS7MiW7qzAQuT2dHF+Uv1Ebt5Zh4o= Subject key identifier: 2E:CE:9A:C7:E1:97:89:10:DB:0F:7C:9D:06:8E:80:46:C6:56:17:C7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7E7DC35CC6D6E2B269E94330 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 202 IP address blocks: 20.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c3:5c:c6:d6:e2:b2:69:e9:43:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=0090605a-e3fa-433f-b497-0c5f80ed2e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:10:2e:92:f7:74:23:b0:30:e5:9b:92:d7: 7f:a0:bc:c5:4e:ae:d2:46:a7:3a:7b:90:60:09:6c: 59:52:38:b0:53:bd:dc:6b:bb:7a:1c:04:04:16:cc: 82:76:60:1c:52:3c:c6:39:0a:1d:46:7d:c1:ea:4e: cb:bb:e2:7b:4e:f2:47:03:41:99:a3:49:be:22:88: a3:4b:5a:89:70:9b:7f:f6:8d:de:d5:04:8c:6f:a6: cf:51:8d:26:ac:ca:4d:db:02:55:66:46:11:54:d1: 8a:19:94:49:6f:6f:78:2b:64:7e:c6:7f:eb:ef:8b: a6:b7:66:b9:4a:3f:ed:22:bd:8f:be:95:ae:f6:12: ff:b0:57:4e:3d:d3:f3:56:32:02:2b:35:36:7b:30: d2:33:84:20:de:41:43:1d:27:83:1d:67:86:9f:8b: c8:e7:3e:61:4b:42:93:77:ee:c3:f4:64:c8:0b:a3: 82:9d:39:af:39:a2:5d:c6:e6:bb:16:ee:52:34:d0: 83:99:3c:b6:f7:40:6e:bf:99:f5:f1:90:14:31:50: 15:1b:4d:ec:2b:03:d1:0a:5b:b6:e6:7f:f4:6b:f9: 4e:6b:88:2a:c8:4c:f4:f7:38:df:ef:e8:11:64:09: 55:b4:ba:3a:af:d9:98:9c:af:f7:16:4c:63:3f:3b: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CE:9A:C7:E1:97:89:10:DB:0F:7C:9D:06:8E:80:46:C6:56:17:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:48:e0:13:31:bd:6a:6c:b4:1f:5b:ec:8a:62:03:9d:2a:aa: 57:5c:38:22:d7:8f:cd:1f:1e:2e:1a:92:a0:43:1e:58:1b:6c: 71:d5:b7:fa:cb:dc:08:f4:36:ac:79:ed:f5:04:ac:ce:63:6d: 02:15:ac:4e:d9:69:42:1f:62:cc:31:90:62:f9:fc:bf:d2:ff: 95:29:e7:5e:70:51:e4:61:f3:c1:ed:fc:5a:b3:ba:6c:7b:d9: f0:e2:79:fe:58:04:d8:0f:74:f3:19:fa:68:d9:a3:a6:f3:05: 70:94:5e:51:8f:3c:a6:d4:70:9e:41:f3:87:9a:ba:27:e4:da: 1b:d3:fb:18:c2:e0:60:8d:10:cf:39:0a:54:51:ef:60:59:9d: c6:ee:f5:35:8f:ea:b7:ce:fe:10:ee:5a:d1:74:ed:70:c8:7b: 53:7c:3a:75:9f:6e:a5:ff:ba:cf:35:eb:bc:c3:c7:54:04:fb: 4a:7f:08:dd:cb:ac:df:17:bf:7a:d3:b1:d2:6c:3f:95:2d:7f: a4:c4:eb:e0:df:cd:01:33:a8:31:e3:49:7f:2d:95:01:3b:5a: 8b:d5:66:4f:02:63:f6:e1:84:d4:72:e5:24:a2:44:95:20:18: 7c:4c:1c:d7:88:8e:88:32:6f:5c:a5:10:02:2a:8b:d9:33:a1: 7f:03:40:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcNcxtbismnpQzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MDA5MDYwNWEtZTNmYS00MzNmLWI0OTctMGM1ZjgwZWQyZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVAQLpL3dCOwMOWbktd/oLzFTq7SRqc6e5Bg CWxZUjiwU73ca7t6HAQEFsyCdmAcUjzGOQodRn3B6k7Lu+J7TvJHA0GZo0m+Ioij S1qJcJt/9o3e1QSMb6bPUY0mrMpN2wJVZkYRVNGKGZRJb294K2R+xn/r74umt2a5 Sj/tIr2PvpWu9hL/sFdOPdPzVjICKzU2ezDSM4Qg3kFDHSeDHWeGn4vI5z5hS0KT d+7D9GTIC6OCnTmvOaJdxua7Fu5SNNCDmTy290Buv5n18ZAUMVAVG03sKwPRClu2 5n/0a/lOa4gqyEz09zjf7+gRZAlVtLo6r9mYnK/3FkxjPzs8+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7Omsfhl4kQ2w98nQaOgEbGVhfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDk5YTUzMDUtNjQ4My0z ZjdjLWFhMjQtNmUzZTgwODg0NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdI4BMxvWpstB9b7IpiA50qqldcOCLXj80fHi4akqBDHlgbbHHVt/rL 3Aj0Nqx57fUErM5jbQIVrE7ZaUIfYswxkGL5/L/S/5Up515wUeRh88Ht/Fqzumx7 2fDief5YBNgPdPMZ+mjZo6bzBXCUXlGPPKbUcJ5B84eauifk2hvT+xjC4GCNEM85 ClRR72BZncbu9TWP6rfO/hDuWtF07XDIe1N8OnWfbqX/us8167zDx1QE+0p/CN3L rN8Xv3rTsdJsP5Utf6TE6+DfzQEzqDHjSX8tlQE7WovVZk8CY/bhhNRy5SSiRJUg GHxMHNeIjogyb1ylEAIqi9kzoX8DQDw= -----END CERTIFICATE-----Generated at Thu Oct 15 12:27:56 2026 by rpki-client