$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa File: f934d4a4-fde5-3e78-b53a-cc71da69f923.roa (raw, json) Hash identifier: yorFv/l3Oq7TFIO0B2fXtZmjIajLOYw8G56v7rvzipM= Subject key identifier: C6:0F:04:90:D8:CB:39:F4:61:76:3C:51:CE:5F:3D:8C:85:45:EF:F0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F46A7E757673250C2388E4300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e7:57:67:32:50:c2:38:8e:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=4d95e227-8230-4cf0-ab32-cc4b997cd1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b0:cf:47:85:53:9f:82:61:ea:60:2c:3b:ae: ed:89:d9:f5:3e:cb:e4:b4:6a:cc:d2:da:bf:98:13: f1:f7:29:38:b4:69:19:1e:d8:04:a7:17:49:61:44: 4c:42:85:b2:5f:4c:26:1f:aa:9c:34:10:69:ae:55: 09:a5:29:87:52:0e:b1:cf:22:c4:d8:06:60:fa:ea: 33:95:e0:b6:a0:c5:ed:95:7f:bb:80:66:36:a8:13: f3:fb:b0:0f:d9:cd:07:f0:8b:62:9a:1b:b9:fc:9e: 8b:1a:11:69:fd:83:b1:a9:70:48:20:1e:d5:5b:d3: 12:cb:5b:f3:49:5c:06:24:66:aa:bb:fc:fe:12:3e: 92:42:ce:17:ee:2e:6a:39:7e:54:94:68:69:10:33: 48:bc:5d:66:a5:5c:3d:d7:51:f7:6f:8a:1d:c3:a3: aa:2c:f4:98:d5:cd:b5:04:ff:dc:0a:75:c4:9e:37: 71:73:ac:59:95:8a:57:39:f1:f9:70:e3:48:54:e7: 63:15:65:09:1b:31:4d:d5:76:c9:0b:f6:ed:c4:fb: 29:a3:9a:66:18:60:c1:54:e5:11:62:cc:a6:ca:cd: 82:19:cb:8c:4c:0b:a8:57:71:dd:96:26:eb:aa:f5: 63:b5:82:79:a2:25:72:43:5a:cf:f0:cc:ac:1e:1c: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0F:04:90:D8:CB:39:F4:61:76:3C:51:CE:5F:3D:8C:85:45:EF:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:00:35:bc:d8:69:b9:56:d4:ba:81:51:fc:e3:9b:ce:7f:ce: ab:c1:21:c7:44:d1:83:21:9c:50:43:4d:79:f9:b4:6f:c2:38: a7:5d:60:c1:4f:1f:ae:00:b2:75:e8:f4:32:17:67:a5:a1:17: c4:b5:4e:dc:6c:8b:9c:37:1f:3a:9e:ca:58:a0:2f:f6:fa:27: 8f:46:1a:f5:95:44:f0:1d:0f:33:fd:29:b3:1b:f1:b3:23:ee: 04:ba:bf:c2:ed:7c:57:a5:b3:e9:70:eb:2d:20:4b:88:90:60: 2b:66:fd:34:a2:41:95:8f:87:9a:e2:59:af:16:42:33:f8:a8: d8:43:7c:e6:56:a4:51:ed:7f:a1:82:a6:7f:b2:24:0b:da:a5: 29:1f:ca:06:d5:ef:c9:0a:85:9b:f3:2e:6c:cb:c8:7e:e7:9d: 64:a7:0d:66:59:4a:59:69:da:17:88:60:b4:1c:61:2a:e2:2c: 01:03:18:ce:b4:e5:46:ba:e0:89:0b:ce:9a:20:2d:ca:ea:c0: 3a:45:f2:ae:31:df:aa:c7:69:6f:cd:37:99:71:f1:33:a1:ab: 67:78:57:eb:55:bf:a6:10:a1:5e:4e:4c:66:0d:09:62:1c:e4: b1:cb:95:c2:1c:d3:f1:f2:df:0c:6a:92:1f:ad:e1:93:0c:d2: 56:25:f5:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+dXZzJQwjiOQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk NGQ5NWUyMjctODIzMC00Y2YwLWFiMzItY2M0Yjk5N2NkMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7DPR4VTn4Jh6mAsO67tidn1PsvktGrM0tq/ mBPx9yk4tGkZHtgEpxdJYURMQoWyX0wmH6qcNBBprlUJpSmHUg6xzyLE2AZg+uoz leC2oMXtlX+7gGY2qBPz+7AP2c0H8Itimhu5/J6LGhFp/YOxqXBIIB7VW9MSy1vz SVwGJGaqu/z+Ej6SQs4X7i5qOX5UlGhpEDNIvF1mpVw911H3b4odw6OqLPSY1c21 BP/cCnXEnjdxc6xZlYpXOfH5cONIVOdjFWUJGzFN1XbJC/btxPspo5pmGGDBVOUR Ysymys2CGcuMTAuoV3HdlibrqvVjtYJ5oiVyQ1rP8MysHhzVLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYPBJDYyzn0YXY8Uc5fPYyFRe/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjkzNGQ0YTQtZmRlNS0z ZTc4LWI1M2EtY2M3MWRhNjlmOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkANbzYablW1LqBUfzjm85/zqvBIcdE0YMhnFBDTXn5tG/COKddYMFP H64AsnXo9DIXZ6WhF8S1Ttxsi5w3HzqeyligL/b6J49GGvWVRPAdDzP9KbMb8bMj 7gS6v8LtfFels+lw6y0gS4iQYCtm/TSiQZWPh5riWa8WQjP4qNhDfOZWpFHtf6GC pn+yJAvapSkfygbV78kKhZvzLmzLyH7nnWSnDWZZSllp2heIYLQcYSriLAEDGM60 5Ua64IkLzpogLcrqwDpF8q4x36rHaW/NN5lx8TOhq2d4V+tVv6YQoV5OTGYNCWIc 5LHLlcIc0/Hy3wxqkh+t4ZMM0lYl9QI= -----END CERTIFICATE-----Generated at Sun Oct 11 08:44:44 2026 by rpki-client