$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa File: 24f0832c-135e-30d8-934a-392b9947dce4.roa (raw, json) Hash identifier: eUT3efJlKBDWuqjz7fyP2MEimusisMYFTV32YPcL8bY= Subject key identifier: 5B:8A:AB:04:1B:4F:C7:5D:6D:0F:DB:66:57:B7:9D:90:7A:24:A7:3D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA79660BF7839429CC22E12C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3360 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:60:bf:78:39:42:9c:c2:2e:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bd69a7ca-b938-435a-9f7c-e289d9ab23ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d6:50:19:e4:af:1c:56:4c:8a:93:52:9c:82: 39:73:c5:a2:d4:45:71:d5:73:1f:5f:1b:cb:38:9e: 5d:10:5a:ba:0c:99:de:ac:f3:f7:17:a4:d5:96:9f: 83:23:d9:de:d8:b0:a8:2c:8d:49:e2:29:cf:a3:03: fd:23:fd:c7:94:a5:59:fc:4a:dc:43:37:c6:01:85: a3:51:12:8a:6c:33:e1:51:d8:7d:b2:b4:1d:49:f8: 7a:1d:3b:b6:a8:49:ea:87:17:28:e0:9e:45:f1:0e: de:f0:ef:6b:ce:a1:7e:6c:10:7a:7f:ff:5b:ee:9b: 97:1d:e5:8a:c1:bc:9c:ed:28:8a:56:91:ec:f2:ec: 72:8d:95:17:71:51:8c:3f:d3:25:93:93:f5:08:9b: 13:88:cb:f3:9f:e5:6e:f3:16:d7:47:49:1f:0e:6a: 45:db:a8:7c:83:4c:8b:8a:1a:94:fb:87:d7:22:a4: 3d:4e:58:c9:7d:f8:00:50:98:00:4c:34:f8:ac:e1: f1:01:3e:5e:51:ca:fa:50:c0:44:8d:25:bf:dd:c5: 25:64:ca:c4:68:67:a8:f4:6e:7f:49:5c:16:28:a3: 9b:e4:90:dd:74:b2:fa:4e:7a:a2:e5:15:1a:13:36: 67:99:4a:93:59:1f:23:b4:9e:d3:ec:a3:1f:c5:6f: 0f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8A:AB:04:1B:4F:C7:5D:6D:0F:DB:66:57:B7:9D:90:7A:24:A7:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:73:5b:bc:88:33:a5:9a:63:2e:7f:e9:8b:dc:e8:e2:d1:29: 81:ad:3f:af:f6:52:c8:a3:5f:c4:d7:c1:34:47:1e:74:69:5e: 9b:a9:f6:2e:c4:28:c2:18:68:1f:7a:b2:1f:9c:3a:2c:c5:49: 89:de:82:5f:8f:77:00:1c:45:4e:ab:e4:e1:7f:54:ab:f1:d8: d9:e5:bc:55:95:aa:3e:2d:ec:12:fc:45:53:35:ea:8a:fe:c4: 45:4c:5b:f5:f3:e4:79:3d:87:e8:c8:6b:55:58:d7:6f:73:b3: f1:c1:82:fb:e0:85:42:17:2c:70:f5:8f:ef:0f:f8:86:76:db: ac:fd:ab:f6:e2:78:81:4d:0e:ab:c6:fc:11:90:5b:6a:44:29: 06:23:85:bc:10:7f:a9:15:81:7b:fb:a1:b8:c6:90:75:d7:df: a6:99:7e:2d:59:8d:cf:50:ea:4b:3e:7b:6d:c1:0a:38:65:00: c7:9f:55:2c:53:2d:5d:bf:db:ab:d4:40:56:65:a8:33:50:68: 47:4c:87:c1:bf:5c:02:28:63:4a:84:68:09:bd:5d:8b:e6:1e: c5:af:5d:fd:e9:a5:25:06:ad:38:9a:15:ac:bd:47:c7:69:93: 2c:84:90:50:06:df:cf:b4:1b:f6:ed:cf:e9:1a:ce:77:ca:bf: e8:1c:b0:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlmC/eDlCnMIuEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmQ2OWE3Y2EtYjkzOC00MzVhLTlmN2MtZTI4OWQ5YWIyM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9ZQGeSvHFZMipNSnII5c8Wi1EVx1XMfXxvL OJ5dEFq6DJnerPP3F6TVlp+DI9ne2LCoLI1J4inPowP9I/3HlKVZ/ErcQzfGAYWj URKKbDPhUdh9srQdSfh6HTu2qEnqhxco4J5F8Q7e8O9rzqF+bBB6f/9b7puXHeWK wbyc7SiKVpHs8uxyjZUXcVGMP9Mlk5P1CJsTiMvzn+Vu8xbXR0kfDmpF26h8g0yL ihqU+4fXIqQ9TljJffgAUJgATDT4rOHxAT5eUcr6UMBEjSW/3cUlZMrEaGeo9G5/ SVwWKKOb5JDddLL6Tnqi5RUaEzZnmUqTWR8jtJ7T7KMfxW8PzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuKqwQbT8ddbQ/bZle3nZB6JKc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjRmMDgzMmMtMTM1ZS0z MGQ4LTkzNGEtMzkyYjk5NDdkY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERzW7yIM6WaYy5/6Yvc6OLRKYGtP6/2UsijX8TXwTRHHnRpXpup9i7E KMIYaB96sh+cOizFSYnegl+PdwAcRU6r5OF/VKvx2NnlvFWVqj4t7BL8RVM16or+ xEVMW/Xz5Hk9h+jIa1VY129zs/HBgvvghUIXLHD1j+8P+IZ226z9q/bieIFNDqvG /BGQW2pEKQYjhbwQf6kVgXv7objGkHXX36aZfi1Zjc9Q6ks+e23BCjhlAMefVSxT LV2/26vUQFZlqDNQaEdMh8G/XAIoY0qEaAm9XYvmHsWvXf3ppSUGrTiaFay9R8dp kyyEkFAG38+0G/btz+kaznfKv+gcsI4= -----END CERTIFICATE-----Generated at Wed Jul 29 10:17:31 2026 by rpki-client