$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa File: 219ed1da-c95c-3af6-9248-3707f5300999.roa (raw, json) Hash identifier: baFlu7ae+Abccql53k90OuR4zPaz2tu0gYXPDbx+mR4= Subject key identifier: FA:17:CC:B4:A0:30:9E:F7:34:A0:B8:E6:DC:C8:B6:4E:C5:C6:A7:4A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA7884EDBE5442B4D8F4A2400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 203 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4e:db:e5:44:2b:4d:8f:4a:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2a529150-27df-4a2f-af39-c4c4bcb2e50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:bc:c3:ed:a8:6c:72:25:32:ba:85:ee:c3: 7c:58:9a:13:83:21:d4:ae:ab:58:e2:bf:08:43:cb: f5:fc:f7:50:ee:41:78:b1:65:fa:54:af:1d:63:bd: de:99:30:3a:de:6f:fe:52:79:11:ad:c4:e9:30:04: 80:ac:9d:9f:b4:cb:c1:2f:4a:79:33:0e:50:dc:79: 34:68:e5:83:ab:d8:ac:e3:e5:e5:f6:f2:5e:02:cf: 6f:88:ce:8b:d1:09:a1:f5:d3:83:96:f0:94:39:3d: 33:8d:43:58:39:52:ab:24:43:ec:7b:79:d5:a3:3f: 1b:66:f8:23:e8:0d:fa:10:c7:3b:b1:7d:49:99:3c: 1d:7e:65:b9:db:a1:2a:fa:df:af:f8:54:2e:78:d6: 73:06:36:0c:7e:e0:02:b0:48:6c:44:4d:3f:d2:e0: 49:89:63:c5:9d:6f:a8:06:57:05:1e:6a:d4:1b:32: d2:55:d0:e8:ac:d9:7c:69:e6:a8:c3:a5:28:1c:71: de:c5:82:38:2f:ab:39:f0:7b:a1:cf:70:23:58:72: 6f:ca:85:f3:98:42:89:de:4c:d4:44:a8:bc:99:5a: bb:eb:07:26:58:4f:d4:b0:e1:91:45:f8:b9:eb:38: 5f:3b:78:ad:76:41:60:2a:e5:32:cf:b4:22:62:b0: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:17:CC:B4:A0:30:9E:F7:34:A0:B8:E6:DC:C8:B6:4E:C5:C6:A7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:73:32:a8:95:ca:2b:2f:25:71:f9:a3:f2:6a:e1:db:91:4b: 10:24:aa:c6:e6:7b:e5:d5:dd:75:4b:6e:9c:4c:22:04:67:b3: 56:df:d4:c5:5d:50:fb:7f:39:36:3f:77:28:56:62:1b:e6:44: 9d:18:de:ad:77:43:3a:03:80:7e:75:e7:1c:87:d7:2e:bb:5f: ce:da:cb:02:7e:e2:20:60:9c:68:d2:eb:5a:3a:c7:a4:dc:5b: 28:f8:05:fa:9d:d7:7a:b5:af:fa:43:4e:d8:83:a2:af:32:e8: d3:33:02:12:1d:a1:ad:a0:5d:c8:55:ed:62:61:db:73:eb:6e: 85:59:12:f6:1a:1b:48:5f:b3:3d:a8:3a:96:7b:18:57:e1:be: 21:2b:18:57:8f:8d:44:35:07:cd:d2:7d:91:a1:f3:a3:6d:05: 7f:a1:2f:12:74:37:60:54:88:bf:72:38:dd:f3:73:18:c8:8f: dd:66:c0:35:4d:7f:a9:99:4f:0b:38:aa:fa:09:51:70:49:fa: 4b:0e:c7:c2:03:d7:91:f4:ac:63:4b:b0:32:c6:97:fe:e3:b5: 3c:9b:0e:aa:c8:43:52:6b:d5:82:db:be:0a:21:a6:c0:33:53: be:28:b9:d0:a4:5c:27:27:ca:88:58:dd:c3:bc:b6:58:fd:92: 9f:32:08:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE7b5UQrTY9KJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmE1MjkxNTAtMjdkZi00YTJmLWFmMzktYzRjNGJjYjJlNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2u8w+2obHIlMrqF7sN8WJoTgyHUrqtY4r8I Q8v1/PdQ7kF4sWX6VK8dY73emTA63m/+UnkRrcTpMASArJ2ftMvBL0p5Mw5Q3Hk0 aOWDq9is4+Xl9vJeAs9viM6L0Qmh9dODlvCUOT0zjUNYOVKrJEPse3nVoz8bZvgj 6A36EMc7sX1JmTwdfmW526Eq+t+v+FQueNZzBjYMfuACsEhsRE0/0uBJiWPFnW+o BlcFHmrUGzLSVdDorNl8aeaow6UoHHHexYI4L6s58Huhz3AjWHJvyoXzmEKJ3kzU RKi8mVq76wcmWE/UsOGRRfi56zhfO3itdkFgKuUyz7QiYrDBHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoXzLSgMJ73NKC45tzItk7FxqdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjE5ZWQxZGEtYzk1Yy0z YWY2LTkyNDgtMzcwN2Y1MzAwOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExzMqiVyisvJXH5o/Jq4duRSxAkqsbme+XV3XVLbpxMIgRns1bf1MVd UPt/OTY/dyhWYhvmRJ0Y3q13QzoDgH515xyH1y67X87aywJ+4iBgnGjS61o6x6Tc Wyj4Bfqd13q1r/pDTtiDoq8y6NMzAhIdoa2gXchV7WJh23PrboVZEvYaG0hfsz2o OpZ7GFfhviErGFePjUQ1B83SfZGh86NtBX+hLxJ0N2BUiL9yON3zcxjIj91mwDVN f6mZTws4qvoJUXBJ+ksOx8ID15H0rGNLsDLGl/7jtTybDqrIQ1Jr1YLbvgohpsAz U74oudCkXCcnyohY3cO8tlj9kp8yCP8= -----END CERTIFICATE-----Generated at Wed Jul 29 10:17:58 2026 by rpki-client