$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa File: e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa (raw, json) Hash identifier: 5uHtnV8yxN8HIYKO/5LxcoWAcFayHcgcK5pl8EIpM4A= Subject key identifier: 5E:95:97:AE:11:35:95:88:46:48:88:88:89:09:9C:CA:8F:63:97:98 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA7965F75546B624AB68DDE20 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3356 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:5f:75:54:6b:62:4a:b6:8d:de:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4c619b4b-dc41-4b08-bbbf-5145365de01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:31:7a:e1:d2:0f:bd:a2:f6:22:24:25:62: bc:f5:5a:8d:0b:15:1d:6f:c9:7c:d6:df:f2:ba:b8: 89:6f:91:39:f7:2a:75:c5:98:98:85:5e:46:6e:31: ee:23:1a:bf:0a:ba:a7:12:7b:f0:23:6a:b6:4f:7b: d8:91:0b:51:21:55:40:c8:1e:a3:08:bf:df:ba:ee: 1b:ba:6b:23:f7:d8:c5:10:ce:e5:77:f2:96:6c:5b: bd:cf:37:1d:3d:00:00:f5:b2:ae:fb:8e:7b:9f:c6: 59:85:f8:02:ec:a2:41:5f:18:90:f1:01:d4:5f:6a: 6b:cd:07:db:a5:09:3e:22:88:38:89:64:96:33:37: 67:dd:36:49:12:5e:fd:26:4c:25:10:43:fc:e0:4a: df:64:7b:6a:77:6f:91:80:43:36:aa:0b:64:d9:2d: 75:4f:2c:89:35:06:3b:a6:40:52:68:ee:c3:67:ce: a0:9b:15:9a:4b:70:39:58:f7:b7:43:45:08:1c:05: f4:16:be:7a:31:35:60:ad:a5:20:ea:15:16:74:35: 9b:ad:01:ad:74:bf:76:48:de:17:2e:bc:b4:46:e5: 35:68:9f:f4:ad:5e:a5:8e:53:86:8b:c0:03:50:8a: 5c:7d:10:fb:ff:69:8c:c2:29:f6:41:93:14:82:96: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:95:97:AE:11:35:95:88:46:48:88:88:89:09:9C:CA:8F:63:97:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:72:1d:60:24:e7:d3:09:f2:11:45:66:63:ba:0d:56:5e:d4: cd:00:c7:e9:c1:68:7f:9a:e4:15:d5:4d:72:ea:ff:1f:bd:cd: c1:fa:7e:cc:b7:b8:83:0d:ec:1c:3a:97:d7:7a:40:82:52:9c: 82:aa:89:7a:fd:9e:a5:e5:00:1e:2d:cb:39:db:a8:8e:99:96: 9f:2f:4c:fb:b4:ea:ca:86:a0:6d:e6:bd:25:0f:65:73:d4:3f: 66:ec:65:a2:18:43:5d:51:94:ea:8e:4f:7e:12:58:ec:32:42: e0:ab:48:67:74:54:a3:de:96:08:8a:3c:09:9e:3f:29:83:4a: 8d:0b:f7:6b:e8:6f:06:d6:8d:53:33:ec:fe:e5:99:62:f1:99: 0f:ba:87:3d:0c:af:51:f2:42:e2:92:80:13:ba:d2:10:2a:51: f8:20:89:dd:40:b3:8f:d7:4e:16:91:f8:2a:6e:57:53:57:77: 56:09:e8:7c:2c:cc:27:8e:84:93:46:67:c3:12:f8:f9:02:49: ec:7f:ec:06:eb:f1:dc:53:5e:ca:8b:44:e9:9f:40:3b:30:97: 94:7b:42:45:60:ed:e3:b4:eb:90:2c:f7:2d:49:4e:5a:5b:35: cb:6d:98:aa:e6:e4:59:41:3d:60:c5:19:75:e7:cf:f1:b3:58: 4b:2f:83:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nll91VGtiSraN3iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGM2MTliNGItZGM0MS00YjA4LWJiYmYtNTE0NTM2NWRlMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi8xeuHSD72i9iIkJWK89VqNCxUdb8l81t/y uriJb5E59yp1xZiYhV5GbjHuIxq/CrqnEnvwI2q2T3vYkQtRIVVAyB6jCL/fuu4b umsj99jFEM7ld/KWbFu9zzcdPQAA9bKu+457n8ZZhfgC7KJBXxiQ8QHUX2przQfb pQk+Iog4iWSWMzdn3TZJEl79JkwlEEP84ErfZHtqd2+RgEM2qgtk2S11TyyJNQY7 pkBSaO7DZ86gmxWaS3A5WPe3Q0UIHAX0Fr56MTVgraUg6hUWdDWbrQGtdL92SN4X Lry0RuU1aJ/0rV6ljlOGi8ADUIpcfRD7/2mMwin2QZMUgpZqEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6Vl64RNZWIRkiIiIkJnMqPY5eYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTJkMTdkNzEtZjZmOC0z YmU1LWFkMmQtODgzODE3MTYwOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEByHWAk59MJ8hFFZmO6DVZe1M0Ax+nBaH+a5BXVTXLq/x+9zcH6fsy3 uIMN7Bw6l9d6QIJSnIKqiXr9nqXlAB4tyznbqI6Zlp8vTPu06sqGoG3mvSUPZXPU P2bsZaIYQ11RlOqOT34SWOwyQuCrSGd0VKPelgiKPAmePymDSo0L92vobwbWjVMz 7P7lmWLxmQ+6hz0Mr1HyQuKSgBO60hAqUfggid1As4/XThaR+CpuV1NXd1YJ6Hws zCeOhJNGZ8MS+PkCSex/7Abr8dxTXsqLROmfQDswl5R7QkVg7eO065As9y1JTlpb NcttmKrm5FlBPWDFGXXnz/GzWEsvg7M= -----END CERTIFICATE-----Generated at Wed Jul 29 11:04:00 2026 by rpki-client