$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa File: 38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa (raw, json) Hash identifier: B9utUyvpAcMIFZ7Pr+pxvo6jPGa8JW4xszyP5H4Fp/Q= Subject key identifier: F9:E4:AE:F6:A5:53:0E:8A:F0:FA:CD:E0:15:CD:6A:FD:77:2A:A8:C7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F119D0C84374C34A92503BA80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:0c:84:37:4c:34:a9:25:03:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=1c8206fc-ff8d-46ce-ab71-008b2cd82b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:4a:ea:ee:66:9c:80:12:33:d5:6e:61:12: e3:bd:1a:dd:32:10:32:ae:50:fc:b7:fb:5b:04:99: 44:f0:0c:08:10:2a:57:3b:22:f9:df:56:33:1d:f2: df:bf:85:cf:f0:bc:c8:5d:2c:34:db:9d:0b:b7:d0: 23:e9:38:9a:33:cf:da:9e:e4:bb:14:2a:a6:2c:ff: 25:e0:dc:09:64:99:83:f4:08:af:52:7d:5f:e7:21: be:e3:49:e1:83:9a:7c:b0:76:9f:bf:98:6b:47:2e: 75:49:9b:8b:52:aa:b4:1c:b9:ca:7c:36:ea:09:14: ab:d0:6d:e4:04:60:e2:15:0c:1e:d3:25:3e:ba:46: ee:eb:08:b5:29:8a:d4:9c:56:28:68:48:0a:3e:19: 38:e1:dc:80:c2:ee:df:93:ae:6b:37:91:7d:d5:0c: bb:da:62:a4:9e:db:69:1f:45:a5:5b:ce:0a:c5:0f: 2b:83:39:98:72:01:28:0c:b7:80:c0:28:d9:55:28: b0:5f:41:02:f6:ca:86:20:aa:e4:e6:49:42:45:95: ff:60:72:b8:a1:de:e9:7e:fc:f4:db:f2:c4:57:7d: 8c:07:e8:e0:68:ac:7b:9a:3d:6c:21:cb:10:32:41: d4:b0:f3:1f:e2:65:7c:70:3b:e0:c9:64:80:7c:e2: 25:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E4:AE:F6:A5:53:0E:8A:F0:FA:CD:E0:15:CD:6A:FD:77:2A:A8:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6a:9d:d0:cc:63:d0:b5:b7:0b:7a:9f:5a:f7:27:9d:31:e7: 28:97:95:77:24:5b:6c:0f:34:1b:e5:91:c6:bc:54:94:3a:d9: 29:e8:6b:f9:0f:28:05:8e:3c:12:fd:70:fa:89:6a:38:c1:c6: 57:70:cc:5d:55:23:f9:f8:f9:23:1a:93:b9:66:29:16:29:a1: 62:6e:49:e2:63:a3:e5:a9:2b:bb:d6:2e:0f:89:86:63:f6:4f: 24:73:73:d6:ac:8d:ba:dd:2e:95:80:bc:9d:d9:c6:f8:e0:e8: a4:31:0b:8e:17:87:11:b6:c5:3e:36:ce:59:74:53:ae:06:b3: e5:e9:42:f4:50:60:8d:66:24:9e:cb:ab:8b:cb:2b:b6:ea:7e: 80:ca:e0:02:bf:b8:35:fe:72:da:58:c5:c5:7a:4b:46:56:1e: dd:06:9f:4a:0a:4c:01:da:ff:4f:d6:7f:8e:32:e2:93:8b:0f: 18:0e:f7:3f:e3:97:db:c9:23:63:f4:0f:33:08:6f:08:f2:ed: d4:07:e3:22:6b:eb:53:29:0c:72:d8:69:61:cc:a5:f6:b0:35: 40:44:32:93:cf:40:93:a6:8a:ec:94:5a:53:a6:3e:01:22:cc: 1e:21:ad:0c:cd:ea:04:54:85:96:36:cf:ce:91:f0:7b:fe:ef: 45:02:b2:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQyEN0w0qSUDuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MWM4MjA2ZmMtZmY4ZC00NmNlLWFiNzEtMDA4YjJjZDgyYjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR1K6u5mnIASM9VuYRLjvRrdMhAyrlD8t/tb BJlE8AwIECpXOyL531YzHfLfv4XP8LzIXSw0250Lt9Aj6TiaM8/anuS7FCqmLP8l 4NwJZJmD9AivUn1f5yG+40nhg5p8sHafv5hrRy51SZuLUqq0HLnKfDbqCRSr0G3k BGDiFQwe0yU+ukbu6wi1KYrUnFYoaEgKPhk44dyAwu7fk65rN5F91Qy72mKknttp H0WlW84KxQ8rgzmYcgEoDLeAwCjZVSiwX0EC9sqGIKrk5klCRZX/YHK4od7pfvz0 2/LEV32MB+jgaKx7mj1sIcsQMkHUsPMf4mV8cDvgyWSAfOIlJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnkrvalUw6K8PrN4BXNav13KqjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhmNWYyYzQtYzFiMS0z YmU4LWFhNmYtMmVkNzg3MTNiMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpqndDMY9C1twt6n1r3J50x5yiXlXckW2wPNBvlkca8VJQ62Snoa/kP KAWOPBL9cPqJajjBxldwzF1VI/n4+SMak7lmKRYpoWJuSeJjo+WpK7vWLg+JhmP2 TyRzc9asjbrdLpWAvJ3Zxvjg6KQxC44XhxG2xT42zll0U64Gs+XpQvRQYI1mJJ7L q4vLK7bqfoDK4AK/uDX+ctpYxcV6S0ZWHt0Gn0oKTAHa/0/Wf44y4pOLDxgO9z/j l9vJI2P0DzMIbwjy7dQH4yJr61MpDHLYaWHMpfawNUBEMpPPQJOmiuyUWlOmPgEi zB4hrQzN6gRUhZY2z86R8Hv+70UCsis= -----END CERTIFICATE-----Generated at Sun Sep 20 15:17:26 2026 by rpki-client