$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5dc3da9-afde-3a03-a6ca-0024e5a75c8e.roa File: e5dc3da9-afde-3a03-a6ca-0024e5a75c8e.roa (raw, json) Hash identifier: 5uOMbNElYC9rFeae+QPnFuknqXsJRUiiwHCUKFQrpa0= Subject key identifier: D2:D6:99:2C:A8:FF:3E:A0:6F:25:85:35:F5:87:D7:DC:1D:85:D4:F3 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F119D0D41FCC31A0C34491200 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5dc3da9-afde-3a03-a6ca-0024e5a75c8e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 20.148.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:0d:41:fc:c3:1a:0c:34:49:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=e1f1b082-d45e-46aa-bbb1-8b0868e72a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:c3:e4:7e:8b:33:2b:dc:2b:e3:0e:8b:d5: 20:83:d5:25:f8:d1:b0:9e:2d:9d:2b:fc:58:4f:33: 34:ed:6c:b8:8c:2c:4d:34:96:d3:b6:93:1b:fa:7d: c3:6d:77:dc:21:b9:0e:34:30:e4:6f:73:60:90:a1: c4:54:25:9a:91:9a:7f:d8:79:2a:49:d8:02:69:f8: 2d:cd:23:d6:ae:14:b0:83:82:54:8a:59:23:a4:a6: 33:7a:72:51:ec:9a:6b:01:39:8a:23:6d:ac:ba:41: 63:af:88:15:3d:9a:6e:71:23:42:fe:3a:08:07:43: c5:ca:46:f9:66:2d:db:65:9d:c5:65:e3:60:21:eb: 3a:6f:ab:f4:0e:19:88:31:14:e8:d0:5e:d7:95:65: 08:81:11:57:5b:65:e5:0b:ce:8c:b9:4d:ca:3d:54: 7c:5e:5d:fd:51:be:40:c4:8e:9b:fe:cd:05:7a:75: d1:16:83:0c:b2:b4:69:3b:cd:bf:54:fa:79:55:8d: a7:57:33:1e:23:63:6d:6d:9a:35:98:87:d3:1e:a7: 5c:5f:5d:24:a6:04:de:db:45:9e:36:5a:46:98:19: 4b:9c:01:bc:f0:f8:e3:6f:6c:44:52:76:e4:e9:35: 57:1b:91:3f:76:23:ea:35:57:92:cc:e4:74:e9:d8: 64:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D6:99:2C:A8:FF:3E:A0:6F:25:85:35:F5:87:D7:DC:1D:85:D4:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5dc3da9-afde-3a03-a6ca-0024e5a75c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:79:5b:b7:ac:a8:53:53:88:52:61:c6:a4:a1:2b:1b:32:ae: 7c:f6:21:04:c9:a6:c7:a2:4a:cb:b0:cd:15:b3:a9:3f:0d:58: dd:e5:31:9d:61:66:46:12:a0:8a:95:ce:65:ef:8e:22:6d:b5: a6:35:00:df:b7:bd:1f:25:d0:a6:3a:59:52:9e:26:d5:7a:ed: 49:22:62:18:96:67:10:0a:31:7b:42:21:de:c3:cc:97:27:e3: 5b:c5:21:1c:3b:9e:d8:38:91:26:5f:0c:99:f2:fc:d9:97:d4: 4b:ec:1a:8e:14:a5:f2:da:b7:cd:05:2f:0d:91:53:b2:b2:07: 11:75:8f:50:6d:7b:0a:b6:f6:6f:ad:39:b8:60:37:f8:52:8b: 64:b8:f1:55:46:7a:73:d5:ef:1c:1c:bf:7d:ad:76:be:54:97: 61:fa:7a:82:34:4b:2d:a6:cd:ba:06:12:8b:f3:3c:d7:57:de: 14:b7:ab:c8:c4:86:e4:31:4c:ad:a9:5c:b2:10:6c:00:00:f4: 37:f2:37:a9:59:06:b2:23:d3:66:0c:f6:d2:d1:e5:9f:d3:18: 13:e1:95:da:60:c9:85:19:08:b6:28:37:9e:6f:01:7a:0b:c1: 46:bc:3e:4f:78:fa:8d:d1:f6:5e:c1:bf:c5:5f:4f:66:da:9e: 83:28:4b:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQ1B/MMaDDRJEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTFmMWIwODItZDQ1ZS00NmFhLWJiYjEtOGIwODY4ZTcyYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3jD5H6LMyvcK+MOi9Ugg9Ul+NGwni2dK/xY TzM07Wy4jCxNNJbTtpMb+n3DbXfcIbkONDDkb3NgkKHEVCWakZp/2HkqSdgCafgt zSPWrhSwg4JUilkjpKYzenJR7JprATmKI22sukFjr4gVPZpucSNC/joIB0PFykb5 Zi3bZZ3FZeNgIes6b6v0DhmIMRTo0F7XlWUIgRFXW2XlC86MuU3KPVR8Xl39Ub5A xI6b/s0FenXRFoMMsrRpO82/VPp5VY2nVzMeI2NtbZo1mIfTHqdcX10kpgTe20We NlpGmBlLnAG88Pjjb2xEUnbk6TVXG5E/diPqNVeSzOR06dhk2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLWmSyo/z6gbyWFNfWH19wdhdTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTVkYzNkYTktYWZkZS0z YTAzLWE2Y2EtMDAyNGU1YTc1YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh5W7esqFNTiFJhxqShKxsyrnz2IQTJpseiSsuwzRWzqT8NWN3lMZ1h ZkYSoIqVzmXvjiJttaY1AN+3vR8l0KY6WVKeJtV67UkiYhiWZxAKMXtCId7DzJcn 41vFIRw7ntg4kSZfDJny/NmX1EvsGo4UpfLat80FLw2RU7KyBxF1j1Btewq29m+t ObhgN/hSi2S48VVGenPV7xwcv32tdr5Ul2H6eoI0Sy2mzboGEovzPNdX3hS3q8jE huQxTK2pXLIQbAAA9DfyN6lZBrIj02YM9tLR5Z/TGBPhldpgyYUZCLYoN55vAXoL wUa8Pk94+o3R9l7Bv8VfT2banoMoS4E= -----END CERTIFICATE-----Generated at Mon Sep 28 05:30:15 2026 by rpki-client