$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/37c0a70e-5c5f-3f8e-be7d-8e5c4780ed74.roa File: 37c0a70e-5c5f-3f8e-be7d-8e5c4780ed74.roa (raw, json) Hash identifier: Z0GXcOkebSdJYFbyDxMLfm5WdvU1CqCoIJ2e9NftBYs= Subject key identifier: 72:8B:22:82:D6:48:2F:5D:D5:2F:69:7E:94:4B:EF:8E:6C:07:3D:70 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F2ABD19A7DCAFFFC81E4BFE00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/37c0a70e-5c5f-3f8e-be7d-8e5c4780ed74.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 20.138.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:19:a7:dc:af:ff:c8:1e:4b:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=9ce01d2f-e8b4-40fc-8c36-6c779a8f14f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:58:c2:26:3a:ab:22:00:11:50:16:b4:ca:20: a7:8f:39:d7:02:65:1f:70:a7:c0:d2:87:32:b4:69: a4:77:f0:fa:35:2a:18:8e:73:8f:73:73:bb:5a:52: ed:47:2b:b2:c9:5f:40:82:65:d7:05:65:33:8c:7a: e4:d2:44:45:91:07:60:fe:83:8d:87:de:64:e7:05: 9f:ac:4f:ee:f6:58:34:91:38:21:42:f6:ea:ed:eb: dc:09:af:01:50:d5:9f:ee:2c:73:2e:17:4f:31:17: 60:60:54:5c:b1:81:38:10:68:d6:88:13:bb:9c:40: b3:12:ea:01:ce:95:d1:a6:c1:67:5f:0b:13:81:ac: 45:c3:cd:87:c7:90:53:bb:9a:6b:46:06:d5:41:b0: 23:94:f4:72:54:05:8a:e0:db:fa:ad:d7:3b:5a:de: b3:f4:ee:55:ca:bd:12:96:95:74:bf:42:ca:c4:8d: bd:86:20:8b:7d:45:46:1b:fa:a0:2d:65:13:d9:82: 0d:ad:da:b7:f0:6b:c6:82:08:15:43:60:08:7c:68: 33:ff:9d:cd:fb:08:9b:41:a4:76:ae:b2:b2:8c:9d: ac:3f:93:60:0f:d1:fa:e9:6e:66:aa:1f:2f:28:92: 18:cc:8a:82:b2:2d:7d:c4:77:ae:b7:12:d4:2c:49: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8B:22:82:D6:48:2F:5D:D5:2F:69:7E:94:4B:EF:8E:6C:07:3D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/37c0a70e-5c5f-3f8e-be7d-8e5c4780ed74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:3a:6e:92:40:78:b5:96:1f:69:49:7e:fb:59:14:75:67:86: 48:a7:10:1a:46:70:08:ab:d0:97:ed:d3:19:e4:7d:93:56:f9: db:bc:9c:3a:b7:9a:1e:79:c8:44:a8:9b:a9:17:ba:2e:2e:0f: 35:a3:88:e1:d1:ee:e2:7c:8d:6e:db:47:39:4f:b9:e2:c4:fa: 57:66:12:4c:5c:36:a2:6e:34:55:47:b0:71:06:95:3e:2a:99: 09:ff:bd:0d:13:41:b8:d4:4a:61:d8:4c:d6:91:84:d2:81:f6: b3:1a:37:b2:62:15:49:0e:8e:28:fc:18:7e:6b:e7:e1:fd:cd: 71:d3:6c:6f:6c:72:7b:90:48:8f:cf:58:12:3e:51:b4:1e:69: 6d:50:56:f3:88:44:54:2d:5d:14:62:81:fb:60:59:b6:d0:cf: 56:91:1a:e9:a3:31:a4:99:51:41:18:c4:e9:26:68:a9:61:51: d4:3d:d1:d9:77:60:ee:14:a7:15:fd:d2:35:2b:e8:5d:ef:56: 79:c6:d6:7c:e2:7b:22:fb:ff:6c:8c:dc:e3:bb:94:23:fc:14: 1c:7d:ee:fe:c8:71:d2:05:24:19:0f:46:57:2b:ee:4a:a4:d8: a2:6e:ad:85:20:f1:78:c7:76:0a:12:e6:90:dd:cc:33:c6:76: 66:39:95:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRmn3K//yB5L/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk OWNlMDFkMmYtZThiNC00MGZjLThjMzYtNmM3NzlhOGYxNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmljCJjqrIgARUBa0yiCnjznXAmUfcKfA0ocy tGmkd/D6NSoYjnOPc3O7WlLtRyuyyV9AgmXXBWUzjHrk0kRFkQdg/oONh95k5wWf rE/u9lg0kTghQvbq7evcCa8BUNWf7ixzLhdPMRdgYFRcsYE4EGjWiBO7nECzEuoB zpXRpsFnXwsTgaxFw82Hx5BTu5prRgbVQbAjlPRyVAWK4Nv6rdc7Wt6z9O5Vyr0S lpV0v0LKxI29hiCLfUVGG/qgLWUT2YINrdq38GvGgggVQ2AIfGgz/53N+wibQaR2 rrKyjJ2sP5NgD9H66W5mqh8vKJIYzIqCsi19xHeutxLULEnwoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKLIoLWSC9d1S9pfpRL745sBz1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzdjMGE3MGUtNWM1Zi0z ZjhlLWJlN2QtOGU1YzQ3ODBlZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIr2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU6bpJAeLWWH2lJfvtZFHVnhkinEBpGcAir0Jft0xnkfZNW+du8nDq3 mh55yESom6kXui4uDzWjiOHR7uJ8jW7bRzlPueLE+ldmEkxcNqJuNFVHsHEGlT4q mQn/vQ0TQbjUSmHYTNaRhNKB9rMaN7JiFUkOjij8GH5r5+H9zXHTbG9scnuQSI/P WBI+UbQeaW1QVvOIRFQtXRRigftgWbbQz1aRGumjMaSZUUEYxOkmaKlhUdQ90dl3 YO4UpxX90jUr6F3vVnnG1nzieyL7/2yM3OO7lCP8FBx97v7IcdIFJBkPRlcr7kqk 2KJurYUg8XjHdgoS5pDdzDPGdmY5ld4= -----END CERTIFICATE-----Generated at Sun Sep 20 15:17:51 2026 by rpki-client