$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa File: da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa (raw, json) Hash identifier: xGQSKQS5tcHN/ym7A0VUsRdIrOvnLgGpQeie4aUt3kk= Subject key identifier: 5A:DC:72:F3:AC:93:77:9C:C9:37:D6:0B:66:8D:43:C1:DD:F5:49:FA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F3E47ED32ADD6AF8501577DF0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 202 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ed:32:ad:d6:af:85:01:57:7d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=4fb7e9d1-0c4a-4591-a70e-7a9db7400e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:a7:18:f7:fb:ad:7e:5e:5a:3c:23:dd:2f: 84:c5:7f:ac:29:be:4f:78:06:b4:65:fd:82:01:83: b3:a8:42:83:4b:b7:7f:c3:79:8b:5a:0f:e7:fb:da: 7d:b3:5b:c1:60:58:84:d2:86:65:44:40:36:99:a1: 47:f9:a7:42:9a:9f:22:31:1b:a8:d9:e7:95:78:66: 2a:4e:9c:20:7e:54:f6:8f:0a:d4:5f:ce:d7:13:84: 2f:a0:44:df:51:61:b5:f8:34:1d:67:f0:07:1c:19: 4d:65:7b:32:20:3b:71:06:d5:19:63:4b:fd:be:9f: a1:bb:81:48:ec:9e:07:86:f0:f7:54:be:f4:d2:e3: 7f:63:fe:d3:d2:ef:ca:58:d5:a6:15:ff:af:ff:b7: e5:66:6a:0e:56:4f:10:1b:98:f7:7c:67:83:62:ed: ee:82:37:0d:f4:bc:04:8c:c4:0c:fa:f8:bc:9b:06: 33:85:6a:db:a7:ec:ee:97:d3:59:14:3a:16:46:f3: 04:5e:46:4c:c4:08:4e:6e:cb:cb:74:90:e0:04:d5: 87:68:54:9b:cd:e6:79:9e:89:62:bd:d8:48:8f:05: ab:9a:90:c5:29:4e:7a:af:cf:40:cf:51:25:eb:b5: de:da:38:a2:72:b1:27:02:fb:02:cd:bd:7f:28:41: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DC:72:F3:AC:93:77:9C:C9:37:D6:0B:66:8D:43:C1:DD:F5:49:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:27:0c:54:06:45:f2:25:72:c8:5c:41:bd:14:72:a2:49:c6: a0:ce:ee:2e:7b:3a:b9:e8:2a:0b:d4:76:27:0b:fa:c0:99:20: bc:28:60:65:16:e2:43:e1:88:37:a2:c1:bb:24:60:20:23:20: 6f:e7:85:ec:d4:21:2e:ba:55:8c:9a:2f:09:15:18:55:da:ac: 1d:da:1e:83:ed:6d:0a:f5:12:8b:3c:60:3d:64:b2:d9:cd:51: fa:04:12:a0:25:c2:a6:f0:95:26:a8:1b:be:b1:ea:e7:4c:aa: 63:45:5e:21:e0:3b:d6:ae:42:9b:b5:09:79:44:c1:00:47:51: b4:80:4c:85:74:82:ef:a2:7c:9e:8e:68:cc:f6:52:0e:68:54: 9d:6e:62:f6:2c:0a:59:6d:8f:39:3b:4a:fe:a6:65:05:27:f8: ed:0d:94:c9:b9:c0:76:f3:3c:12:a4:f6:41:66:6a:83:a6:2a: bf:ab:dc:c6:ee:1b:a1:e5:4e:8f:a5:6e:d7:c3:61:6c:5f:2b: c4:d0:c9:f7:ad:d7:a8:07:28:8d:93:f6:a0:02:fd:26:bf:78: 7d:87:30:e5:03:88:dc:27:32:3f:b2:84:fb:90:39:b8:a7:55: 49:fd:e6:3c:32:1a:61:7c:73:e2:91:a2:22:38:52:f0:58:12: ea:1f:11:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+0yrdavhQFXffAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NGZiN2U5ZDEtMGM0YS00NTkxLWE3MGUtN2E5ZGI3NDAwZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLOnGPf7rX5eWjwj3S+ExX+sKb5PeAa0Zf2C AYOzqEKDS7d/w3mLWg/n+9p9s1vBYFiE0oZlREA2maFH+adCmp8iMRuo2eeVeGYq TpwgflT2jwrUX87XE4QvoETfUWG1+DQdZ/AHHBlNZXsyIDtxBtUZY0v9vp+hu4FI 7J4HhvD3VL700uN/Y/7T0u/KWNWmFf+v/7flZmoOVk8QG5j3fGeDYu3ugjcN9LwE jMQM+vi8mwYzhWrbp+zul9NZFDoWRvMEXkZMxAhObsvLdJDgBNWHaFSbzeZ5noli vdhIjwWrmpDFKU56r89Az1El67Xe2jiicrEnAvsCzb1/KEHL4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrccvOsk3ecyTfWC2aNQ8Hd9Un6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwMjRiOWItYmI2Mi0z ZDNmLTg0YzctZjM1YjUyNzc5Y2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJonDFQGRfIlcshcQb0UcqJJxqDO7i57OrnoKgvUdicL+sCZILwoYGUW 4kPhiDeiwbskYCAjIG/nhezUIS66VYyaLwkVGFXarB3aHoPtbQr1Eos8YD1kstnN UfoEEqAlwqbwlSaoG76x6udMqmNFXiHgO9auQpu1CXlEwQBHUbSATIV0gu+ifJ6O aMz2Ug5oVJ1uYvYsClltjzk7Sv6mZQUn+O0NlMm5wHbzPBKk9kFmaoOmKr+r3Mbu G6HlTo+lbtfDYWxfK8TQyfet16gHKI2T9qAC/Sa/eH2HMOUDiNwnMj+yhPuQObin VUn95jwyGmF8c+KRoiI4UvBYEuofEfY= -----END CERTIFICATE-----Generated at Tue Oct 13 19:35:39 2026 by rpki-client