$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa File: a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa (raw, json) Hash identifier: rSr1fqu37/FXLzPi/hmz47HNMBzllh6HCJzZP023XGs= Subject key identifier: 39:F1:B7:F9:EF:BB:D7:B7:A7:52:6D:BB:6D:45:48:E4:4E:B6:E5:15 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584FB3A6870EDED60D5D29282510 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 3356 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:87:0e:de:d6:0d:5d:29:28:25:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=f4961f52-cbd4-45a4-95f3-9147109d8166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8f:99:e9:49:02:c5:f4:56:2c:e7:6c:b9:76: 11:f7:f2:89:c7:d0:b6:00:b3:c5:0f:cd:82:ba:7e: 3f:5d:e0:a4:7d:99:14:e5:51:7d:47:18:56:d9:28: ec:78:cb:8c:d4:d1:5b:56:98:2b:66:c4:43:00:13: 7d:23:49:9b:15:8b:03:32:07:e1:c8:b0:0b:6d:52: 42:2b:78:5b:33:c8:79:db:73:94:da:aa:1c:38:a3: 8b:c5:cd:06:18:00:ac:64:0e:59:5f:41:c6:71:6c: 37:3a:cc:9d:23:07:30:81:61:2e:fa:5b:b4:51:fd: 7f:fa:6f:4d:86:ac:65:a4:bc:a0:ba:e1:85:98:69: ce:2a:65:32:f9:99:d9:61:6f:f6:66:5e:18:cd:1c: e6:e2:65:21:b1:2c:16:8b:6d:b2:f6:4d:e8:8a:76: 7c:9f:1e:d4:44:ff:2a:e3:47:25:6e:f7:3a:0c:3b: 20:e5:e2:d8:30:22:61:e8:c0:17:6e:c4:46:ad:ed: ed:28:9b:4b:ea:a3:be:fe:52:97:4f:b1:4f:56:24: df:b9:45:74:b1:b7:68:2f:ed:60:31:11:f9:fd:90: 38:55:a3:69:ee:a0:df:ff:f5:05:22:8a:51:36:7f: 62:e9:ca:6a:4d:8e:a3:52:cc:04:54:37:29:c8:30: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F1:B7:F9:EF:BB:D7:B7:A7:52:6D:BB:6D:45:48:E4:4E:B6:E5:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:cd:4c:e6:8a:cf:a4:0b:7b:1b:d5:63:ed:35:2d:06:d1:c7: 75:06:d1:05:05:04:38:8d:40:6a:a9:bb:97:aa:18:b0:25:08: 3d:9c:42:17:71:1f:39:41:8f:05:4c:0d:8a:23:a5:2d:8e:0a: 68:a2:61:01:f8:2d:49:a8:08:a0:e5:32:af:ac:41:05:f5:2b: 26:21:ab:a0:77:de:73:7a:a7:e7:a4:0f:b7:b2:13:fe:a0:77: 7b:b4:5b:87:4c:94:4e:ea:5a:36:95:9f:2a:68:99:77:db:13: 5b:5d:0e:50:73:24:06:df:f0:fe:6c:b1:83:ce:60:7e:31:83: d9:46:9f:5b:94:b7:2c:36:01:79:f6:d5:46:71:f5:87:9f:bb: 77:7e:9b:5c:aa:65:7b:f1:9b:f9:8d:8c:f4:4d:56:f8:7e:7c: 53:b4:62:d0:3c:83:90:e2:18:c2:59:72:db:3e:be:92:05:72: 3e:c7:6c:50:31:2c:e2:f2:cd:e7:b9:e4:2f:4b:f8:37:ca:4a: 9b:5d:80:a3:7c:1e:d4:33:e0:0a:49:26:dd:a0:8a:2f:e7:37: cd:56:30:b3:1a:84:d4:36:22:97:d3:e0:ce:13:e7:09:53:6e: aa:69:91:70:af:d7:36:6a:6a:d1:1d:a4:01:5b:e3:65:17:7a: cf:b3:22:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpocO3tYNXSkoJRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk ZjQ5NjFmNTItY2JkNC00NWE0LTk1ZjMtOTE0NzEwOWQ4MTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno+Z6UkCxfRWLOdsuXYR9/KJx9C2ALPFD82C un4/XeCkfZkU5VF9RxhW2SjseMuM1NFbVpgrZsRDABN9I0mbFYsDMgfhyLALbVJC K3hbM8h523OU2qocOKOLxc0GGACsZA5ZX0HGcWw3OsydIwcwgWEu+lu0Uf1/+m9N hqxlpLyguuGFmGnOKmUy+ZnZYW/2Zl4YzRzm4mUhsSwWi22y9k3oinZ8nx7URP8q 40clbvc6DDsg5eLYMCJh6MAXbsRGre3tKJtL6qO+/lKXT7FPViTfuUV0sbdoL+1g MRH5/ZA4VaNp7qDf//UFIopRNn9i6cpqTY6jUswEVDcpyDAwFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnxt/nvu9e3p1Jtu21FSOROtuUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTEwYTA2NDYtZDBkYy0z MGRjLWI5YjQtMzMyMzVmNmM4MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbNTOaKz6QLexvVY+01LQbRx3UG0QUFBDiNQGqpu5eqGLAlCD2cQhdx HzlBjwVMDYojpS2OCmiiYQH4LUmoCKDlMq+sQQX1KyYhq6B33nN6p+ekD7eyE/6g d3u0W4dMlE7qWjaVnypomXfbE1tdDlBzJAbf8P5ssYPOYH4xg9lGn1uUtyw2AXn2 1UZx9Yefu3d+m1yqZXvxm/mNjPRNVvh+fFO0YtA8g5DiGMJZcts+vpIFcj7HbFAx LOLyzee55C9L+DfKSptdgKN8HtQz4ApJJt2gii/nN81WMLMahNQ2IpfT4M4T5wlT bqppkXCv1zZqatEdpAFb42UXes+zIrA= -----END CERTIFICATE-----Generated at Wed Nov 4 22:56:56 2026 by rpki-client