$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa File: a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa (raw, json) Hash identifier: RaZT5U7SXKIwWsC4Wusy9ldcjBEtDwCkwcY+qqHhYO8= Subject key identifier: 6C:F9:8D:21:FB:08:53:D1:95:E2:5B:4E:43:39:AB:C2:29:AC:E6:2A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F119D0C7964A82CE426B60B80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:0c:79:64:a8:2c:e4:26:b6:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=b8647b34-45bd-493f-96d2-b92ee0a427d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:92:3c:3a:85:56:31:97:05:26:dd:38:3c: 20:e0:f6:57:68:88:90:db:6a:fe:e9:4e:b4:47:37: 5b:15:34:54:7b:76:93:6a:d7:60:02:75:15:87:48: 17:d8:b4:54:71:d8:3e:69:85:49:aa:c0:1a:ab:d1: df:73:02:fb:bf:2c:ee:fe:c0:f2:fb:d1:29:58:31: c5:fa:c3:1e:fb:f9:e8:ed:1b:14:49:d3:44:7f:ab: 94:6f:25:21:23:57:fd:8e:f3:d0:d1:3b:86:cc:6c: b6:4e:ba:30:14:a3:dc:aa:5d:c2:31:e5:fe:eb:92: a7:ca:c2:8c:0a:ed:7f:5d:b3:c0:b4:3b:a4:65:7a: 0e:a4:e1:2c:4b:65:45:f6:a2:6f:4a:bd:f7:dc:5d: 2b:bf:33:7f:07:cf:dc:f4:20:74:9e:2c:7a:38:a6: ec:26:2a:5b:fe:c3:d2:60:9b:da:7f:83:27:8e:04: 25:1e:32:35:25:7f:82:28:5d:82:cc:85:fb:ed:27: d1:1c:4a:c6:1b:6d:1b:f3:c2:49:20:27:38:8a:bd: 0b:85:7e:28:87:0d:47:0c:af:b0:a1:12:73:2b:dc: 93:59:bb:8b:2a:02:98:47:6d:5b:1d:46:ff:06:de: 07:47:c5:74:ad:5d:0e:60:69:e4:93:38:50:6e:fa: d9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F9:8D:21:FB:08:53:D1:95:E2:5B:4E:43:39:AB:C2:29:AC:E6:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:07:61:3a:c3:99:23:29:ed:6f:40:69:2c:ea:78:15:0e:96: c3:b2:d8:b7:ea:7e:b5:de:db:ad:25:e0:aa:de:c9:38:c2:1f: ac:a2:c8:77:eb:61:54:28:45:d0:ba:48:d7:06:86:04:51:5c: 0f:38:e1:c8:d1:49:e8:e1:af:fc:4f:b6:11:de:a2:6a:fb:ac: 35:6f:25:f6:4b:d0:35:18:ed:08:44:01:84:e8:2a:64:a8:51: eb:6a:87:ba:99:a4:18:dc:e2:10:a3:30:e7:8c:4b:e4:e7:f3: cb:da:d3:06:f5:1b:6a:9e:13:fa:e0:c8:33:18:d4:65:c1:7a: d8:6d:dd:3e:3c:86:9a:96:ba:be:9a:9b:a6:15:61:71:4c:92: 8b:a4:5f:e7:f9:1b:d6:10:83:5a:f0:54:f5:37:4d:3f:24:1c: 59:3f:ac:d9:5f:82:da:43:e5:0d:fb:81:6c:37:69:56:b2:fb: 6f:a5:f2:78:ea:55:cd:93:d1:9f:63:25:18:b0:63:ed:d9:23: f9:a1:c2:d2:09:6d:15:34:b5:ed:3e:ce:80:22:6a:da:e7:7b: 91:e9:18:71:64:5c:40:30:2b:27:d4:2a:ed:26:db:ac:01:7e: 63:0b:b6:4a:19:7b:14:15:2d:90:7e:12:c0:b6:f1:ab:44:e8: d9:ec:d1:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQx5ZKgs5Ca2C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjg2NDdiMzQtNDViZC00OTNmLTk2ZDItYjkyZWUwYTQyN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXaSPDqFVjGXBSbdODwg4PZXaIiQ22r+6U60 RzdbFTRUe3aTatdgAnUVh0gX2LRUcdg+aYVJqsAaq9HfcwL7vyzu/sDy+9EpWDHF +sMe+/no7RsUSdNEf6uUbyUhI1f9jvPQ0TuGzGy2TrowFKPcql3CMeX+65KnysKM Cu1/XbPAtDukZXoOpOEsS2VF9qJvSr333F0rvzN/B8/c9CB0nix6OKbsJipb/sPS YJvaf4MnjgQlHjI1JX+CKF2CzIX77SfRHErGG20b88JJICc4ir0LhX4ohw1HDK+w oRJzK9yTWbuLKgKYR21bHUb/Bt4HR8V0rV0OYGnkkzhQbvrZQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGz5jSH7CFPRleJbTkM5q8IprOYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTEwYTA2NDYtZDBkYy0z MGRjLWI5YjQtMzMyMzVmNmM4MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgHYTrDmSMp7W9AaSzqeBUOlsOy2LfqfrXe260l4KreyTjCH6yiyHfr YVQoRdC6SNcGhgRRXA844cjRSejhr/xPthHeomr7rDVvJfZL0DUY7QhEAYToKmSo Uetqh7qZpBjc4hCjMOeMS+Tn88va0wb1G2qeE/rgyDMY1GXBetht3T48hpqWur6a m6YVYXFMkoukX+f5G9YQg1rwVPU3TT8kHFk/rNlfgtpD5Q37gWw3aVay+2+l8njq Vc2T0Z9jJRiwY+3ZI/mhwtIJbRU0te0+zoAiatrne5HpGHFkXEAwKyfUKu0m26wB fmMLtkoZexQVLZB+EsC28atE6Nns0TM= -----END CERTIFICATE-----Generated at Sun Sep 20 15:17:37 2026 by rpki-client