$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa File: cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa (raw, json) Hash identifier: KDmB3AkQETmsCj1Q6dzZpZhzdTYxbuJnq0tKBY2vsxk= Subject key identifier: C0:A2:84:91:44:32:8F:C1:57:43:56:5F:4C:BA:BB:41:42:76:7F:4E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584FB3A6884F45201B9C71C0ACC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 3356 IP address blocks: 20.148.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:88:4f:45:20:1b:9c:71:c0:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=607b2f4b-2f8c-480e-8740-80d0094de65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:31:4c:d9:0f:97:27:96:64:e2:d7:f3:f3: 5a:41:00:19:54:95:90:fd:ee:6f:10:20:ab:97:72: 9a:a8:cb:f5:1a:3a:11:60:3b:87:59:a8:60:17:a2: 3f:2b:39:51:cc:f7:e2:ac:87:33:a5:cb:74:88:c4: 17:0d:c4:14:da:6c:37:60:76:64:c6:9d:2a:f6:48: 19:ed:90:4b:09:63:f0:31:49:83:66:c9:21:f1:29: 9e:d5:ca:c9:bd:eb:4c:24:35:4d:67:8f:6c:3e:a2: 94:a2:9a:03:d8:12:68:5e:cd:64:ed:eb:63:82:35: 59:95:62:2d:b5:32:54:83:e6:ee:03:4c:94:1d:b2: c5:a9:ac:e4:97:4c:2e:56:4a:e8:d3:9b:b0:eb:80: ae:5d:58:1f:6d:90:af:dc:67:2e:b7:c3:1a:ae:38: 80:97:18:b1:c5:d5:d8:91:a1:e6:b8:2a:37:62:ff: 19:20:70:32:f2:42:84:8a:b8:b6:61:fe:b0:65:4b: 35:0c:02:ed:c4:b7:d3:68:b5:f3:21:c2:cb:9e:90: a8:a2:3e:64:f4:bc:08:13:73:7c:14:01:fe:3a:26: 56:7d:66:e6:39:a0:b9:13:1b:e7:2f:a9:20:3a:92: bd:66:1f:0b:e9:68:12:10:ee:40:d0:52:f8:7e:50: db:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A2:84:91:44:32:8F:C1:57:43:56:5F:4C:BA:BB:41:42:76:7F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:81:64:c1:7d:23:a5:7e:40:b3:5f:b8:cf:65:da:1a:32:f5: 3b:30:6f:d0:c9:1f:39:0d:21:c7:97:6c:69:f6:c7:62:2f:3b: c2:a9:c6:b7:bb:51:b2:79:fe:1e:1b:38:43:42:b7:73:7e:f3: 6e:14:4b:7a:d5:ac:2b:d0:56:9e:5a:62:c3:42:45:02:b9:20: 14:81:28:97:d0:14:71:be:62:cf:e0:d1:96:db:4c:c0:64:42: e2:00:6a:08:0e:0f:8b:99:56:56:1b:5f:e7:b6:97:16:be:28: 6a:c5:60:55:d5:9e:aa:42:b0:3d:ee:32:5c:11:e5:05:7c:55: 83:01:13:2d:6d:0a:5c:ed:47:98:f0:c0:c9:81:37:30:77:7d: 0e:7c:72:19:78:2f:b4:cd:7b:7f:68:94:f6:c0:33:71:7a:2f: 39:1d:68:7c:a5:aa:29:1e:36:8c:3d:b8:45:c7:5f:ab:4b:8c: 38:8f:ae:dd:5f:89:09:9f:6d:0c:34:96:59:6a:4f:6e:bb:24: f4:fe:fb:4d:9d:30:64:40:f6:2b:df:ca:62:27:4c:07:f2:6d: a9:4a:5f:3b:10:95:71:68:36:cb:b6:50:ec:91:58:0a:41:8a: cf:78:be:23:2f:c8:21:0c:eb:63:ae:08:70:9d:7d:54:6c:98: d3:45:17:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpohPRSAbnHHArMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk NjA3YjJmNGItMmY4Yy00ODBlLTg3NDAtODBkMDA5NGRlNjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonMxTNkPlyeWZOLX8/NaQQAZVJWQ/e5vECCr l3KaqMv1GjoRYDuHWahgF6I/KzlRzPfirIczpct0iMQXDcQU2mw3YHZkxp0q9kgZ 7ZBLCWPwMUmDZskh8Sme1crJvetMJDVNZ49sPqKUopoD2BJoXs1k7etjgjVZlWIt tTJUg+buA0yUHbLFqazkl0wuVkro05uw64CuXVgfbZCv3Gcut8MarjiAlxixxdXY kaHmuCo3Yv8ZIHAy8kKEiri2Yf6wZUs1DALtxLfTaLXzIcLLnpCooj5k9LwIE3N8 FAH+OiZWfWbmOaC5ExvnL6kgOpK9Zh8L6WgSEO5A0FL4flDbGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCihJFEMo/BV0NWX0y6u0FCdn9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2Y2YTRmYTAtM2RiMC0z MzU0LTg4ZDktNDhiMDI1ZTBmNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCBZMF9I6V+QLNfuM9l2hoy9Tswb9DJHzkNIceXbGn2x2IvO8Kpxre7 UbJ5/h4bOENCt3N+824US3rVrCvQVp5aYsNCRQK5IBSBKJfQFHG+Ys/g0ZbbTMBk QuIAaggOD4uZVlYbX+e2lxa+KGrFYFXVnqpCsD3uMlwR5QV8VYMBEy1tClztR5jw wMmBNzB3fQ58chl4L7TNe39olPbAM3F6LzkdaHylqikeNow9uEXHX6tLjDiPrt1f iQmfbQw0lllqT267JPT++02dMGRA9ivfymInTAfybalKXzsQlXFoNsu2UOyRWApB is94viMvyCEM62OuCHCdfVRsmNNFF/c= -----END CERTIFICATE-----Generated at Thu Nov 5 01:06:10 2026 by rpki-client