$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa File: b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa (raw, json) Hash identifier: qx0G9iCKR+2wubwHOlsFfppSG7svGbRkOJ+jQNoVn60= Subject key identifier: 44:E2:10:5E:85:76:AA:D5:D5:EB:80:D8:E2:37:D2:68:60:FD:6E:40 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F7E7DC28A7B0CBAA48A972500 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 3356 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c2:8a:7b:0c:ba:a4:8a:97:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=4d0c9570-48ec-4bac-826c-5a2043f5d3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:d6:7e:57:da:26:54:2d:94:4b:9f:b2:30: 21:23:cc:ba:d7:29:b4:0f:98:d4:4b:aa:32:76:a0: 3e:21:20:b0:58:28:c4:7a:fd:16:47:e7:c6:d7:69: d7:01:25:1b:0d:85:55:bb:cb:58:25:22:cf:e9:84: 8f:95:aa:c3:b7:6a:b8:ad:c5:aa:83:1d:d5:84:32: 45:c9:6d:34:2d:25:43:46:8f:ab:3c:33:66:3a:a9: 53:41:5f:39:d2:87:ef:b5:96:f4:7d:81:05:59:7d: 74:02:33:05:00:4c:d8:7a:d2:b3:73:49:62:8b:66: 29:5c:a7:2b:61:94:55:95:fb:66:84:df:64:91:e0: 86:29:2c:89:f8:1e:05:3c:ce:b6:76:c6:30:f1:3c: fa:ec:eb:bd:e2:1a:54:6d:3d:19:02:b6:a4:ab:49: 5c:57:ab:72:52:a1:b2:8c:72:5c:e9:6b:84:7e:d6: 89:43:b0:1f:02:95:8a:fa:57:b2:92:b2:78:6e:fa: 97:bb:23:0b:ce:af:9d:e1:52:c3:d5:3a:67:73:8a: 28:90:b9:5f:1f:95:0a:7f:d7:f0:c4:40:c8:a7:88: 12:0a:79:bc:5e:f6:e8:da:f9:82:c1:1d:11:dc:c1: e9:a2:6d:52:5b:62:76:62:ca:ed:0f:aa:93:ec:42: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E2:10:5E:85:76:AA:D5:D5:EB:80:D8:E2:37:D2:68:60:FD:6E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5d:5e:fe:ae:4b:19:89:fd:b3:3f:49:fb:c2:34:87:d5:57: 25:f3:29:9f:d7:ad:d0:e0:15:e8:f0:1e:d3:06:d3:a3:e6:cb: 36:b3:36:55:b1:82:89:6d:b3:97:a5:7d:a7:be:d2:e3:af:b0: 9d:70:28:69:e9:10:87:f1:29:50:b2:c8:bf:95:33:ca:ba:5d: 49:68:ce:7b:52:64:b6:5d:f9:67:e1:b7:b1:65:0a:8a:7b:c4: 91:fa:65:6a:5a:39:ce:9f:b0:b7:fa:60:54:6f:55:09:75:34: fd:fc:85:9d:f8:2d:e2:90:22:45:21:29:0f:f0:f0:b2:db:4f: 88:a0:52:3d:e1:6e:07:21:42:1d:c4:9b:e8:e2:bc:e2:dc:84: 66:69:26:2b:2d:06:ec:44:fa:ea:a7:f1:ba:4a:8d:df:83:20: 45:c9:e3:4d:ad:82:de:c4:72:a5:c7:01:5a:58:14:10:9a:c6: 08:6f:d6:be:54:d9:72:76:ba:5c:6d:95:73:94:d8:ce:13:6d: 3d:47:10:4d:c1:eb:da:8c:a3:03:87:1e:52:6e:e5:59:f5:3d: 2d:67:40:74:a1:02:90:b4:6d:43:6b:11:14:0b:ad:1a:f1:7f: 91:a4:7f:cb:e9:91:0b:21:32:0d:c7:6f:e3:b6:20:41:1e:aa: bc:d1:7b:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcKKewy6pIqXJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NGQwYzk1NzAtNDhlYy00YmFjLTgyNmMtNWEyMDQzZjVkM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywnWflfaJlQtlEufsjAhI8y61ym0D5jUS6oy dqA+ISCwWCjEev0WR+fG12nXASUbDYVVu8tYJSLP6YSPlarDt2q4rcWqgx3VhDJF yW00LSVDRo+rPDNmOqlTQV850ofvtZb0fYEFWX10AjMFAEzYetKzc0lii2YpXKcr YZRVlftmhN9kkeCGKSyJ+B4FPM62dsYw8Tz67Ou94hpUbT0ZArakq0lcV6tyUqGy jHJc6WuEftaJQ7AfApWK+leykrJ4bvqXuyMLzq+d4VLD1Tpnc4ookLlfH5UKf9fw xEDIp4gSCnm8Xvbo2vmCwR0R3MHpom1SW2J2YsrtD6qT7EIbSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETiEF6FdqrV1euA2OI30mhg/W5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjE2ZGI2YWEtM2VlYi0z MjMwLTk4MGYtMThjMGE2MGMzYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExdXv6uSxmJ/bM/SfvCNIfVVyXzKZ/XrdDgFejwHtMG06PmyzazNlWx golts5elfae+0uOvsJ1wKGnpEIfxKVCyyL+VM8q6XUlozntSZLZd+Wfht7FlCop7 xJH6ZWpaOc6fsLf6YFRvVQl1NP38hZ34LeKQIkUhKQ/w8LLbT4igUj3hbgchQh3E m+jivOLchGZpJistBuxE+uqn8bpKjd+DIEXJ402tgt7EcqXHAVpYFBCaxghv1r5U 2XJ2ulxtlXOU2M4TbT1HEE3B69qMowOHHlJu5Vn1PS1nQHShApC0bUNrERQLrRrx f5Gkf8vpkQshMg3Hb+O2IEEeqrzRe6U= -----END CERTIFICATE-----Generated at Thu Oct 15 10:50:01 2026 by rpki-client