$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/11f97db4-159a-3965-b1fe-e293233a3d56.roa File: 11f97db4-159a-3965-b1fe-e293233a3d56.roa (raw, json) Hash identifier: W/BzsnUfhzaAYGAvDjiNUrU+ciReXUDvG53KjMd4st4= Subject key identifier: 45:BB:36:B0:E1:A7:84:5A:A6:FC:18:75:7C:5D:4B:89:F6:73:14:0D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584FB3A688201BF5C80BC804CE80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/11f97db4-159a-3965-b1fe-e293233a3d56.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 3356 IP address blocks: 20.148.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:88:20:1b:f5:c8:0b:c8:04:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=dcf0a23e-301b-411f-aad2-3abc5b7f85d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fe:44:f6:98:5a:02:f1:4b:e1:02:40:90:2f: 27:38:3a:7d:be:74:59:68:14:f1:c6:5f:80:53:00: 58:5e:52:e8:cb:ba:d7:f6:24:dd:88:61:ac:ab:04: 8c:89:74:74:2e:f8:6a:95:b0:11:bb:9a:aa:f9:ff: 90:93:33:98:cb:d2:b9:08:89:4e:c2:ee:9c:b4:ea: fc:e1:e3:de:e9:33:62:bc:f8:10:2a:a5:f8:7e:b5: 0f:6d:cd:6e:57:11:ec:b3:db:77:0c:8e:19:e2:6c: 29:7a:20:e5:bf:7c:fc:6e:52:68:de:99:a2:53:4e: 67:d9:c4:5f:c1:0d:29:58:2b:b8:da:de:4e:88:b7: 14:23:05:44:86:4a:dc:9f:e1:d1:b9:02:a1:32:e0: d0:f3:3d:4b:a3:5f:3d:bd:6f:6f:97:a4:89:e3:e7: e2:25:df:28:6c:c7:ba:b4:0f:dc:1b:c9:f4:9d:ef: 60:f9:96:25:42:02:98:dc:58:00:4d:4f:14:4f:63: 31:45:4e:e8:5b:26:1b:24:b7:7e:ac:b9:b4:0b:0e: 9e:86:fa:bc:59:f8:74:42:e7:02:e8:af:df:82:ca: f1:aa:b5:34:fb:4b:f9:31:51:3f:6e:0c:9b:a0:04: 8b:00:d7:39:74:e8:c1:82:88:7a:31:5e:ac:7b:24: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BB:36:B0:E1:A7:84:5A:A6:FC:18:75:7C:5D:4B:89:F6:73:14:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/11f97db4-159a-3965-b1fe-e293233a3d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0e:dc:88:92:94:0d:8e:fb:a2:98:b7:b6:a1:93:91:40:8e: 3c:0e:f7:a8:94:f6:18:55:86:01:d7:dd:e8:96:5c:54:66:3e: 27:2d:fd:8a:98:34:e1:9b:86:4c:ae:d8:c8:19:c8:d9:0d:0a: ad:f8:71:b7:1a:bf:cd:10:3d:21:69:d8:e1:16:15:34:7c:d6: 27:3c:a2:8f:3c:8a:1f:23:2c:14:48:b7:77:e2:b4:5c:b0:7a: 5f:e5:b4:fc:70:9b:f4:6e:23:b2:d0:46:b3:3c:5f:85:8c:f9: a3:35:ed:86:97:2d:91:23:e9:fd:66:b3:18:11:67:d0:e7:b9: 30:db:0f:bd:ed:88:36:67:0c:6b:48:b2:2a:e9:fe:2b:75:94: 30:ba:79:d3:5b:fe:ff:ca:1e:14:9f:68:1a:70:d3:b6:f0:b5: ba:af:22:96:ae:07:ab:6c:49:31:68:cb:ac:d7:a5:80:3b:21: d6:bc:a7:8f:26:0f:21:e5:23:e3:2f:40:14:2b:6d:ba:7d:95: 14:70:f3:01:44:57:8e:b8:8d:1a:5c:ec:fb:48:7b:0c:bc:c3: 1d:bd:a7:2b:ab:cd:85:a2:de:19:f5:ca:58:dc:07:b4:bb:bd: 66:67:88:af:bd:b2:0e:eb:38:62:c4:94:c5:52:35:78:51:ab: 1d:e7:26:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpoggG/XIC8gEzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk ZGNmMGEyM2UtMzAxYi00MTFmLWFhZDItM2FiYzViN2Y4NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv5E9phaAvFL4QJAkC8nODp9vnRZaBTxxl+A UwBYXlLoy7rX9iTdiGGsqwSMiXR0LvhqlbARu5qq+f+QkzOYy9K5CIlOwu6ctOr8 4ePe6TNivPgQKqX4frUPbc1uVxHss9t3DI4Z4mwpeiDlv3z8blJo3pmiU05n2cRf wQ0pWCu42t5OiLcUIwVEhkrcn+HRuQKhMuDQ8z1Lo189vW9vl6SJ4+fiJd8obMe6 tA/cG8n0ne9g+ZYlQgKY3FgATU8UT2MxRU7oWyYbJLd+rLm0Cw6ehvq8Wfh0QucC 6K/fgsrxqrU0+0v5MVE/bgyboASLANc5dOjBgoh6MV6seyThBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEW7NrDhp4RapvwYdXxdS4n2cxQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTFmOTdkYjQtMTU5YS0z OTY1LWIxZmUtZTI5MzIzM2EzZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYO3IiSlA2O+6KYt7ahk5FAjjwO96iU9hhVhgHX3eiWXFRmPict/YqY NOGbhkyu2MgZyNkNCq34cbcav80QPSFp2OEWFTR81ic8oo88ih8jLBRIt3fitFyw el/ltPxwm/RuI7LQRrM8X4WM+aM17YaXLZEj6f1msxgRZ9DnuTDbD73tiDZnDGtI sirp/it1lDC6edNb/v/KHhSfaBpw07bwtbqvIpauB6tsSTFoy6zXpYA7Ida8p48m DyHlI+MvQBQrbbp9lRRw8wFEV464jRpc7PtIewy8wx29pyurzYWi3hn1yljcB7S7 vWZniK+9sg7rOGLElMVSNXhRqx3nJhk= -----END CERTIFICATE-----Generated at Thu Nov 5 01:06:26 2026 by rpki-client