$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa File: da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa (raw, json) Hash identifier: WMkuhSJ3sgiHsFFgg6/lgO4xpvIg1ADlsg8IRhN6smU= Subject key identifier: B3:F0:DD:3E:C6:87:DC:A1:4D:44:33:32:B7:01:E5:5C:4E:CD:DD:39 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62CE500EC8B476C908EC70 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 203 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ce:50:0e:c8:b4:76:c9:08:ec:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=a83d27ad-ea98-4ca8-a48d-b2bedf013c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:0a:a0:86:5b:c8:7c:c7:d8:0d:5b:4b:f4: d1:fa:51:dc:3f:d5:ef:11:f6:c4:a6:27:6a:75:5e: 1f:89:07:5c:b4:be:d2:6f:2b:5c:2e:34:95:84:9d: b3:4d:c1:7c:bd:66:45:27:2a:aa:60:e0:ae:b8:59: 1b:04:86:3a:ae:86:19:54:d8:fe:3a:66:79:45:b6: d2:f7:d7:1d:db:6e:29:b6:5a:4a:8f:7b:77:f6:63: 81:db:57:2e:aa:bc:53:ee:c2:9b:a6:1b:3d:31:22: eb:93:d6:4d:23:ba:f2:84:a9:d6:3b:3c:25:b6:89: ca:b8:cb:a1:53:37:6c:8d:e0:a5:22:3c:2c:05:66: 5a:1c:01:47:6b:81:62:33:c9:2b:dd:4f:d7:3c:7d: 02:77:03:b5:52:b5:01:b6:7e:9d:59:90:8d:b5:a5: 6b:e8:e5:3e:57:d5:73:ae:4d:cf:22:bf:cd:68:89: e2:a8:6c:31:5e:91:6a:d8:74:2f:a8:df:3c:7f:f6: 8d:db:33:61:ef:77:63:d7:fc:a7:ed:b9:42:55:f8: 4d:4a:c5:20:74:77:cf:ba:f5:79:ec:e8:6e:5d:d2: 0b:72:21:1f:a5:80:ec:2a:0b:71:42:c9:67:1e:4f: 6b:8f:a0:cb:a4:16:e2:35:22:d2:9a:13:b4:d1:9a: 88:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F0:DD:3E:C6:87:DC:A1:4D:44:33:32:B7:01:E5:5C:4E:CD:DD:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a4:a0:54:bc:6d:db:36:c9:51:53:f7:6c:f8:a6:bd:d4:fd: 1a:ce:e1:3d:82:b7:93:99:b4:fc:8e:72:7e:75:81:d0:8c:bd: af:51:95:94:97:aa:8b:51:8f:a6:a8:c8:b4:3a:69:82:f7:3b: d8:18:1d:90:47:60:11:05:b8:eb:21:4f:9c:5a:87:54:5a:92: f0:00:99:53:2b:ae:1c:81:e1:62:cc:de:a0:66:8a:6b:0e:80: 0b:48:ea:53:4c:c9:2b:20:29:32:d3:ac:b5:a2:78:98:58:46: e2:cd:2e:85:5e:a2:a3:c1:fd:79:ef:aa:ff:6b:70:cd:4b:98: a2:0c:16:f6:97:58:56:09:74:b4:ec:b3:52:3a:f0:d9:c8:8e: 43:97:6d:5c:7b:97:90:48:4b:d8:29:3b:dc:a2:39:5b:40:1a: 06:1e:0b:03:86:21:be:b0:06:f3:4f:c3:4d:f3:9b:05:c0:62: a9:be:93:f6:1b:1d:23:8d:ce:65:e9:13:47:f5:85:8e:24:34: 44:53:a8:72:58:c5:77:1e:f3:c8:e2:c3:5a:5f:b8:9c:cd:c9: 0b:f0:ef:e4:8b:0f:d6:38:6e:3c:2a:a7:4d:ad:44:b1:eb:7d: 69:c7:61:03:40:29:a9:3a:05:1a:91:a9:ac:de:fc:58:46:5c: da:eb:b8:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYs5QDsi0dskI7HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YTgzZDI3YWQtZWE5OC00Y2E4LWE0OGQtYjJiZWRmMDEzYzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVUKoIZbyHzH2A1bS/TR+lHcP9XvEfbEpidq dV4fiQdctL7SbytcLjSVhJ2zTcF8vWZFJyqqYOCuuFkbBIY6roYZVNj+OmZ5RbbS 99cd224ptlpKj3t39mOB21cuqrxT7sKbphs9MSLrk9ZNI7ryhKnWOzwltonKuMuh UzdsjeClIjwsBWZaHAFHa4FiM8kr3U/XPH0CdwO1UrUBtn6dWZCNtaVr6OU+V9Vz rk3PIr/NaIniqGwxXpFq2HQvqN88f/aN2zNh73dj1/yn7blCVfhNSsUgdHfPuvV5 7OhuXdILciEfpYDsKgtxQslnHk9rj6DLpBbiNSLSmhO00ZqIjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPw3T7Gh9yhTUQzMrcB5VxOzd05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwYWE1ZjEtNTllNi0z ZmRkLTgyYmItYTA0OTI0MWY2MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGkoFS8bds2yVFT92z4pr3U/RrO4T2Ct5OZtPyOcn51gdCMva9RlZSX qotRj6aoyLQ6aYL3O9gYHZBHYBEFuOshT5xah1RakvAAmVMrrhyB4WLM3qBmimsO gAtI6lNMySsgKTLTrLWieJhYRuLNLoVeoqPB/Xnvqv9rcM1LmKIMFvaXWFYJdLTs s1I68NnIjkOXbVx7l5BIS9gpO9yiOVtAGgYeCwOGIb6wBvNPw03zmwXAYqm+k/Yb HSONzmXpE0f1hY4kNERTqHJYxXce88jiw1pfuJzNyQvw7+SLD9Y4bjwqp02tRLHr fWnHYQNAKak6BRqRqaze/FhGXNrruJ8= -----END CERTIFICATE-----Generated at Tue Oct 13 08:33:08 2026 by rpki-client