$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa File: da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa (raw, json) Hash identifier: NfLTIF7pOQiArs3rOQDTNoBKFcw2ugjtgdBILsPHNEg= Subject key identifier: 2C:9E:4E:E9:27:98:D3:60:2A:E2:15:F4:48:CD:D0:61:82:13:3A:6B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E9BE51D29279BA3694C73FE00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 202 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:1d:29:27:9b:a3:69:4c:73:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=4298b949-0b59-466e-9433-208fe1d660cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:94:ca:ca:bb:14:37:6e:da:9c:48:ff:63:6c: 8e:c2:f1:13:dd:b2:75:65:69:90:74:11:86:1d:20: 66:c4:59:0e:aa:6e:2e:91:9c:c3:52:b2:17:e8:38: 05:8f:ac:42:68:a9:a3:4d:db:03:e9:d6:21:e1:c4: 7b:75:e5:b1:f2:65:04:6f:b3:2a:50:c4:1b:2e:22: ca:b9:a4:3b:e5:79:04:ea:8d:cd:52:bc:24:e4:c1: e2:37:6c:41:96:f5:0a:56:5b:92:81:15:e1:63:d4: e1:7b:16:a2:7d:78:75:eb:cd:99:b3:2c:c5:b1:23: 3e:2a:6f:79:d5:5c:84:fa:2e:d4:51:ed:b4:f5:c3: 99:a0:bc:28:73:5d:79:80:4a:1e:5e:11:24:f7:7e: e4:f5:0c:88:52:e0:96:38:61:53:b9:e2:e5:b7:45: 6d:a0:31:2f:8f:9e:6c:7e:2b:67:ad:3d:43:d1:43: d2:9f:f2:8d:1d:8c:6f:67:c1:1a:9c:35:0c:31:6e: 9e:43:87:6e:d1:0e:b5:8e:42:3e:00:82:65:e6:a1: 77:44:3f:e4:97:4a:c4:68:e4:c3:37:06:a2:35:fc: 75:b3:58:f8:de:06:67:f2:7a:72:a6:90:0e:ba:19: a9:79:01:29:e1:50:90:4f:aa:e4:40:54:5a:3e:36: 58:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9E:4E:E9:27:98:D3:60:2A:E2:15:F4:48:CD:D0:61:82:13:3A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:14:dd:e1:a2:0f:de:0f:d3:fe:09:ca:a1:7d:f1:21:09:60: dd:79:3d:ee:cc:8b:3d:e1:ba:de:27:2b:e3:a6:b3:c9:21:2f: 00:18:97:c6:7d:52:b2:2c:b7:cd:ac:51:f3:5a:1f:1d:59:39: 2f:27:c2:48:1c:ea:78:99:aa:a6:87:c4:44:ab:c3:a0:d8:86: ec:03:63:f6:a9:9c:e2:d7:b2:71:31:2c:7c:34:bd:cd:8d:be: a8:09:e7:45:e4:3c:5c:bd:c0:69:a0:02:9a:9a:11:36:9a:c4: 40:7d:12:6f:5d:62:5d:b8:05:16:f6:fe:33:e2:e6:da:76:f0: 77:71:9b:bb:13:c5:12:28:b6:db:51:5d:55:c7:b6:7e:c4:b4: 25:31:a0:54:8c:c7:2f:64:7f:98:f2:1c:b9:99:de:45:40:48: 4c:d2:cf:15:c4:8d:70:ea:f0:58:8f:aa:97:c6:a6:49:34:b4: 7f:15:8a:db:74:35:45:64:ca:86:e0:b1:73:25:9f:a9:22:fe: be:2f:78:4f:e2:b7:8d:51:d8:a3:c4:dd:5e:bc:e0:ac:52:7a: e3:f8:fd:18:42:ed:23:fe:af:e4:f4:22:e2:20:7c:a9:43:f2: ce:ee:d0:71:84:dd:8d:97:9c:f9:21:b1:c4:a5:76:23:41:b9: 79:58:53:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5R0pJ5ujaUxz/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk NDI5OGI5NDktMGI1OS00NjZlLTk0MzMtMjA4ZmUxZDY2MGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZTKyrsUN27anEj/Y2yOwvET3bJ1ZWmQdBGG HSBmxFkOqm4ukZzDUrIX6DgFj6xCaKmjTdsD6dYh4cR7deWx8mUEb7MqUMQbLiLK uaQ75XkE6o3NUrwk5MHiN2xBlvUKVluSgRXhY9ThexaifXh1682ZsyzFsSM+Km95 1VyE+i7UUe209cOZoLwoc115gEoeXhEk937k9QyIUuCWOGFTueLlt0VtoDEvj55s fitnrT1D0UPSn/KNHYxvZ8EanDUMMW6eQ4du0Q61jkI+AIJl5qF3RD/kl0rEaOTD NwaiNfx1s1j43gZn8npyppAOuhmpeQEp4VCQT6rkQFRaPjZYSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyeTuknmNNgKuIV9EjN0GGCEzprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwMjRiOWItYmI2Mi0z ZDNmLTg0YzctZjM1YjUyNzc5Y2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUU3eGiD94P0/4JyqF98SEJYN15Pe7Miz3hut4nK+Oms8khLwAYl8Z9 UrIst82sUfNaHx1ZOS8nwkgc6niZqqaHxESrw6DYhuwDY/apnOLXsnExLHw0vc2N vqgJ50XkPFy9wGmgApqaETaaxEB9Em9dYl24BRb2/jPi5tp28Hdxm7sTxRIotttR XVXHtn7EtCUxoFSMxy9kf5jyHLmZ3kVASEzSzxXEjXDq8FiPqpfGpkk0tH8Vitt0 NUVkyobgsXMln6ki/r4veE/it41R2KPE3V684KxSeuP4/RhC7SP+r+T0IuIgfKlD 8s7u0HGE3Y2XnPkhscSldiNBuXlYU4o= -----END CERTIFICATE-----Generated at Wed Jul 29 09:54:17 2026 by rpki-client