$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa File: 3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa (raw, json) Hash identifier: T7tbYyYFRxOuzq6o9pLY7GLIWhMEPDmT51ty0rwWT3E= Subject key identifier: 21:17:AD:26:88:FA:99:1A:03:08:BC:3F:8F:60:F7:A9:57:BB:3E:9C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA7884ED07DEFFBE1220724C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 202 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4e:d0:7d:ef:fb:e1:22:07:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f4d55e8a-4f7c-47b5-ba05-25dbf18c2743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:02:88:85:5e:9d:db:96:1c:3a:09:c3:0e: fc:e7:94:6b:2e:24:0f:d5:88:73:ef:41:59:4e:49: 99:5f:8f:7d:f1:74:58:a9:db:b9:b6:96:55:c6:18: 6d:9a:24:30:48:36:e8:0d:a0:7b:6b:1d:4c:e8:cc: fc:7b:e6:90:b1:36:be:aa:f5:f8:a5:9b:76:c0:d8: 32:a8:23:d7:c2:58:4d:ba:a6:98:a7:ac:14:8b:9b: 73:d3:dc:05:11:61:82:2f:bc:c5:47:af:7e:64:cb: 81:26:61:44:29:f7:29:4f:7b:dc:b0:2d:cb:05:5e: 29:d4:f2:f7:71:68:b1:8b:d6:08:a3:ba:00:ef:69: 90:70:3f:c5:d3:8a:cb:62:5a:7b:eb:78:80:b6:ed: c3:dd:e7:6c:f8:bf:d2:d0:76:8e:98:67:36:1c:8c: a0:10:09:d1:42:68:21:71:7f:54:93:6d:c1:e0:26: a1:85:06:07:60:47:42:0c:40:a1:e4:23:c2:15:0f: 33:c4:f1:1d:d4:27:9e:c5:bb:d7:14:7d:c7:67:19: 43:b9:31:0b:9f:f7:44:e4:ec:3b:51:61:07:70:c3: 00:f7:f2:3d:d7:ef:cc:48:65:ff:f6:6d:a3:e3:e1: 89:04:b0:dc:5f:15:4e:9c:57:c3:1d:a8:d3:da:81: 13:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:17:AD:26:88:FA:99:1A:03:08:BC:3F:8F:60:F7:A9:57:BB:3E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:21:ab:ae:89:56:da:c6:7d:e3:3b:37:f2:3b:46:4b:27:3c: 51:3b:59:bf:a6:04:b6:7d:f1:17:f4:5f:6d:b4:28:14:64:97: de:56:96:b8:70:6c:4a:24:18:13:19:43:49:5a:8e:b4:b5:62: cb:e6:84:d5:e4:c4:b9:1d:51:33:01:45:0f:87:7a:3f:b7:a6: c7:7a:b8:06:ee:23:22:d8:56:85:4b:0f:45:be:1d:ac:14:d2: d7:8b:9e:7f:b1:26:90:ee:e2:a4:84:12:a9:a1:83:35:47:62: 2a:3a:d7:6b:e7:be:9b:01:b8:bd:7a:18:d3:5f:ed:35:11:6e: 5a:45:cf:ec:e0:d0:02:d8:65:0f:f3:b9:d8:29:bc:cf:a8:7d: 85:14:86:0c:ca:3a:0a:4c:d1:91:33:3c:83:19:88:7e:fb:1b: e8:0a:05:d7:27:e9:2c:b1:9b:31:8d:41:5c:d1:4f:83:d7:86: 2f:1b:f2:f8:a0:50:69:c8:9f:95:70:5a:1d:a7:93:da:a0:77: bd:1d:b4:f1:d5:08:3e:e0:28:69:b3:e2:56:5e:0e:0b:42:27: db:16:0d:56:7a:ec:4e:c4:95:6c:99:71:15:77:da:a7:f8:d7: 0c:4a:ad:3b:b8:af:08:88:d4:6d:3d:87:d5:c2:7c:64:f9:db: b0:c1:c5:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE7Qfe/74SIHJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjRkNTVlOGEtNGY3Yy00N2I1LWJhMDUtMjVkYmYxOGMyNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohsCiIVenduWHDoJww7855RrLiQP1Yhz70FZ TkmZX4998XRYqdu5tpZVxhhtmiQwSDboDaB7ax1M6Mz8e+aQsTa+qvX4pZt2wNgy qCPXwlhNuqaYp6wUi5tz09wFEWGCL7zFR69+ZMuBJmFEKfcpT3vcsC3LBV4p1PL3 cWixi9YIo7oA72mQcD/F04rLYlp763iAtu3D3eds+L/S0HaOmGc2HIygEAnRQmgh cX9Uk23B4CahhQYHYEdCDECh5CPCFQ8zxPEd1CeexbvXFH3HZxlDuTELn/dE5Ow7 UWEHcMMA9/I91+/MSGX/9m2j4+GJBLDcXxVOnFfDHajT2oETXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEXrSaI+pkaAwi8P49g96lXuz6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2MxMDM0YmItNmYzNS0z M2JjLWJmZDEtMzI3YjdjNmE1OWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQhq66JVtrGfeM7N/I7RksnPFE7Wb+mBLZ98Rf0X220KBRkl95Wlrhw bEokGBMZQ0lajrS1YsvmhNXkxLkdUTMBRQ+Hej+3psd6uAbuIyLYVoVLD0W+HawU 0teLnn+xJpDu4qSEEqmhgzVHYio612vnvpsBuL16GNNf7TURblpFz+zg0ALYZQ/z udgpvM+ofYUUhgzKOgpM0ZEzPIMZiH77G+gKBdcn6SyxmzGNQVzRT4PXhi8b8vig UGnIn5VwWh2nk9qgd70dtPHVCD7gKGmz4lZeDgtCJ9sWDVZ67E7ElWyZcRV32qf4 1wxKrTu4rwiI1G09h9XCfGT527DBxeA= -----END CERTIFICATE-----Generated at Wed Jul 29 09:54:45 2026 by rpki-client