$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa File: ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa (raw, json) Hash identifier: DcNtLb+UFFIzpMblR2Vocgz4PU+vd455Av+aHChm2uM= Subject key identifier: E6:F3:DD:6C:89:2A:0E:9D:A0:F9:A0:AA:67:DE:E6:F2:3C:24:C8:18 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA7965FFB38EB0817667E5400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 202 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:5f:fb:38:eb:08:17:66:7e:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8678943c-1b6f-4d7b-af19-c47775a27f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:04:ec:e1:44:11:8a:ec:27:43:7e:e9:4d: e0:b4:1c:6b:b8:25:df:18:14:0d:53:2c:58:fe:97: ad:0e:9c:60:02:0f:61:37:32:87:cc:26:dc:bb:a8: df:0f:17:be:c9:81:d5:9d:2a:94:94:97:34:9e:a5: 50:1c:b0:b4:eb:d5:91:5f:f1:38:23:cb:31:4a:a0: 6e:04:3b:65:e7:3a:8f:5b:f5:0e:5f:0f:16:0e:6e: 08:62:17:a6:4d:c6:72:b6:e3:46:83:ba:7d:7a:64: b1:4a:f3:7b:4d:5d:65:4a:65:32:56:2f:69:64:ef: ab:5d:ac:c1:5a:21:59:be:1c:97:dd:6b:cb:92:3c: 68:1f:04:81:7b:e0:21:58:90:f5:cd:4c:51:cb:c6: af:c4:ff:30:92:92:5d:25:7e:50:90:be:b4:d2:95: 5d:a6:5d:93:2a:34:bc:0b:de:33:f5:b2:ad:3b:fb: 68:6a:8f:02:a1:ec:e2:84:e1:ec:2c:d3:0c:50:fe: fd:4e:59:5a:73:a1:97:e1:a4:39:77:66:15:d2:9f: 4e:fd:63:d7:76:c0:52:6f:28:14:b6:37:11:a5:c8: 2c:8b:85:15:bd:2f:95:8e:a1:60:ce:40:0b:36:d9: 1b:ae:2a:08:4d:2e:7c:c8:a4:76:b4:b2:1b:2d:2c: 05:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F3:DD:6C:89:2A:0E:9D:A0:F9:A0:AA:67:DE:E6:F2:3C:24:C8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:85:e5:ec:bb:9d:14:f8:ba:b4:44:b4:c2:2c:ab:16:9d:c4: e0:4b:b2:82:77:66:61:eb:4a:1e:89:b2:cd:f8:e2:c9:aa:29: 46:a5:1d:2f:1a:5a:db:94:4c:55:ce:31:40:59:bc:e1:e0:4d: aa:2d:e5:fc:f8:c8:33:88:56:10:c8:5a:99:a2:fa:2c:00:74: bf:c8:c9:d3:a8:55:74:3f:43:87:03:a4:63:06:ac:83:db:ec: 3a:ec:f1:9e:38:6e:a9:62:4e:a9:f1:ca:c7:fe:95:30:af:72: 41:cd:4c:1a:ce:37:bf:a8:64:0b:b4:b5:be:10:08:9d:c2:f7: a5:5a:34:46:8c:64:9c:0c:e4:68:50:7b:ba:9d:f7:e6:03:a3: 0f:99:ed:fa:a7:c6:00:c1:48:76:6e:7b:f6:9f:8c:b2:2d:45: e0:db:2d:77:3a:f5:8d:62:ac:32:2b:b1:04:1a:48:ea:50:17: 3e:a1:c2:90:ad:a8:21:a7:b5:28:38:81:f3:7b:58:3a:3f:9b: 37:7e:ab:4d:85:ea:38:8f:6c:a9:c9:f5:3d:ab:ca:b7:e6:69: c6:70:fd:cf:32:ac:36:9d:25:c9:b1:94:e0:c9:b4:c7:5a:c0: a3:37:a0:1c:d4:c5:b9:af:5f:bb:56:b0:b0:2c:f5:bd:a3:bb: 2c:d5:3c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nll/7OOsIF2Z+VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODY3ODk0M2MtMWI2Zi00ZDdiLWFmMTktYzQ3Nzc1YTI3ZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvoE7OFEEYrsJ0N+6U3gtBxruCXfGBQNUyxY /petDpxgAg9hNzKHzCbcu6jfDxe+yYHVnSqUlJc0nqVQHLC069WRX/E4I8sxSqBu BDtl5zqPW/UOXw8WDm4IYhemTcZytuNGg7p9emSxSvN7TV1lSmUyVi9pZO+rXazB WiFZvhyX3WvLkjxoHwSBe+AhWJD1zUxRy8avxP8wkpJdJX5QkL600pVdpl2TKjS8 C94z9bKtO/toao8CoezihOHsLNMMUP79Tllac6GX4aQ5d2YV0p9O/WPXdsBSbygU tjcRpcgsi4UVvS+VjqFgzkALNtkbrioITS58yKR2tLIbLSwFTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObz3WyJKg6doPmgqmfe5vI8JMgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWIwYzU4ZDItYTJlMy0z YzQ5LWI2ZDMtMjNjYzZmMmE1MjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiF5ey7nRT4urREtMIsqxadxOBLsoJ3ZmHrSh6Jss344smqKUalHS8a WtuUTFXOMUBZvOHgTaot5fz4yDOIVhDIWpmi+iwAdL/IydOoVXQ/Q4cDpGMGrIPb 7Drs8Z44bqliTqnxysf+lTCvckHNTBrON7+oZAu0tb4QCJ3C96VaNEaMZJwM5GhQ e7qd9+YDow+Z7fqnxgDBSHZue/afjLItReDbLXc69Y1irDIrsQQaSOpQFz6hwpCt qCGntSg4gfN7WDo/mzd+q02F6jiPbKnJ9T2ryrfmacZw/c8yrDadJcmxlODJtMda wKM3oBzUxbmvX7tWsLAs9b2juyzVPEA= -----END CERTIFICATE-----Generated at Wed Jul 29 08:52:55 2026 by rpki-client