$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa File: b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa (raw, json) Hash identifier: otkK/I5DIVoAse+v6E67AC8eXAt1BzW91PT0bqRG1Fs= Subject key identifier: 3C:64:76:6F:B1:CD:1B:8E:15:7E:0E:F3:1B:51:D5:50:CC:51:73:70 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584ED861ED710D100650B3302DE0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 3360 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:ed:71:0d:10:06:50:b3:30:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=e43f4745-d3bf-4057-b434-a1f4b255a9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bf:fe:13:e0:58:c5:9a:7a:5d:d4:39:da:9e: ff:52:0b:5a:c4:a3:51:78:97:55:6a:73:7e:4f:c0: 79:8b:af:4d:79:50:1d:98:db:e8:d9:ed:a2:dc:55: 60:69:a4:3a:dc:0a:e9:73:43:43:0d:9d:74:43:ad: ba:31:fc:a1:9e:88:46:39:df:20:bd:ac:08:a1:a3: 0c:5e:d3:a4:06:b8:5e:1d:8f:cc:a4:36:ab:5a:42: d4:a7:a2:50:92:45:4f:04:e6:a8:80:f9:ad:a1:e0: 01:94:1d:5a:02:62:1b:a5:72:93:da:87:02:95:cb: 10:a6:3c:50:89:c3:9d:4e:a3:c6:f2:13:85:93:4d: 56:a6:be:00:c2:e8:22:48:4a:a7:d7:b9:a1:e2:8a: d6:46:fb:fb:40:1b:4a:2a:0c:7d:81:78:49:c0:d0: 0a:30:dc:bd:c3:bb:f6:ba:9d:e5:65:74:54:3a:32: 08:d3:43:c3:1f:34:1b:0e:bf:ad:ae:45:78:03:58: 19:58:e0:ac:d4:36:02:91:8c:75:9b:5a:4c:ff:b7: d6:f4:c1:e4:ea:6d:40:3b:c4:07:ce:42:c2:65:06: 1b:7e:5b:d3:20:25:41:41:94:6d:b5:0f:29:07:13: 71:47:bf:f6:2c:25:88:90:5d:69:95:41:c2:e4:54: ba:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:64:76:6F:B1:CD:1B:8E:15:7E:0E:F3:1B:51:D5:50:CC:51:73:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:42:20:5c:97:f7:16:68:f4:b6:ea:56:cf:4a:33:31:9e:ce: 03:ca:57:54:47:33:aa:bb:05:65:61:69:9f:68:72:20:2b:1d: 85:02:4f:fb:aa:28:09:2d:97:ff:04:b8:7d:ba:8b:2a:b2:24: 4a:65:0b:9c:c1:31:8f:84:47:cf:bd:96:92:65:5a:9e:13:78: 81:97:81:07:6f:b7:b4:c4:51:a6:3c:31:8d:fc:89:c5:df:fe: 74:45:db:90:80:85:e8:6f:48:b8:0f:03:6c:cf:59:f1:02:3b: 47:43:04:3b:c3:1c:6a:dd:80:e9:5d:72:e2:44:fa:7a:96:ea: ef:95:48:ee:1e:23:08:c0:1a:ed:fd:52:a0:6a:85:0e:ed:c4: dd:a3:e1:01:0c:f4:2e:47:b7:63:78:d5:39:02:4d:78:19:86: 35:f8:79:25:7d:27:53:cb:bd:37:50:73:03:40:e0:94:bd:a1: ed:97:bd:80:3e:15:e4:b2:6b:25:90:0f:00:0d:04:0c:b7:ed: 6b:4e:a3:e8:52:7b:11:fa:cf:b2:d6:6d:20:3f:88:a5:9e:a6: c6:b5:73:eb:35:f8:67:b4:0f:16:65:c2:1e:0b:16:24:5b:6f: 6e:18:f8:a3:e7:db:27:e9:cc:7a:a7:18:bc:26:48:3b:81:bc: 8c:7a:f5:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYe1xDRAGULMwLeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZTQzZjQ3NDUtZDNiZi00MDU3LWI0MzQtYTFmNGIyNTVhOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL/+E+BYxZp6XdQ52p7/UgtaxKNReJdVanN+ T8B5i69NeVAdmNvo2e2i3FVgaaQ63Arpc0NDDZ10Q626MfyhnohGOd8gvawIoaMM XtOkBrheHY/MpDarWkLUp6JQkkVPBOaogPmtoeABlB1aAmIbpXKT2ocClcsQpjxQ icOdTqPG8hOFk01Wpr4AwugiSEqn17mh4orWRvv7QBtKKgx9gXhJwNAKMNy9w7v2 up3lZXRUOjII00PDHzQbDr+trkV4A1gZWOCs1DYCkYx1m1pM/7fW9MHk6m1AO8QH zkLCZQYbflvTICVBQZRttQ8pBxNxR7/2LCWIkF1plUHC5FS65QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxkdm+xzRuOFX4O8xtR1VDMUXNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjlmMjAyNGMtZGE1Yy0z ZTVlLWIyMTUtYTVhZWZiZTJmMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVCIFyX9xZo9LbqVs9KMzGezgPKV1RHM6q7BWVhaZ9ociArHYUCT/uq KAktl/8EuH26iyqyJEplC5zBMY+ER8+9lpJlWp4TeIGXgQdvt7TEUaY8MY38icXf /nRF25CAhehvSLgPA2zPWfECO0dDBDvDHGrdgOldcuJE+nqW6u+VSO4eIwjAGu39 UqBqhQ7txN2j4QEM9C5Ht2N41TkCTXgZhjX4eSV9J1PLvTdQcwNA4JS9oe2XvYA+ FeSyayWQDwANBAy37WtOo+hSexH6z7LWbSA/iKWepsa1c+s1+Ge0DxZlwh4LFiRb b24Y+KPn2yfpzHqnGLwmSDuBvIx69aM= -----END CERTIFICATE-----Generated at Sun Sep 20 15:16:56 2026 by rpki-client