$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa File: df22a43e-e64f-3eee-a833-cc30d25d5a51.roa (raw, json) Hash identifier: JzXFvAfqH7rCnVAn6O/yYetS/xrYGxNHDBDS8wP3SBs= Subject key identifier: 50:AF:A3:28:FA:70:DD:77:98:58:70:67:06:8B:59:EC:22:84:EE:84 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62CFDC5E436D48F255E480 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 3356 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:cf:dc:5e:43:6d:48:f2:55:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=c912e987-537a-464b-97c0-1e1f508e6159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1c:60:8c:6a:d8:35:84:a5:1a:25:98:5d:82: 75:91:23:8a:f2:09:2d:e1:6e:5b:ce:54:f0:1d:59: a3:81:10:31:59:11:8a:d8:4d:ac:3d:f9:35:9c:9c: dc:37:40:9c:9b:2e:df:f8:65:0d:20:ce:17:4f:19: 69:cd:2d:3c:ec:42:38:eb:70:23:10:76:79:af:a5: e1:ab:bd:f1:78:e9:8c:b5:5c:54:f1:e3:93:d4:dc: d0:ee:eb:b4:2f:56:70:23:6a:6f:b0:26:2d:b2:ee: 38:88:e7:e2:88:77:0f:47:74:ed:d8:1c:b7:00:81: 6c:ba:c3:7a:5c:e1:d5:4b:38:c3:62:e2:4e:fb:c7: 51:e5:78:bc:34:8f:28:77:f9:a2:22:22:52:09:51: c4:c2:e8:ff:c9:50:58:7a:41:31:70:2b:09:17:04: ea:e0:89:dd:2a:2b:a5:87:34:8b:8e:0a:df:fa:c3: 38:ab:ac:45:f7:62:83:8b:ed:64:c3:a9:56:ac:b9: c5:04:75:c5:ed:0c:a1:cc:03:19:ec:4b:8b:c9:78: 99:23:98:2b:a4:6b:2c:f0:4b:79:da:52:b3:cd:34: d5:80:5e:02:b0:62:0f:a1:15:a1:08:a1:fc:2a:14: c0:32:77:f8:3d:32:b2:a4:15:45:36:16:6e:f0:da: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AF:A3:28:FA:70:DD:77:98:58:70:67:06:8B:59:EC:22:84:EE:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:96:86:45:db:6d:f7:8a:79:be:dc:fd:f5:ed:3b:1e:92:8f: 73:2c:fa:02:81:f3:81:33:cc:28:0b:bc:90:57:9c:94:51:10: df:a3:44:8c:ca:bf:e7:ef:0e:42:41:37:06:ee:aa:b6:d8:ff: 8e:e9:4f:ed:5d:48:c6:27:3b:53:77:9a:46:9e:03:95:6c:fd: c0:9e:93:3e:40:18:66:ac:98:b5:e6:aa:6d:bf:38:4f:ef:a9: 91:c2:5a:f6:27:f8:7f:34:cb:f4:24:a0:66:6e:fc:e2:76:37: 0f:27:c3:12:9e:fe:41:84:6e:6e:03:f9:d4:bf:02:a4:e2:6b: e2:a2:7e:1d:0d:96:63:64:76:dc:6f:3b:82:a4:66:14:20:6b: 3b:85:3c:5b:63:61:44:1d:6a:72:50:a1:a1:77:35:58:e2:e1: 8b:87:c6:3e:be:1d:bd:1e:de:cb:d9:8a:3e:82:87:c7:3d:be: 05:22:1c:b1:78:79:b3:f2:13:57:db:0d:2e:1d:be:40:21:43: 6e:8b:1f:c1:89:e5:7b:22:a2:c0:eb:a3:c5:67:53:4f:68:12: f5:4c:ae:2f:24:1b:e8:a6:b6:0d:69:a6:a7:64:37:26:02:e1: 9c:ae:b1:44:a7:1e:48:eb:61:31:7f:d3:c6:62:b5:87:f6:74: 59:1a:c0:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYs/cXkNtSPJV5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YzkxMmU5ODctNTM3YS00NjRiLTk3YzAtMWUxZjUwOGU2MTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxxgjGrYNYSlGiWYXYJ1kSOK8gkt4W5bzlTw HVmjgRAxWRGK2E2sPfk1nJzcN0Ccmy7f+GUNIM4XTxlpzS087EI463AjEHZ5r6Xh q73xeOmMtVxU8eOT1NzQ7uu0L1ZwI2pvsCYtsu44iOfiiHcPR3Tt2By3AIFsusN6 XOHVSzjDYuJO+8dR5Xi8NI8od/miIiJSCVHEwuj/yVBYekExcCsJFwTq4IndKiul hzSLjgrf+sM4q6xF92KDi+1kw6lWrLnFBHXF7QyhzAMZ7EuLyXiZI5grpGss8Et5 2lKzzTTVgF4CsGIPoRWhCKH8KhTAMnf4PTKypBVFNhZu8NqHcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCvoyj6cN13mFhwZwaLWewihO6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGYyMmE0M2UtZTY0Zi0z ZWVlLWE4MzMtY2MzMGQyNWQ1YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSWhkXbbfeKeb7c/fXtOx6Sj3Ms+gKB84EzzCgLvJBXnJRREN+jRIzK v+fvDkJBNwbuqrbY/47pT+1dSMYnO1N3mkaeA5Vs/cCekz5AGGasmLXmqm2/OE/v qZHCWvYn+H80y/QkoGZu/OJ2Nw8nwxKe/kGEbm4D+dS/AqTia+Kifh0NlmNkdtxv O4KkZhQgazuFPFtjYUQdanJQoaF3NVji4YuHxj6+Hb0e3svZij6Ch8c9vgUiHLF4 ebPyE1fbDS4dvkAhQ26LH8GJ5XsiosDro8VnU09oEvVMri8kG+imtg1ppqdkNyYC 4ZyusUSnHkjrYTF/08ZitYf2dFkawFs= -----END CERTIFICATE-----Generated at Sun Oct 4 22:52:24 2026 by rpki-client