$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa File: 196e1976-14cd-3c8e-933a-dac31649a3e1.roa (raw, json) Hash identifier: zfXz+IjrXjhbd1hdZGoNXa4oa+K53A6ncIiAlq8OXak= Subject key identifier: 5D:20:6D:15:5D:6D:42:02:64:98:76:F3:B7:1E:38:24:44:27:5D:B2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA7884F6A78E7E329BD15B500 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 203 IP address blocks: 20.137.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4f:6a:78:e7:e3:29:bd:15:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=af586a71-9c87-4ce4-b8bc-622d6ecd6819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:31:73:c0:a3:b6:c9:c5:b8:74:00:89:22: 96:9a:8d:b0:8e:cf:ff:99:ad:0c:41:dd:42:dc:6e: ee:64:da:db:5b:aa:ae:7d:a3:7c:1c:a5:9e:d5:79: d0:f0:fd:57:09:4d:7c:8e:f3:7e:08:d5:01:16:12: 78:37:d2:b7:26:09:fc:fd:1c:c7:72:e1:45:d4:95: 0c:82:d6:ab:e1:5e:92:a8:37:f1:72:29:1a:63:bc: 7a:2d:d6:72:a8:e8:37:66:a5:c6:9b:ca:9f:a3:8e: 73:97:59:4c:84:e4:d9:a1:8a:3f:88:31:f0:36:7c: 85:a3:a4:da:85:f7:b6:2d:05:ec:a8:83:36:b8:a7: 61:03:47:9b:db:ad:de:bc:de:4a:66:2c:d1:5c:43: 23:60:87:14:e3:fe:08:ab:ec:d7:96:1b:e8:ff:a6: 4d:42:83:15:21:78:e4:56:a0:85:2b:c6:45:91:ab: 11:96:f4:67:db:c4:fb:c3:09:13:32:1a:28:a8:21: 94:d6:cf:31:14:c8:05:d3:bb:66:75:a4:c7:e8:88: ac:45:c3:d9:d5:26:cc:9b:3b:58:f3:1a:3e:8a:89: 00:43:cb:37:4b:8d:20:ab:ce:58:1a:c9:24:08:b6: 86:90:59:1d:68:5d:50:1e:a8:3c:35:7c:b3:f6:00: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:20:6D:15:5D:6D:42:02:64:98:76:F3:B7:1E:38:24:44:27:5D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3f:32:cd:4f:ce:3f:46:c2:4c:fd:0d:f6:e3:bf:e6:17:a0: f6:f2:06:f1:c6:b1:fa:d3:b9:f9:a4:11:4d:dd:57:fb:47:72: ce:8d:f1:83:85:7d:b0:0d:a3:9d:d4:7b:21:63:48:2a:ea:3b: 56:48:43:d1:ae:07:0d:69:93:08:12:b3:68:b6:5f:f6:6b:c5: c6:07:a9:06:b3:ea:55:2f:13:d0:7f:33:60:d2:60:4e:d8:d9: a4:88:92:91:ab:cb:77:ad:e0:a6:40:52:2b:b4:ed:f7:80:7a: 90:3c:00:24:1d:e7:69:88:da:03:af:ea:02:73:f9:6c:7a:58: 92:00:88:a2:b1:5f:b2:aa:cd:43:6d:f1:72:94:0e:8a:1c:20: b8:88:a7:04:3c:2c:87:e5:5f:fc:be:7a:43:6f:ba:f3:bb:9c: 6e:fd:87:00:60:cd:28:0a:69:b1:46:15:8b:5e:11:32:34:37: d2:01:c1:03:94:3b:4a:9a:38:42:6f:16:d8:a2:02:dd:f3:ed: d5:8e:f9:ee:17:7f:f4:34:1a:58:9d:87:31:26:41:a7:d5:90: 7f:f2:4d:53:5f:64:89:c7:5d:f8:88:9d:a5:be:d2:26:d5:41: 3c:fc:87:4f:ea:26:de:46:47:8e:bc:72:44:81:4e:4f:e9:fd: cb:06:34:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE9qeOfjKb0VtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWY1ODZhNzEtOWM4Ny00Y2U0LWI4YmMtNjIyZDZlY2Q2ODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmQxc8CjtsnFuHQAiSKWmo2wjs//ma0MQd1C 3G7uZNrbW6qufaN8HKWe1XnQ8P1XCU18jvN+CNUBFhJ4N9K3Jgn8/RzHcuFF1JUM gtar4V6SqDfxcikaY7x6LdZyqOg3ZqXGm8qfo45zl1lMhOTZoYo/iDHwNnyFo6Ta hfe2LQXsqIM2uKdhA0eb263evN5KZizRXEMjYIcU4/4Iq+zXlhvo/6ZNQoMVIXjk VqCFK8ZFkasRlvRn28T7wwkTMhooqCGU1s8xFMgF07tmdaTH6IisRcPZ1SbMmztY 8xo+iokAQ8s3S40gq85YGskkCLaGkFkdaF1QHqg8NXyz9gAo3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0gbRVdbUICZJh287ceOCREJ12yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTk2ZTE5NzYtMTRjZC0z YzhlLTkzM2EtZGFjMzE2NDlhM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8/Ms1Pzj9Gwkz9Dfbjv+YXoPbyBvHGsfrTufmkEU3dV/tHcs6N8YOF fbANo53UeyFjSCrqO1ZIQ9GuBw1pkwgSs2i2X/ZrxcYHqQaz6lUvE9B/M2DSYE7Y 2aSIkpGry3et4KZAUiu07feAepA8ACQd52mI2gOv6gJz+Wx6WJIAiKKxX7KqzUNt 8XKUDoocILiIpwQ8LIflX/y+ekNvuvO7nG79hwBgzSgKabFGFYteETI0N9IBwQOU O0qaOEJvFtiiAt3z7dWO+e4Xf/Q0GlidhzEmQafVkH/yTVNfZInHXfiInaW+0ibV QTz8h0/qJt5GR468ckSBTk/p/csGNNM= -----END CERTIFICATE-----Generated at Wed Jul 29 08:52:24 2026 by rpki-client