$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa File: 81b11565-f8a6-38ca-8987-5a25512a7a32.roa (raw, json) Hash identifier: 1VxZs6Y71dk4XwZNBOjHSpBVg7WafKojzFe6pJBXfIg= Subject key identifier: 1E:E3:DE:E6:A0:58:96:AC:5A:07:5E:D6:F0:CC:4B:EB:70:25:40:B7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E9BE51D1DC49B78FC63F60C80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 3356 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:1d:1d:c4:9b:78:fc:63:f6:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=6992b2d3-9334-4c76-853b-c6b378a66d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:5c:fb:24:85:39:60:2a:28:be:4f:69:b5: 82:0a:27:34:10:7d:5e:45:f7:a8:84:09:67:f6:f0: 4b:0f:05:0d:53:8c:64:f3:fc:c9:4a:90:2f:05:b5: 51:66:97:5b:d5:55:2f:4a:fc:4b:5a:14:02:34:78: af:a7:39:79:df:b4:2a:ff:cf:43:4e:17:7e:a9:04: ab:2e:d2:8a:6e:a0:87:b2:2b:2f:32:18:85:78:b3: 9a:a1:20:35:84:83:4c:84:52:70:15:a8:04:6a:6d: 55:6b:6e:76:ed:f3:8f:bd:ce:65:c7:3d:09:c9:c8: fb:43:1c:64:cd:38:7e:af:fe:59:b7:08:0a:2a:a8: 55:de:21:23:4d:91:45:56:bf:88:3a:6f:9c:8e:28: 83:34:c1:7f:f9:ac:dc:40:27:bc:9c:37:13:49:34: 44:c4:15:f8:74:3f:ec:df:2d:f5:f0:d3:cc:01:a9: 2e:8f:5a:37:87:b0:71:e7:16:0e:b2:c4:47:d7:0e: 71:45:b9:86:55:94:a0:16:cb:c7:a2:50:21:ed:46: d2:a8:c1:90:52:69:de:37:c5:71:54:7f:fc:54:18: ec:d1:d7:88:1a:35:44:19:ab:f3:13:c6:11:28:5b: 89:05:05:4f:03:d2:a2:6e:7e:12:3b:0b:3b:27:8b: 92:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E3:DE:E6:A0:58:96:AC:5A:07:5E:D6:F0:CC:4B:EB:70:25:40:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:52:1c:13:98:aa:77:e3:9c:6f:aa:f7:8c:ac:0f:05:a1:de: c2:cf:d7:f9:f0:0e:58:2b:3e:fa:22:b0:f8:23:d4:fe:09:a5: 74:ef:90:b5:83:b8:c8:c4:2f:a1:e5:99:19:7d:58:33:78:df: b4:44:2a:68:0f:d2:35:05:9c:e1:36:a0:75:16:18:72:4a:96: 03:13:71:f0:b4:2a:c4:2a:2b:e3:9a:d9:d8:d8:c8:9f:95:43: f7:5a:21:38:08:81:79:37:66:a9:6a:d9:03:47:d4:31:c4:5b: 4a:8a:af:72:0d:5e:03:d7:61:c9:10:62:db:24:de:90:e2:d1: fc:b5:f0:c9:36:87:84:ee:2c:b2:a7:93:d2:e0:b1:b2:d0:38: 7f:c8:f9:11:69:35:da:a6:88:14:cc:45:91:36:68:92:b5:4c: dd:9a:04:b6:cf:04:af:63:60:84:89:82:da:6e:b8:b5:b4:c7: 70:b9:9b:7a:93:57:5e:85:50:a6:c4:63:34:9d:d1:08:b4:1c: 2a:db:9b:af:23:ff:32:3b:45:7f:39:c9:85:53:20:53:4b:cb: fb:ac:87:21:09:64:18:e8:aa:76:90:5f:ae:52:f4:e6:b1:97: 41:a5:50:bb:70:38:b6:34:1f:74:70:13:a6:b8:c5:d0:b8:a0: ab:c8:ba:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5R0dxJt4/GP2DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk Njk5MmIyZDMtOTMzNC00Yzc2LTg1M2ItYzZiMzc4YTY2ZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFZc+ySFOWAqKL5PabWCCic0EH1eRfeohAln 9vBLDwUNU4xk8/zJSpAvBbVRZpdb1VUvSvxLWhQCNHivpzl537Qq/89DThd+qQSr LtKKbqCHsisvMhiFeLOaoSA1hINMhFJwFagEam1Va2527fOPvc5lxz0Jycj7Qxxk zTh+r/5ZtwgKKqhV3iEjTZFFVr+IOm+cjiiDNMF/+azcQCe8nDcTSTRExBX4dD/s 3y318NPMAakuj1o3h7Bx5xYOssRH1w5xRbmGVZSgFsvHolAh7UbSqMGQUmneN8Vx VH/8VBjs0deIGjVEGavzE8YRKFuJBQVPA9Kibn4SOws7J4uSFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7j3uagWJasWgde1vDMS+twJUC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODFiMTE1NjUtZjhhNi0z OGNhLTg5ODctNWEyNTUxMmE3YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1SHBOYqnfjnG+q94ysDwWh3sLP1/nwDlgrPvoisPgj1P4JpXTvkLWD uMjEL6HlmRl9WDN437REKmgP0jUFnOE2oHUWGHJKlgMTcfC0KsQqK+Oa2djYyJ+V Q/daITgIgXk3Zqlq2QNH1DHEW0qKr3INXgPXYckQYtsk3pDi0fy18Mk2h4TuLLKn k9LgsbLQOH/I+RFpNdqmiBTMRZE2aJK1TN2aBLbPBK9jYISJgtpuuLW0x3C5m3qT V16FUKbEYzSd0Qi0HCrbm68j/zI7RX85yYVTIFNLy/ushyEJZBjoqnaQX65S9Oax l0GlULtwOLY0H3RwE6a4xdC4oKvIurk= -----END CERTIFICATE-----Generated at Wed Jul 29 09:55:23 2026 by rpki-client