$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa File: 18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa (raw, json) Hash identifier: xRgIxhzWcxim+vmcYO7lZ7tB1z9N9d11h1GJ/x6Ldpk= Subject key identifier: 5D:7F:EE:43:37:3D:DF:B9:36:D6:5E:8E:A5:11:14:A9:53:6B:7A:DB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA44516AC4773DE67BBE6C380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 203 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:16:ac:47:73:de:67:bb:e6:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=5417d3c0-549f-4c1a-8a93-32169e5ae228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:64:38:c4:41:1a:5d:75:94:83:4f:9c:b8: a4:16:8e:27:85:76:73:fe:e4:01:82:c1:d2:2e:5e: 84:72:e9:47:a3:43:b9:10:82:00:19:15:24:1e:d0: 73:bf:62:3e:7a:1d:45:ed:c0:77:43:16:ff:04:47: 06:b5:09:8e:34:e8:83:5c:83:97:c2:9f:95:b3:0e: c5:a0:4d:14:c3:0c:c7:b4:57:6b:61:24:9d:8b:9d: 44:c2:f5:27:55:de:71:93:e8:36:21:f9:4a:e4:60: ac:9f:bf:d0:59:ff:ad:06:b6:aa:4e:b5:33:bb:d0: 22:6f:9c:5e:9f:db:02:68:55:e6:59:5e:3e:e3:0d: 1d:2a:63:74:d1:41:cb:72:6d:db:31:d9:32:85:6a: 87:48:6a:7d:69:09:67:34:19:92:7a:cc:9f:93:0b: e4:4d:0e:66:ea:7a:1f:20:f6:be:7f:88:38:cd:04: 4f:be:86:b1:25:9a:d6:04:73:74:b8:d0:9f:6f:2f: 94:c9:bc:2c:ea:6b:a5:4c:47:fb:18:3d:fa:dc:36: ca:a6:08:f2:6d:98:67:38:fa:d8:e9:06:f1:80:f7: ed:3b:29:ac:61:91:31:f1:0a:d9:84:99:1c:b3:d6: 2d:78:00:40:e6:a5:51:69:10:bb:f4:f2:ae:79:96: 39:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7F:EE:43:37:3D:DF:B9:36:D6:5E:8E:A5:11:14:A9:53:6B:7A:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:24:08:bb:3e:ca:1e:aa:47:19:4c:4a:fb:71:2f:62:21:48: ec:e3:5b:44:ea:9f:e2:e0:fe:4d:08:6c:30:d1:56:77:8f:64: 39:0a:b6:2a:c1:cd:dd:cf:20:16:ba:35:7f:5d:cb:d3:c1:2f: e6:f1:04:3a:8b:62:bb:21:ce:7c:37:43:dc:a7:e9:52:55:87: 41:72:25:34:2c:6b:88:3b:2d:d9:a1:c5:73:e9:59:44:c2:0f: 7d:f9:f9:16:a6:63:9c:4a:85:2c:a2:5d:49:9d:ce:e8:6f:dd: 53:29:07:5f:4e:58:da:15:d3:f3:9b:94:09:f4:86:22:f0:8a: 22:bc:d1:53:eb:82:be:42:f0:7e:2f:3f:df:37:65:d6:b5:d2: 37:72:bc:0e:bb:02:4a:54:9d:59:a7:2c:cb:2f:88:7a:6d:42: 42:58:74:b6:4f:fc:b1:b5:69:43:9a:81:d3:db:fb:97:9f:0d: 4b:5e:ac:b5:d8:d7:81:39:1a:97:43:a9:05:e4:58:30:fc:94: ac:3d:b2:c6:da:83:8f:dc:eb:52:13:87:13:07:95:25:b9:16: 68:cb:03:eb:f0:3c:b8:c0:25:95:87:f4:b6:ae:e3:b3:58:ce: 1e:c7:d6:d9:9a:cc:86:92:ab:5e:45:8b:4c:cc:21:99:d0:ad: 27:9a:e8:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRRasR3PeZ7vmw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk NTQxN2QzYzAtNTQ5Zi00YzFhLThhOTMtMzIxNjllNWFlMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPxkOMRBGl11lINPnLikFo4nhXZz/uQBgsHS Ll6EculHo0O5EIIAGRUkHtBzv2I+eh1F7cB3Qxb/BEcGtQmONOiDXIOXwp+Vsw7F oE0UwwzHtFdrYSSdi51EwvUnVd5xk+g2IflK5GCsn7/QWf+tBraqTrUzu9Aib5xe n9sCaFXmWV4+4w0dKmN00UHLcm3bMdkyhWqHSGp9aQlnNBmSesyfkwvkTQ5m6nof IPa+f4g4zQRPvoaxJZrWBHN0uNCfby+Uybws6mulTEf7GD363DbKpgjybZhnOPrY 6QbxgPftOymsYZEx8QrZhJkcs9YteABA5qVRaRC79PKueZY5swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1/7kM3Pd+5NtZejqURFKlTa3rbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTgwNDhiM2QtOTg5MS0z N2ZkLTliM2UtYTk3Y2ZmYzg2YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgkCLs+yh6qRxlMSvtxL2IhSOzjW0Tqn+Lg/k0IbDDRVnePZDkKtirB zd3PIBa6NX9dy9PBL+bxBDqLYrshznw3Q9yn6VJVh0FyJTQsa4g7LdmhxXPpWUTC D335+RamY5xKhSyiXUmdzuhv3VMpB19OWNoV0/OblAn0hiLwiiK80VPrgr5C8H4v P983Zda10jdyvA67AkpUnVmnLMsviHptQkJYdLZP/LG1aUOagdPb+5efDUterLXY 14E5GpdDqQXkWDD8lKw9ssbag4/c61IThxMHlSW5FmjLA+vwPLjAJZWH9Lau47NY zh7H1tmazIaSq15Fi0zMIZnQrSea6K8= -----END CERTIFICATE-----Generated at Wed Jul 29 08:52:28 2026 by rpki-client