$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa File: 2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa (raw, json) Hash identifier: wQ2FUKr6upVrEEfQO2LGJYj9TnvnSPOIAwf/QmaoNss= Subject key identifier: 37:FE:05:57:1A:5F:93:8D:22:CB:0C:74:31:3D:55:8D:2B:61:38:30 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7E7DC2E2D47433D121957500 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 3356 IP address blocks: 20.134.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c2:e2:d4:74:33:d1:21:95:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=5fca8eca-0b8f-43dc-9e7f-29dfbf00d85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:95:c2:67:68:13:bc:38:b7:c7:7e:c1:87:26: c4:10:44:b3:32:e8:37:be:72:70:6e:01:58:48:02: 30:62:93:99:cf:a7:f2:5e:6d:03:5d:5c:b6:b7:75: c5:6e:ec:b6:1a:35:67:ae:64:12:93:5d:25:7b:48: f5:bf:c4:b1:de:02:e7:ea:ae:43:3c:4c:e9:49:a9: ac:4a:57:88:31:96:8f:f2:6e:e4:e0:a2:52:aa:33: a6:c5:f3:1f:27:67:25:02:4b:0d:bc:9d:97:d1:22: aa:22:bc:6e:97:d0:52:5d:76:2d:3a:ac:ba:e1:6a: 94:b2:25:19:80:b4:f6:7f:fd:28:dc:51:4b:06:21: db:83:66:24:e6:cc:38:39:53:95:42:f1:c1:4b:a0: 05:3d:ce:9b:ca:44:2c:fe:92:45:55:54:24:0b:68: b7:50:cf:ae:cd:a7:85:63:31:3a:7d:b5:54:18:7f: 78:16:cf:8a:a3:5d:25:13:e1:7d:9c:3c:87:9f:8a: dd:6e:cc:e6:2e:7c:9c:3a:16:af:bd:6b:80:65:57: 67:5b:6c:a5:21:35:d8:07:07:be:c7:c2:18:46:a2: 9e:1e:5c:52:10:7e:79:92:06:e8:4d:34:d1:c5:d4: 55:7e:e0:79:f9:99:89:6a:fb:c2:e9:1e:c7:a9:3f: c6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FE:05:57:1A:5F:93:8D:22:CB:0C:74:31:3D:55:8D:2B:61:38:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:71:d7:9a:b5:58:04:d1:d8:0c:68:10:5b:f7:b0:e1:d7:1b: b6:88:8a:f4:3c:fa:44:0d:07:9f:89:93:e7:75:c9:56:39:bc: 97:dd:c4:03:5f:69:5b:7d:dd:32:cd:c4:a9:bc:67:07:92:8a: 25:1c:4e:3a:81:7e:c7:1c:67:da:d7:4f:1f:5a:97:77:93:43: cc:6c:6f:ed:47:dc:b2:86:74:81:36:e9:6b:ad:0b:7e:6d:20: 19:f1:88:35:49:7b:2b:5b:c9:2f:ab:ee:cb:72:e3:be:70:62: e1:d4:6f:6c:cf:14:c2:e9:d2:34:63:4c:c2:82:a1:01:3e:2c: 6e:f2:9b:73:c0:bc:24:14:f5:f0:5a:b0:2d:02:74:e7:30:c5: a8:39:66:07:91:ea:00:d5:95:c1:31:29:ce:a5:bb:69:8a:bb: 09:52:1b:4f:dd:11:59:6d:14:0f:26:28:df:b7:b2:f3:79:67: b0:71:fb:ab:a0:26:82:56:74:23:15:e1:bb:60:25:f8:b0:56: 30:f4:78:f7:91:96:4f:06:55:af:9d:0b:82:18:19:bc:61:99: b3:45:9a:fd:80:41:94:0b:d9:33:97:f1:bc:a4:84:93:66:3a: ac:db:75:1e:37:54:c9:10:dc:59:94:08:43:f5:06:94:bc:26: 55:5f:da:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcLi1HQz0SGVdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NWZjYThlY2EtMGI4Zi00M2RjLTllN2YtMjlkZmJmMDBkODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZXCZ2gTvDi3x37BhybEEESzMug3vnJwbgFY SAIwYpOZz6fyXm0DXVy2t3XFbuy2GjVnrmQSk10le0j1v8Sx3gLn6q5DPEzpSams SleIMZaP8m7k4KJSqjOmxfMfJ2clAksNvJ2X0SKqIrxul9BSXXYtOqy64WqUsiUZ gLT2f/0o3FFLBiHbg2Yk5sw4OVOVQvHBS6AFPc6bykQs/pJFVVQkC2i3UM+uzaeF YzE6fbVUGH94Fs+Ko10lE+F9nDyHn4rdbszmLnycOhavvWuAZVdnW2ylITXYBwe+ x8IYRqKeHlxSEH55kgboTTTRxdRVfuB5+ZmJavvC6R7HqT/GowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDf+BVcaX5ONIssMdDE9VY0rYTgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMmRlNjZlMjMtYjBmOS0z YmVmLWJhMDAtNjc5MmViMzhlYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVx15q1WATR2AxoEFv3sOHXG7aIivQ8+kQNB5+Jk+d1yVY5vJfdxANf aVt93TLNxKm8ZweSiiUcTjqBfsccZ9rXTx9al3eTQ8xsb+1H3LKGdIE26WutC35t IBnxiDVJeytbyS+r7sty475wYuHUb2zPFMLp0jRjTMKCoQE+LG7ym3PAvCQU9fBa sC0CdOcwxag5ZgeR6gDVlcExKc6lu2mKuwlSG0/dEVltFA8mKN+3svN5Z7Bx+6ug JoJWdCMV4btgJfiwVjD0ePeRlk8GVa+dC4IYGbxhmbNFmv2AQZQL2TOX8bykhJNm OqzbdR43VMkQ3FmUCEP1BpS8JlVf2vQ= -----END CERTIFICATE-----Generated at Thu Nov 5 01:06:20 2026 by rpki-client