$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa File: 66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa (raw, json) Hash identifier: BB6G5fbxFj/YquG3P1luNI3cLLBfesXek0Vc6RAiYmQ= Subject key identifier: 53:48:D3:78:8A:09:C6:FF:D8:B4:34:A7:DE:00:E7:7C:B2:F1:2F:A1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA7884F80239F1CF15B5A42C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3356 IP address blocks: 20.137.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4f:80:23:9f:1c:f1:5b:5a:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=82439be4-2093-4ab7-b34a-ab3658d4e718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:71:3d:70:bd:8e:dc:36:fc:b9:2e:a6:73: 95:9c:e3:97:78:95:84:f7:a8:6d:2c:bd:0d:9c:94: a6:80:8c:92:1b:b4:a1:78:d3:dc:ed:d8:35:f0:09: c9:ac:44:54:16:c4:ff:6c:71:cc:18:9d:19:c3:a3: db:91:23:b4:33:c4:3b:ef:f1:f5:a3:b2:37:64:ee: 1e:16:9e:0f:8a:99:e3:e4:13:92:55:0b:54:fc:dd: 5e:05:8c:e0:4c:57:50:2c:44:1f:dd:30:3e:9c:eb: 81:90:2c:e2:72:a7:d4:bd:6f:34:58:6f:cb:5c:11: 20:29:2b:17:0a:85:70:e8:64:17:e6:9a:8e:15:50: 24:d1:cb:b7:ec:b7:f3:dc:39:dc:fb:a3:c4:82:15: fa:b7:6e:a9:34:7c:63:c2:f7:7f:79:b8:c1:29:71: f4:13:1c:91:bd:15:b9:4e:84:67:4e:7c:91:f5:66: 07:ee:53:46:0d:c3:1b:88:26:08:0f:e3:7b:0e:ad: 5a:f5:e3:93:da:8f:ff:60:20:69:9c:ac:f4:ed:5b: 02:28:e8:bb:20:d9:65:eb:75:ae:56:5e:bc:b9:00: 76:9f:8d:09:7b:ef:75:95:9f:ab:79:ae:4d:c5:c3: c7:cd:55:e8:91:05:a5:c5:dd:ba:d0:42:58:a1:34: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:48:D3:78:8A:09:C6:FF:D8:B4:34:A7:DE:00:E7:7C:B2:F1:2F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fc:b6:7f:02:2d:f9:a8:af:ec:8a:b2:b7:71:09:82:6a:b3: 9d:6c:73:79:28:81:9c:f3:1f:64:00:3e:6d:14:9d:a1:76:f8: aa:ba:ae:f6:3c:57:68:a0:92:f9:a4:87:c2:55:72:64:53:c3: f8:7c:35:73:da:57:c2:0f:5d:c0:1b:7c:e0:9e:34:ab:f1:10: 26:d7:b7:9b:30:ea:d6:4c:7d:cf:67:48:23:9b:ff:ba:df:78: d3:ea:ef:85:3c:c3:df:ee:9a:b4:76:38:07:96:8b:36:71:d3: f8:05:d5:89:ca:18:50:01:19:4d:73:e6:40:20:a5:84:7d:a7: f0:05:32:aa:02:84:e5:6e:7b:d1:9f:fc:be:bf:31:03:d7:8d: 46:5c:b1:ee:68:4b:61:ba:06:80:1a:52:ca:fc:b3:c8:8f:f0: d4:e4:2c:b4:be:14:94:ca:49:94:64:78:b5:b5:28:b0:6b:18: e0:86:0d:9c:1b:4a:f9:73:26:9b:6f:ff:7b:b3:37:98:2a:2f: 9e:10:49:ec:b5:75:71:21:3d:14:17:fc:3f:fa:54:a9:2d:83: 3e:31:ef:ca:eb:6e:db:f0:58:b9:1f:59:35:d1:67:cd:aa:6e: 49:a5:15:a6:03:d7:69:fe:50:f4:3f:38:d7:53:18:af:26:d3: 0c:d8:ea:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE+AI58c8VtaQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODI0MzliZTQtMjA5My00YWI3LWIzNGEtYWIzNjU4ZDRlNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcFxPXC9jtw2/LkupnOVnOOXeJWE96htLL0N nJSmgIySG7SheNPc7dg18AnJrERUFsT/bHHMGJ0Zw6PbkSO0M8Q77/H1o7I3ZO4e Fp4Pipnj5BOSVQtU/N1eBYzgTFdQLEQf3TA+nOuBkCzicqfUvW80WG/LXBEgKSsX CoVw6GQX5pqOFVAk0cu37Lfz3Dnc+6PEghX6t26pNHxjwvd/ebjBKXH0ExyRvRW5 ToRnTnyR9WYH7lNGDcMbiCYID+N7Dq1a9eOT2o//YCBpnKz07VsCKOi7INll63Wu Vl68uQB2n40Je+91lZ+rea5NxcPHzVXokQWlxd260EJYoTTzEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNI03iKCcb/2LQ0p94A53yy8S+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjZhM2M5MzQtYThhZS0z OWM2LTllMDctOTU3OTRiNjNiOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFInwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH8tn8CLfmor+yKsrdxCYJqs51sc3kogZzzH2QAPm0UnaF2+Kq6rvY8 V2igkvmkh8JVcmRTw/h8NXPaV8IPXcAbfOCeNKvxECbXt5sw6tZMfc9nSCOb/7rf eNPq74U8w9/umrR2OAeWizZx0/gF1YnKGFABGU1z5kAgpYR9p/AFMqoChOVue9Gf /L6/MQPXjUZcse5oS2G6BoAaUsr8s8iP8NTkLLS+FJTKSZRkeLW1KLBrGOCGDZwb SvlzJptv/3uzN5gqL54QSey1dXEhPRQX/D/6VKktgz4x78rrbtvwWLkfWTXRZ82q bkmlFaYD12n+UPQ/ONdTGK8m0wzY6u0= -----END CERTIFICATE-----Generated at Wed Jul 29 09:54:26 2026 by rpki-client