$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa File: 0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa (raw, json) Hash identifier: fcAZTwwV2fABVdyfhgYsEyd/ZGOWkLrHVj7QXQKqTmw= Subject key identifier: 1D:8D:57:E0:F7:21:A9:6B:4D:05:B0:82:80:E8:31:4B:24:A9:17:85 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584ED861ED052D99790D77F11F40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 3356 IP address blocks: 20.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:ed:05:2d:99:79:0d:77:f1:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=dd305723-b249-48d9-8bda-649e9fd95f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bc:0d:6a:15:88:98:5f:ed:15:fb:38:df:64: 66:c0:95:03:a8:34:af:81:34:cd:0d:91:a5:43:77: 79:fc:f4:ac:40:86:3d:ff:35:fb:9f:86:23:f1:72: 11:9b:33:a6:ba:b9:61:06:68:d1:e5:56:70:60:e8: 70:db:e5:27:d7:b8:35:43:d4:7e:ea:6a:ec:17:01: e8:b5:e3:32:db:c1:ff:40:72:1f:0c:00:cf:8a:de: 46:fd:e4:2c:05:5d:d0:0e:e8:b2:f7:33:70:12:10: 0a:91:98:99:2b:c9:0f:4a:8b:ae:88:b0:b6:cb:7c: 61:f7:3a:f7:39:42:47:17:7c:d7:62:8a:ec:4c:c7: f0:68:70:39:04:54:a0:b0:8d:1a:3c:76:57:4c:09: a8:83:1d:3a:ca:39:67:45:8c:37:3f:a8:3e:5c:61: 9d:61:ab:7b:6b:bb:1e:01:8b:7d:61:98:25:2a:49: e0:12:70:1b:93:e0:96:f1:23:26:a5:f3:72:22:cf: 34:58:34:05:23:3e:6b:c5:5c:c0:b4:da:58:2e:87: de:17:ff:00:17:1c:da:16:ad:b1:21:f8:13:89:d3: c7:9e:68:27:06:e0:43:c5:f7:97:8f:77:8e:54:3f: 25:13:eb:d1:19:ff:11:08:89:42:ae:1a:bb:44:8b: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8D:57:E0:F7:21:A9:6B:4D:05:B0:82:80:E8:31:4B:24:A9:17:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b8:b5:28:64:b7:07:97:e2:bb:fd:31:54:a5:3c:4d:f5:82: b6:16:04:14:55:d1:0f:03:59:62:3d:c7:32:38:69:9d:34:29: 65:5b:36:d7:71:bf:3f:d7:e0:f7:87:bb:39:d0:45:9a:09:9a: fb:0c:28:c4:69:02:3f:31:a0:d8:8e:43:bc:dd:22:68:08:2d: 0c:6a:75:59:8a:ef:85:2b:b6:ae:58:6a:2f:dc:42:96:dc:d7: a8:6d:d0:70:cc:af:88:e2:f6:4e:95:33:b4:7a:e5:4a:ee:d2: 10:7f:70:8f:a6:14:26:4e:ac:28:6e:2e:41:79:e4:96:91:e2: 8f:0a:08:9a:ae:19:bd:b7:7a:3e:3b:16:a9:79:9f:68:2a:90: 6e:68:41:d1:d3:02:40:e5:9f:4b:54:c4:08:be:10:db:07:00: 27:34:ed:cc:d4:7e:f9:5f:74:9a:cf:23:dc:c5:07:b2:45:f6: 06:f4:d2:af:d4:ad:25:68:b3:a9:e9:83:e9:02:b7:e9:e8:45: ac:d9:1d:d7:27:81:98:32:83:fb:ce:84:61:97:ad:0d:d0:a3: cb:8c:7c:54:84:16:1e:bb:9d:53:82:22:d1:bb:d7:77:c3:77: f5:b1:f7:6f:bb:b4:ae:7f:f5:7e:b0:88:e5:b8:a1:48:64:7b: 73:24:a6:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYe0FLZl5DXfxH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZGQzMDU3MjMtYjI0OS00OGQ5LThiZGEtNjQ5ZTlmZDk1Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbwNahWImF/tFfs432RmwJUDqDSvgTTNDZGl Q3d5/PSsQIY9/zX7n4Yj8XIRmzOmurlhBmjR5VZwYOhw2+Un17g1Q9R+6mrsFwHo teMy28H/QHIfDADPit5G/eQsBV3QDuiy9zNwEhAKkZiZK8kPSouuiLC2y3xh9zr3 OUJHF3zXYorsTMfwaHA5BFSgsI0aPHZXTAmogx06yjlnRYw3P6g+XGGdYat7a7se AYt9YZglKkngEnAbk+CW8SMmpfNyIs80WDQFIz5rxVzAtNpYLofeF/8AFxzaFq2x IfgTidPHnmgnBuBDxfeXj3eOVD8lE+vRGf8RCIlCrhq7RIvojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2NV+D3IalrTQWwgoDoMUskqReFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGVjZTQxODEtZWExMi0z OWM0LThiNDctNTNkMmY0ZjI4MDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG64tShktweX4rv9MVSlPE31grYWBBRV0Q8DWWI9xzI4aZ00KWVbNtdx vz/X4PeHuznQRZoJmvsMKMRpAj8xoNiOQ7zdImgILQxqdVmK74Urtq5Yai/cQpbc 16ht0HDMr4ji9k6VM7R65Uru0hB/cI+mFCZOrChuLkF55JaR4o8KCJquGb23ej47 Fql5n2gqkG5oQdHTAkDln0tUxAi+ENsHACc07czUfvlfdJrPI9zFB7JF9gb00q/U rSVos6npg+kCt+noRazZHdcngZgyg/vOhGGXrQ3Qo8uMfFSEFh67nVOCItG713fD d/Wx92+7tK5/9X6wiOW4oUhke3MkpmM= -----END CERTIFICATE-----Generated at Sun Sep 20 15:18:12 2026 by rpki-client