$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/69ed5808-c077-3138-b24c-f87000a5e1f6.roa File: 69ed5808-c077-3138-b24c-f87000a5e1f6.roa (raw, json) Hash identifier: tuGMT49BhTF6CkGGj/Y1kqx0CqImGe1cpZdEzPfZy+0= Subject key identifier: 9A:F7:F6:3C:5D:78:75:B1:C8:A1:09:03:BD:93:0F:BA:E4:28:FA:AD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA79660E8262F495EBA820B00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/69ed5808-c077-3138-b24c-f87000a5e1f6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3356 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:60:e8:26:2f:49:5e:ba:82:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=626b3a18-9d3b-4b2c-b962-5bb6d9e6fa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6f:e0:73:2a:d3:60:55:14:0b:71:ba:dd:54: 88:88:fb:fd:e3:11:b9:81:2a:f3:37:c8:13:0d:42: 89:36:84:ca:27:6f:59:7f:f7:8f:66:5f:ff:93:f5: f4:76:40:60:4d:4f:f7:0f:b0:cc:dd:7a:c7:72:61: 41:dc:5a:ff:a6:ce:e3:ae:e6:c7:82:aa:61:cb:c2: db:e3:d4:0b:7d:57:e1:2a:69:de:bf:4d:56:8a:c6: 6c:ed:16:5c:9d:a0:a6:0c:d6:31:10:fc:e0:60:8a: b6:5e:94:85:2a:f6:12:c5:0a:98:d3:2a:2d:ff:a4: 20:72:ae:62:a9:9a:fe:cb:de:cc:eb:78:59:ba:be: 7d:59:21:20:2d:ff:7f:7c:40:3a:e5:c3:0a:f8:23: 74:7b:c9:56:3b:07:ce:6d:4f:42:c5:27:0b:86:fb: 2e:28:c8:21:4b:52:39:54:36:58:32:93:00:4a:c8: b2:59:84:fe:3d:f6:75:d1:e9:6e:ee:78:d1:41:08: 20:59:3a:9e:92:05:3c:62:e5:0e:a5:b1:a7:f5:83: 8e:0d:7d:1d:e0:bf:a9:68:3e:94:be:62:ee:54:09: 88:7a:b7:92:d7:08:84:d5:f2:0d:32:53:c7:4e:da: 1e:ff:64:0a:fd:ec:9f:16:27:78:07:42:b2:dd:71: a6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F7:F6:3C:5D:78:75:B1:C8:A1:09:03:BD:93:0F:BA:E4:28:FA:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/69ed5808-c077-3138-b24c-f87000a5e1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:7a:fc:29:95:ce:02:1d:08:2e:84:63:f9:ce:e3:c0:16:cc: b8:6f:cf:fc:2a:3d:d0:19:ed:06:2c:07:68:e9:30:43:50:5f: 11:de:2a:0d:d7:3c:5c:ab:48:99:12:57:36:50:ca:19:64:bf: c6:5c:9c:94:b2:15:39:7a:e8:9c:cb:d0:43:eb:99:25:42:51: b3:c7:81:c0:cb:0d:e1:a2:be:84:07:29:07:a3:40:a0:ce:b3: a4:5d:45:87:1a:fa:44:95:ce:8e:01:4b:ad:21:bb:0a:27:f9: 99:c2:54:1f:cc:03:65:cb:04:9c:55:19:ee:b8:1e:3c:00:e0: ef:69:0a:ef:62:31:b4:be:48:a8:36:24:21:f9:b1:84:93:a4: 69:af:aa:7b:47:6e:26:f3:dd:d9:3f:a3:f4:fb:2c:7a:16:19: ed:da:c4:f9:90:ea:d6:1c:e2:f5:f8:ee:cc:02:92:53:31:c0: 51:cf:36:60:e4:0d:9b:97:ba:d6:aa:75:68:25:64:f1:67:15: 87:c3:66:40:d1:25:58:42:7a:0f:49:11:8c:27:13:b1:a9:f3: 3b:a8:fe:37:75:21:34:84:78:31:9e:1a:06:01:56:fa:3e:d7: 10:11:9f:57:4a:5b:33:e0:08:66:b6:bf:c1:10:8a:37:a6:a8: 49:d5:b3:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlmDoJi9JXrqCCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjI2YjNhMTgtOWQzYi00YjJjLWI5NjItNWJiNmQ5ZTZmYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92/gcyrTYFUUC3G63VSIiPv94xG5gSrzN8gT DUKJNoTKJ29Zf/ePZl//k/X0dkBgTU/3D7DM3XrHcmFB3Fr/ps7jrubHgqphy8Lb 49QLfVfhKmnev01WisZs7RZcnaCmDNYxEPzgYIq2XpSFKvYSxQqY0yot/6Qgcq5i qZr+y97M63hZur59WSEgLf9/fEA65cMK+CN0e8lWOwfObU9CxScLhvsuKMghS1I5 VDZYMpMASsiyWYT+PfZ10elu7njRQQggWTqekgU8YuUOpbGn9YOODX0d4L+paD6U vmLuVAmIereS1wiE1fINMlPHTtoe/2QK/eyfFid4B0Ky3XGmUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr39jxdeHWxyKEJA72TD7rkKPqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjllZDU4MDgtYzA3Ny0z MTM4LWIyNGMtZjg3MDAwYTVlMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl6/CmVzgIdCC6EY/nO48AWzLhvz/wqPdAZ7QYsB2jpMENQXxHeKg3X PFyrSJkSVzZQyhlkv8ZcnJSyFTl66JzL0EPrmSVCUbPHgcDLDeGivoQHKQejQKDO s6RdRYca+kSVzo4BS60huwon+ZnCVB/MA2XLBJxVGe64HjwA4O9pCu9iMbS+SKg2 JCH5sYSTpGmvqntHbibz3dk/o/T7LHoWGe3axPmQ6tYc4vX47swCklMxwFHPNmDk DZuXutaqdWglZPFnFYfDZkDRJVhCeg9JEYwnE7Gp8zuo/jd1ITSEeDGeGgYBVvo+ 1xARn1dKWzPgCGa2v8EQijemqEnVs7s= -----END CERTIFICATE-----Generated at Wed Jul 29 10:18:23 2026 by rpki-client