$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa File: f68ba57f-5e4d-33d2-960d-57b417d05011.roa (raw, json) Hash identifier: pwJ2Pk456XqH0IJ6Y31oVpz+H4BEZ+oSIxB0c4NKrt0= Subject key identifier: 3D:83:13:17:8D:2F:7C:87:19:CB:AB:D9:2A:8C:AE:5A:C5:71:8B:C6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62B2A2D71F0AE690F7A880 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 3356 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:b2:a2:d7:1f:0a:e6:90:f7:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=308f5cc9-7ea6-426d-9c5f-fc234bf22043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:43:b9:fc:fc:2a:64:90:a6:72:4c:ad:c7:bb: bd:38:37:2d:1c:26:d3:99:ea:d3:23:6c:a5:0c:2b: 0b:93:ff:87:dd:6f:43:36:04:32:f1:27:18:a8:24: 01:ba:7a:86:d5:9e:3a:e6:a7:41:83:35:04:41:3d: 8a:0a:11:fc:04:3c:1f:5b:93:41:9c:ab:84:34:d3: e2:c6:b9:87:a3:08:4b:95:d1:37:ae:87:83:ac:06: b8:a4:2c:39:2e:53:16:4a:09:f7:d7:94:27:de:01: 87:8d:d0:52:66:6d:06:87:03:c9:29:19:b5:cf:6d: d4:da:7d:53:c4:2a:5a:9d:2e:05:e7:48:8a:b0:00: 81:40:8c:4a:93:cc:01:04:21:f7:ba:20:b4:82:50: b6:43:a0:f1:c1:2f:46:c9:ac:cf:ab:5b:6c:25:e3: 6a:f6:fa:46:fe:d4:9b:b6:fa:21:54:59:a8:6b:19: 61:69:69:4b:7a:b1:4f:af:3a:0c:38:a7:da:59:b1: c2:80:ad:0d:77:9e:d1:bb:02:47:1d:2d:9a:b1:a0: a6:32:86:19:d7:e8:76:14:6f:2e:84:0f:96:8a:92: 59:83:0e:8c:a8:56:c5:95:15:3c:d6:45:d4:bd:51: 49:f1:0e:cd:0c:28:44:99:39:34:f5:05:e9:b7:34: 93:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:83:13:17:8D:2F:7C:87:19:CB:AB:D9:2A:8C:AE:5A:C5:71:8B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:90:57:6a:70:25:09:d7:bf:a9:83:7e:29:c1:5e:c9:77:4b: 66:06:36:14:76:41:c1:f3:96:23:34:94:6f:f8:b8:8b:9f:5a: 65:5e:e8:4a:87:70:ca:4d:12:5c:33:86:29:c8:22:de:66:1b: 1c:58:e2:36:bd:79:9c:5c:93:f3:5d:d4:9b:48:c6:b0:df:ef: 58:f3:53:68:d1:d7:98:91:cc:28:cd:db:96:ec:a6:0a:35:b5: 87:b5:2f:bf:3b:1e:0f:c1:fe:ec:29:ed:72:b2:2c:23:3b:d4: eb:22:6c:82:ec:93:97:c9:5e:93:82:c2:c1:65:51:2d:b1:32: a5:43:d1:36:93:be:b7:cf:80:c3:37:ca:1e:a4:08:8e:c4:4f: 64:6f:5d:1f:79:f5:8d:7f:45:56:1b:e8:6b:22:c7:7a:a9:8d: fd:7d:33:d6:94:75:57:ef:2f:87:b6:23:17:97:54:97:33:ba: f4:92:d3:d8:d3:2c:42:77:88:62:13:f7:f9:0f:a3:f8:49:94: 49:d3:8f:c5:e4:30:b6:76:23:09:1b:19:58:33:f1:98:cf:c1: e0:70:c1:61:4e:ce:49:20:a9:ba:df:a7:e1:89:a5:73:54:e7: 91:2b:d1:cc:aa:58:82:b3:a6:7f:23:dc:22:87:b1:3c:bc:b8: e2:41:a0:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYrKi1x8K5pD3qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MzA4ZjVjYzktN2VhNi00MjZkLTljNWYtZmMyMzRiZjIyMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEO5/PwqZJCmckytx7u9ODctHCbTmerTI2yl DCsLk/+H3W9DNgQy8ScYqCQBunqG1Z465qdBgzUEQT2KChH8BDwfW5NBnKuENNPi xrmHowhLldE3roeDrAa4pCw5LlMWSgn315Qn3gGHjdBSZm0GhwPJKRm1z23U2n1T xCpanS4F50iKsACBQIxKk8wBBCH3uiC0glC2Q6DxwS9GyazPq1tsJeNq9vpG/tSb tvohVFmoaxlhaWlLerFPrzoMOKfaWbHCgK0Nd57RuwJHHS2asaCmMoYZ1+h2FG8u hA+WipJZgw6MqFbFlRU81kXUvVFJ8Q7NDChEmTk09QXptzSTUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2DExeNL3yHGcur2SqMrlrFcYvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjY4YmE1N2YtNWU0ZC0z M2QyLTk2MGQtNTdiNDE3ZDA1MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWQV2pwJQnXv6mDfinBXsl3S2YGNhR2QcHzliM0lG/4uIufWmVe6EqH cMpNElwzhinIIt5mGxxY4ja9eZxck/Nd1JtIxrDf71jzU2jR15iRzCjN25bspgo1 tYe1L787Hg/B/uwp7XKyLCM71OsibILsk5fJXpOCwsFlUS2xMqVD0TaTvrfPgMM3 yh6kCI7ET2RvXR959Y1/RVYb6Gsix3qpjf19M9aUdVfvL4e2IxeXVJczuvSS09jT LEJ3iGIT9/kPo/hJlEnTj8XkMLZ2IwkbGVgz8ZjPweBwwWFOzkkgqbrfp+GJpXNU 55Er0cyqWIKzpn8j3CKHsTy8uOJBoLQ= -----END CERTIFICATE-----Generated at Sun Oct 11 21:54:50 2026 by rpki-client