$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa File: 7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa (raw, json) Hash identifier: vLJTOjBTIpaNz/xVJtZaIJWePW5otEfnr+P1y7uvJVY= Subject key identifier: 63:17:CC:1D:A8:7D:ED:77:2D:BB:F4:AB:8B:ED:CA:D7:3C:0B:30:80 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584FB3A6877B525107345D38FC80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 3356 IP address blocks: 20.132.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:87:7b:52:51:07:34:5d:38:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=a8732d61-b171-41cd-b829-5059c3413f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:8d:ea:ab:b5:f1:fe:c4:24:54:d4:ed:1c: 6a:3f:5b:53:b4:86:b0:b4:6a:73:db:da:bc:b3:28: 9b:77:3f:cd:98:f6:22:d9:ab:3a:26:c1:9a:e9:d1: 1d:ce:18:27:a9:fe:1a:0a:8a:d2:34:15:e6:24:35: f9:20:f1:40:a2:22:aa:d5:7f:80:4f:95:21:a4:53: 31:ca:fd:3a:3e:2c:06:dc:00:82:40:7b:47:6a:33: fc:74:83:80:67:bf:0f:f5:18:7f:ee:4e:a3:7b:3a: 6f:05:7e:df:ff:42:93:e5:ea:ba:5c:34:59:6a:58: 4c:85:76:63:53:c1:89:7d:23:4a:1c:6d:f2:3f:b7: 45:8f:95:d8:5d:7d:40:a5:93:24:f9:dd:36:dd:84: 66:44:c8:c8:78:3c:09:9d:08:b8:2e:62:d6:2a:62: fd:b2:6f:44:b4:f1:6b:a0:34:3c:c8:6e:55:1f:a0: c8:93:bc:2c:65:f7:88:c3:62:ab:31:cf:4b:e6:e9: 06:6d:e3:00:30:98:84:0f:71:44:99:7c:49:00:e1: a7:1f:3e:f0:db:5b:bb:c3:f2:3a:f1:6e:77:ef:62: 0a:e0:60:9d:43:95:cb:9b:a6:8f:ef:f6:1c:01:c3: 13:cc:36:8d:09:5a:9b:95:dd:01:c6:c1:84:a4:d3: dd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:17:CC:1D:A8:7D:ED:77:2D:BB:F4:AB:8B:ED:CA:D7:3C:0B:30:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:8a:75:21:a0:1f:05:d3:0a:83:dd:7f:7e:67:36:0c:10:6e: e4:62:5b:7e:a2:d4:f6:f3:5b:0f:7e:98:9e:c6:63:e7:2d:37: 2d:43:3e:db:db:d9:46:88:5a:3c:59:ea:9c:90:90:91:25:9c: 74:45:57:6c:b2:29:06:2a:e3:8b:a9:65:f8:32:83:24:27:84: c3:e0:38:92:db:e6:52:9e:e4:00:8f:6e:88:fa:4a:0f:5a:8f: 48:03:93:8c:80:a3:54:5d:19:99:e9:15:b1:3a:21:89:ad:16: 63:4e:55:88:80:37:aa:08:a3:de:59:58:80:43:fd:62:a6:7c: a2:c0:22:84:59:fd:61:ba:97:e2:f0:fc:72:3c:0b:82:97:0d: 6a:d4:27:62:8f:b8:38:04:e6:69:f8:00:e3:9b:f6:8f:cd:3c: d6:f6:19:00:bd:29:3b:c4:32:54:bf:b7:11:8a:b2:c8:11:3d: ce:cf:de:32:9d:a7:b6:b2:d8:c8:dd:b3:a6:53:3e:57:42:10: 23:0f:11:3d:4c:58:b1:6d:de:1d:b6:25:60:c0:15:99:27:77: f6:d1:b4:9f:0d:e5:51:5b:37:19:90:2b:11:49:72:7d:98:9f: 9f:ba:fb:38:0e:d1:e6:dd:d9:06:a7:46:fb:ce:67:d7:7a:39: 52:6a:7f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpod7UlEHNF04/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk YTg3MzJkNjEtYjE3MS00MWNkLWI4MjktNTA1OWMzNDEzZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ6N6qu18f7EJFTU7RxqP1tTtIawtGpz29q8 syibdz/NmPYi2as6JsGa6dEdzhgnqf4aCorSNBXmJDX5IPFAoiKq1X+AT5UhpFMx yv06PiwG3ACCQHtHajP8dIOAZ78P9Rh/7k6jezpvBX7f/0KT5eq6XDRZalhMhXZj U8GJfSNKHG3yP7dFj5XYXX1ApZMk+d023YRmRMjIeDwJnQi4LmLWKmL9sm9EtPFr oDQ8yG5VH6DIk7wsZfeIw2KrMc9L5ukGbeMAMJiED3FEmXxJAOGnHz7w21u7w/I6 8W5372IK4GCdQ5XLm6aP7/YcAcMTzDaNCVqbld0BxsGEpNPdCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMXzB2ofe13Lbv0q4vtytc8CzCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2JkZDU3ZjMtZmQxMS0z NDk3LThkMWYtZWY0ODVkNWYyZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6KdSGgHwXTCoPdf35nNgwQbuRiW36i1PbzWw9+mJ7GY+ctNy1DPtvb 2UaIWjxZ6pyQkJElnHRFV2yyKQYq44upZfgygyQnhMPgOJLb5lKe5ACPboj6Sg9a j0gDk4yAo1RdGZnpFbE6IYmtFmNOVYiAN6oIo95ZWIBD/WKmfKLAIoRZ/WG6l+Lw /HI8C4KXDWrUJ2KPuDgE5mn4AOOb9o/NPNb2GQC9KTvEMlS/txGKssgRPc7P3jKd p7ay2Mjds6ZTPldCECMPET1MWLFt3h22JWDAFZknd/bRtJ8N5VFbNxmQKxFJcn2Y n5+6+zgO0ebd2QanRvvOZ9d6OVJqf/s= -----END CERTIFICATE-----Generated at Thu Nov 5 01:05:49 2026 by rpki-client