$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa File: 32054d0b-077d-3e96-8773-c1690e50a953.roa (raw, json) Hash identifier: eVxy1bQ8IqOZoS0UJW6tG1U+P1H0P421BRgIvjHN/gk= Subject key identifier: B2:26:36:88:FC:F1:33:79:74:E6:8D:7B:A4:7C:E1:E1:74:9F:E9:78 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62CC33955A6E0B31BE0B10 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 202 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:cc:33:95:5a:6e:0b:31:be:0b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=45f7b051-d8fc-4dc7-8de1-321c03d5df1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:97:33:06:27:41:ac:a8:b4:2f:08:a6:af: ec:ed:d9:c3:19:ab:be:e3:c7:96:ec:77:85:20:fe: 64:85:12:e0:fa:94:a7:85:4a:bb:62:55:9b:45:e1: eb:7c:38:48:8b:1d:2b:67:94:0d:02:4c:4d:d8:b3: d8:ae:eb:f5:d3:b2:a2:c8:2e:0c:a1:31:02:56:94: ce:7b:b5:8d:c3:9c:fa:c9:95:df:27:db:bd:71:98: 96:60:8f:03:b2:a5:0d:07:2f:af:8d:74:2f:84:21: bf:a2:cc:45:42:7a:4a:3d:03:48:54:26:2d:17:dd: 2b:b9:01:9f:ed:59:f1:dc:6b:50:d6:5d:cd:0b:8c: 32:0a:75:a5:e6:8b:87:92:3b:ce:6c:13:2b:c2:b5: 84:1f:5b:54:18:4e:2c:38:ad:51:2b:f2:8a:a3:9e: 2f:27:90:d7:d1:00:cc:9a:0c:18:2a:40:b5:5f:ff: 3c:ec:b9:cb:11:64:0a:f8:ce:b6:2f:50:26:e8:0b: 61:03:91:30:d6:64:5b:91:ff:58:e0:1a:f5:1f:af: 10:10:3c:11:49:e2:28:35:10:38:2d:5e:ce:f8:ef: 1b:52:8e:11:f2:d1:65:f8:dc:82:1c:41:f9:5b:8a: f4:4e:d1:08:2f:a8:f6:51:1b:05:3f:02:ed:3c:26: 13:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:26:36:88:FC:F1:33:79:74:E6:8D:7B:A4:7C:E1:E1:74:9F:E9:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:2a:61:33:00:a3:51:67:67:15:9a:62:70:70:a3:8d:f9:e2: fa:27:61:71:19:db:a2:6d:db:c8:89:fe:83:84:7c:aa:ae:81: fa:40:3c:5f:0e:a6:ae:b1:bf:fd:d2:b8:8a:b3:0f:82:57:2e: c7:74:36:8e:94:d1:45:50:c3:14:a2:da:90:00:66:41:17:b2: b0:04:03:b4:55:3b:5d:54:ea:80:dc:b5:59:44:69:c8:0f:6a: ba:82:6b:bb:b9:73:87:66:a2:fe:dc:aa:7e:f6:b4:5c:64:b7: 27:0b:cf:13:63:b2:f4:2d:ce:bb:f4:88:48:90:b0:c0:1f:d6: e3:1a:d4:c2:cc:1e:7a:86:ca:f1:4f:66:62:5f:c1:7a:4f:c2: 94:e7:78:12:f2:0a:78:e8:af:a8:aa:94:e8:3b:59:b3:f0:65: c7:87:58:d2:7e:88:8a:3b:53:ec:e3:8f:d2:cf:ed:73:0e:49: 3e:72:f6:e8:41:6f:2d:52:00:b0:ef:29:4e:7a:da:9c:29:2b: 4d:a0:5d:df:f8:d7:9a:1a:b4:ee:6e:e8:9b:d4:a8:fc:58:ee: ca:db:ba:c2:58:f7:ab:77:2b:5f:9b:83:58:36:e5:81:c3:40: 01:a1:52:9b:e6:53:7d:7a:27:ea:10:a6:66:42:07:24:33:c8: c5:53:3d:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYswzlVpuCzG+CxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NDVmN2IwNTEtZDhmYy00ZGM3LThkZTEtMzIxYzAzZDVkZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSOXMwYnQayotC8Ipq/s7dnDGau+48eW7HeF IP5khRLg+pSnhUq7YlWbReHrfDhIix0rZ5QNAkxN2LPYruv107KiyC4MoTECVpTO e7WNw5z6yZXfJ9u9cZiWYI8DsqUNBy+vjXQvhCG/osxFQnpKPQNIVCYtF90ruQGf 7Vnx3GtQ1l3NC4wyCnWl5ouHkjvObBMrwrWEH1tUGE4sOK1RK/KKo54vJ5DX0QDM mgwYKkC1X/887LnLEWQK+M62L1Am6AthA5Ew1mRbkf9Y4Br1H68QEDwRSeIoNRA4 LV7O+O8bUo4R8tFl+NyCHEH5W4r0TtEIL6j2URsFPwLtPCYTcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLImNoj88TN5dOaNe6R84eF0n+l4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzIwNTRkMGItMDc3ZC0z ZTk2LTg3NzMtYzE2OTBlNTBhOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIqYTMAo1FnZxWaYnBwo4354vonYXEZ26Jt28iJ/oOEfKqugfpAPF8O pq6xv/3SuIqzD4JXLsd0No6U0UVQwxSi2pAAZkEXsrAEA7RVO11U6oDctVlEacgP arqCa7u5c4dmov7cqn72tFxktycLzxNjsvQtzrv0iEiQsMAf1uMa1MLMHnqGyvFP ZmJfwXpPwpTneBLyCnjor6iqlOg7WbPwZceHWNJ+iIo7U+zjj9LP7XMOST5y9uhB by1SALDvKU562pwpK02gXd/415oatO5u6JvUqPxY7srbusJY96t3K1+bg1g25YHD QAGhUpvmU316J+oQpmZCByQzyMVTPZc= -----END CERTIFICATE-----Generated at Sun Oct 11 16:43:25 2026 by rpki-client