$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa File: 57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa (raw, json) Hash identifier: GpZqsl0fZ10pGPSrr46EAvaCoxY2Gm/2dOJrm0Lo2BM= Subject key identifier: E9:7F:32:27:88:33:A0:2F:78:2B:D3:B9:ED:AC:DE:62:E8:F9:D4:71 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA7884EC5AF8E071265F5E000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3356 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4e:c5:af:8e:07:12:65:f5:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=614161e4-43f8-4c07-9ebb-48851931f3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:86:90:b2:02:35:0b:ca:4e:cb:f5:b5:d9:48: 30:53:54:20:a2:0c:99:92:39:72:46:d6:02:77:fd: 2b:6c:ba:4b:f7:7e:f9:f4:32:81:16:35:8f:98:38: 73:05:1b:9d:f6:7c:58:73:fe:5c:af:18:24:28:cd: 0d:6a:14:e5:80:98:f4:1a:49:44:08:66:69:42:64: 4a:0d:97:85:90:8e:c3:42:f4:e9:c9:96:87:7b:e0: 0c:12:59:ce:6c:81:bb:3c:14:78:8e:ee:c6:0d:20: db:78:7c:88:a9:fc:1f:e1:f3:90:e7:c9:52:73:4f: 3f:07:52:92:c6:90:72:33:00:5f:d8:9f:b7:63:fe: aa:f0:27:a6:e2:b8:2d:af:e4:e8:92:dc:be:0f:5b: f0:17:48:0e:66:e2:34:4e:b0:4e:c6:7d:ae:c5:09: 80:27:91:0f:c9:03:79:18:a0:ac:b3:20:89:62:fe: ee:f4:9a:45:93:2e:82:42:2e:1a:d9:7d:8d:72:c1: 86:f9:b7:12:48:91:25:da:8a:86:49:8f:90:07:e0: c2:00:f2:ee:63:f0:76:8a:b5:cd:31:96:df:b1:41: 02:40:0f:89:72:60:1e:bb:25:99:62:03:fe:24:e1: 3d:97:b6:3c:b1:35:9a:56:99:4c:cf:51:3d:e9:47: 3e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:32:27:88:33:A0:2F:78:2B:D3:B9:ED:AC:DE:62:E8:F9:D4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c1:c6:75:e2:9e:6c:72:06:76:d9:5a:c5:bb:ed:09:5a:28: 6b:25:28:88:ec:fe:be:49:65:7a:f8:aa:bb:76:34:18:27:a4: 28:0f:82:1e:f1:09:b7:f0:0c:8b:da:90:cc:5e:66:6c:b3:47: df:8e:2a:7b:3d:e5:0a:01:45:38:28:4f:1a:d8:c9:ae:2f:c5: 29:f6:b4:ba:04:f0:62:36:47:27:51:86:c6:a2:3a:98:16:49: 61:25:94:8d:61:42:46:d2:fa:0e:16:8d:a2:f4:57:eb:bf:5a: 61:19:e0:3c:fc:2d:22:3c:74:0e:31:a1:a1:df:98:0c:cb:a6: d7:51:d7:a0:44:49:8d:e4:7d:1f:e2:f8:f0:f6:a8:96:f4:9f: 5b:95:12:5f:2c:79:db:1c:61:cf:03:f2:8d:b3:25:4b:d6:c3: e9:e5:a7:c2:97:94:ba:49:43:45:a6:8f:6f:da:fb:44:ab:8c: a5:7f:29:1f:28:eb:3b:07:db:c8:d6:f7:21:06:b9:1f:5b:40: 65:bd:5d:1e:80:a2:26:8f:5a:e4:f7:20:b7:d7:ee:80:08:f0: ea:4e:64:f6:fe:be:a8:f3:7f:9a:2f:f9:81:90:4c:dd:98:c4: 9a:c8:a5:1f:df:23:d2:89:0e:5d:c5:d0:6c:a5:56:64:e5:19: 1b:28:de:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE7Fr44HEmX14AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjE0MTYxZTQtNDNmOC00YzA3LTllYmItNDg4NTE5MzFmM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIaQsgI1C8pOy/W12UgwU1QgogyZkjlyRtYC d/0rbLpL93759DKBFjWPmDhzBRud9nxYc/5crxgkKM0NahTlgJj0GklECGZpQmRK DZeFkI7DQvTpyZaHe+AMElnObIG7PBR4ju7GDSDbeHyIqfwf4fOQ58lSc08/B1KS xpByMwBf2J+3Y/6q8Cem4rgtr+Tokty+D1vwF0gOZuI0TrBOxn2uxQmAJ5EPyQN5 GKCssyCJYv7u9JpFky6CQi4a2X2NcsGG+bcSSJEl2oqGSY+QB+DCAPLuY/B2irXN MZbfsUECQA+JcmAeuyWZYgP+JOE9l7Y8sTWaVplMz1E96Uc+GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl/MieIM6AveCvTue2s3mLo+dRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTdmZmQxZTYtYjE0YS0z N2IwLTljZmEtZDFmNDhhZWVjOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbBxnXinmxyBnbZWsW77QlaKGslKIjs/r5JZXr4qrt2NBgnpCgPgh7x CbfwDIvakMxeZmyzR9+OKns95QoBRTgoTxrYya4vxSn2tLoE8GI2RydRhsaiOpgW SWEllI1hQkbS+g4WjaL0V+u/WmEZ4Dz8LSI8dA4xoaHfmAzLptdR16BESY3kfR/i +PD2qJb0n1uVEl8sedscYc8D8o2zJUvWw+nlp8KXlLpJQ0Wmj2/a+0SrjKV/KR8o 6zsH28jW9yEGuR9bQGW9XR6AoiaPWuT3ILfX7oAI8OpOZPb+vqjzf5ov+YGQTN2Y xJrIpR/fI9KJDl3F0GylVmTlGRso3hg= -----END CERTIFICATE-----Generated at Wed Jul 29 12:07:27 2026 by rpki-client