$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa File: 3844cb66-4923-3faf-8c4d-519000648600.roa (raw, json) Hash identifier: +bcmo7//ZFa1YUoqM1pNnbnDLofqRZ3DbB8L7pOKIpU= Subject key identifier: FD:0A:6C:DD:E2:FC:E2:6F:46:41:93:C7:4B:37:13:2D:53:DD:F9:34 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA4451692C95D018E27A40AD8 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 202 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:16:92:c9:5d:01:8e:27:a4:0a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=51c1241f-f8fe-44df-9256-0dd936261c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:c9:1f:18:e5:16:f1:ce:81:6b:de:8b:8c: 2a:92:fc:1a:e6:e6:47:b0:dd:ca:dd:19:d2:09:2f: fd:dd:55:6c:44:73:95:5c:52:6c:f1:9e:7b:04:bb: c6:69:3f:87:17:45:a3:57:e5:cd:8f:d6:36:1c:ab: 8b:ec:47:10:00:88:b9:82:63:eb:73:1d:4b:23:1c: 90:94:21:7f:9f:02:1f:d9:b8:29:df:0e:92:7d:1f: bd:c6:00:1e:d3:8e:cb:c0:de:99:fc:9e:ad:e5:3e: e6:28:67:44:67:18:dc:53:65:d2:5b:d1:5f:9a:df: 01:5d:18:5b:39:f1:00:53:8e:19:6f:10:78:89:c5: ee:27:d1:22:56:53:0c:b4:4e:0e:26:27:66:e4:3c: 09:a3:9a:27:73:0e:f0:6e:f3:70:51:3c:26:e2:d7: c2:7c:11:97:6a:78:05:c5:d4:60:f2:00:ea:bd:35: f0:bc:f6:57:86:c3:79:b7:e6:c2:72:35:5c:a6:a2: a7:64:0f:fb:ae:1f:d8:81:50:86:be:7a:9f:5e:42: ee:f2:6f:e2:74:b2:f7:5b:e2:ab:38:5c:51:b2:aa: f7:ed:77:ee:78:ab:c0:c9:b1:ba:31:91:a1:c9:72: c5:00:4c:2d:3d:97:01:c7:27:ba:c8:d1:1d:0e:e0: 83:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0A:6C:DD:E2:FC:E2:6F:46:41:93:C7:4B:37:13:2D:53:DD:F9:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:bd:b8:9c:07:91:f9:98:44:71:d4:19:51:78:10:e0:cf:58: 5d:e3:47:c7:28:cb:b7:6a:91:e6:4c:e2:7b:02:66:d5:6f:3e: 38:0a:db:86:70:8f:5c:40:39:d4:3e:4c:d3:e1:12:1b:d6:47: 4c:a0:a7:6e:85:a1:0f:13:a3:0d:ac:00:a3:ac:29:a8:e9:8d: 8c:df:c7:2b:e3:6c:60:50:32:47:ab:38:81:14:be:ae:c5:65: 5c:d6:41:ec:ab:f7:9c:93:a1:b0:f7:43:0d:be:cf:13:1e:69: d6:47:f0:8d:76:2b:8d:f7:77:b9:11:92:22:1c:ad:e7:5e:2b: db:84:f5:54:3d:84:a2:e0:e8:3b:4d:b5:83:ed:a1:c3:37:34: 25:53:a2:7e:21:4d:b8:fa:66:b7:da:ea:d2:78:00:c0:08:54: 78:af:3b:78:c3:75:75:5f:28:04:89:c1:c6:4f:f1:88:46:5e: c3:88:f0:f4:15:11:72:79:ee:ce:0b:77:d6:32:3c:cf:52:86: 48:63:d3:b7:14:f6:20:f6:11:49:ac:90:b1:b8:69:1c:37:b9: 50:3c:f7:13:42:66:5e:fe:36:6b:6a:79:a0:24:f1:b3:27:b2: 1d:24:bf:15:9f:60:f7:4e:f3:5d:10:e0:76:40:fe:85:66:e4: fb:87:77:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRRaSyV0BjiekCtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk NTFjMTI0MWYtZjhmZS00NGRmLTkyNTYtMGRkOTM2MjYxYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRLJHxjlFvHOgWvei4wqkvwa5uZHsN3K3RnS CS/93VVsRHOVXFJs8Z57BLvGaT+HF0WjV+XNj9Y2HKuL7EcQAIi5gmPrcx1LIxyQ lCF/nwIf2bgp3w6SfR+9xgAe047LwN6Z/J6t5T7mKGdEZxjcU2XSW9Ffmt8BXRhb OfEAU44ZbxB4icXuJ9EiVlMMtE4OJidm5DwJo5oncw7wbvNwUTwm4tfCfBGXangF xdRg8gDqvTXwvPZXhsN5t+bCcjVcpqKnZA/7rh/YgVCGvnqfXkLu8m/idLL3W+Kr OFxRsqr37XfueKvAybG6MZGhyXLFAEwtPZcBxye6yNEdDuCDHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0KbN3i/OJvRkGTx0s3Ey1T3fk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzg0NGNiNjYtNDkyMy0z ZmFmLThjNGQtNTE5MDAwNjQ4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa9uJwHkfmYRHHUGVF4EODPWF3jR8coy7dqkeZM4nsCZtVvPjgK24Zw j1xAOdQ+TNPhEhvWR0ygp26FoQ8Tow2sAKOsKajpjYzfxyvjbGBQMkerOIEUvq7F ZVzWQeyr95yTobD3Qw2+zxMeadZH8I12K433d7kRkiIcredeK9uE9VQ9hKLg6DtN tYPtocM3NCVTon4hTbj6Zrfa6tJ4AMAIVHivO3jDdXVfKASJwcZP8YhGXsOI8PQV EXJ57s4Ld9YyPM9Shkhj07cU9iD2EUmskLG4aRw3uVA89xNCZl7+NmtqeaAk8bMn sh0kvxWfYPdO810Q4HZA/oVm5PuHd1g= -----END CERTIFICATE-----Generated at Wed Jul 29 09:55:21 2026 by rpki-client