$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa File: 24f0832c-135e-30d8-934a-392b9947dce4.roa (raw, json) Hash identifier: BN9nSVnkibxQiZTlOjA2DsyWmeL4L75ENGa3ljPJySc= Subject key identifier: 10:27:F5:01:F2:64:7F:4D:F2:57:6E:C2:D6:A5:5D:4D:6B:BC:D4:8A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D143D4A8E0A30060A220622C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 3360 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4a:8e:0a:30:06:0a:22:06:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=d9c27434-4fa2-4904-bf24-8bedbb13dd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:a9:88:51:3f:cc:05:d0:ec:7f:b3:4b:d9: c6:9f:a0:b2:c3:47:a4:8b:18:a9:cd:d1:5e:27:15: 30:cb:d4:d0:cd:e1:4d:e0:4b:52:89:fc:96:09:65: e1:b8:8f:7c:23:d3:af:0a:20:ff:62:0c:1f:b3:f5: 1a:e7:3b:e4:d1:d6:47:ee:d2:76:dc:68:e0:6e:92: e0:fe:90:64:47:39:99:10:96:04:48:dd:94:92:0c: 7b:5a:b5:1c:21:e4:2a:e9:9d:06:ca:d5:c1:2c:f0: f1:30:ca:65:c6:6c:0c:60:a2:d0:9d:02:4d:86:71: ba:5b:7d:d1:61:8f:22:92:65:ae:2e:c3:f4:27:25: 2a:98:83:e7:ed:3f:cb:b1:30:5e:d8:73:fc:19:2e: c8:02:6d:0d:aa:31:0f:cc:a2:8f:e0:c4:44:55:bc: 10:a3:73:19:c6:8c:7b:78:99:34:69:db:58:90:76: 12:02:52:d6:59:de:c0:0f:78:b6:e0:8e:62:77:d1: 64:f5:ee:88:c1:9e:8b:6d:c5:f0:7f:ef:f5:af:0f: 12:06:29:84:af:15:cc:0e:23:1a:72:24:1e:df:88: 7d:91:2d:8c:50:3d:fc:20:df:56:2b:7f:e0:7e:8f: 0b:ad:15:f6:61:2c:b9:2d:53:32:58:41:bb:35:0c: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:27:F5:01:F2:64:7F:4D:F2:57:6E:C2:D6:A5:5D:4D:6B:BC:D4:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:9e:8c:c0:12:62:5c:b9:b8:0d:87:56:dd:3a:84:4a:00:66: 8d:24:ba:ab:ad:0e:d0:fd:9b:0b:c2:03:c7:ca:76:ba:72:12: c9:72:97:aa:42:69:d1:c7:5f:50:9a:86:ca:95:de:8f:40:af: ab:ea:d1:ad:92:1e:1d:5d:8a:8c:c9:77:96:df:8e:5a:8b:35: 38:01:9e:b3:c3:72:e9:bc:35:91:ae:02:69:db:42:fb:dc:dd: 0a:cd:92:c8:84:87:c8:8c:90:74:4e:09:c7:ea:c8:38:82:39: 73:94:2f:9d:45:8d:16:f1:84:ba:9d:0d:40:0a:4a:c4:72:f5: bc:12:5f:21:29:79:bd:b9:98:4b:48:81:39:69:58:16:9f:41: 3e:6f:20:0c:40:5b:41:8d:b8:4d:97:c3:f6:d6:a6:fa:b4:74: d6:5a:ee:b5:64:ae:07:b6:65:f7:ff:04:94:dc:c9:36:23:6d: 47:5a:f7:e5:35:d8:a7:35:9d:e9:7a:9f:db:d6:40:09:4c:43: 81:62:96:6f:42:db:e6:78:96:3c:d0:20:3f:b7:9d:b6:51:4d: 6a:e9:7c:b1:ed:19:cc:5f:16:3e:b8:03:00:c2:a2:b1:74:ce: ca:3f:94:db:2a:28:c6:a9:9b:a8:2d:bd:c8:66:c8:55:e1:0a: 8d:32:b1:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUqOCjAGCiIGIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDljMjc0MzQtNGZhMi00OTA0LWJmMjQtOGJlZGJiMTNkZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraGpiFE/zAXQ7H+zS9nGn6Cyw0ekixipzdFe JxUwy9TQzeFN4EtSifyWCWXhuI98I9OvCiD/Ygwfs/Ua5zvk0dZH7tJ23GjgbpLg /pBkRzmZEJYESN2Ukgx7WrUcIeQq6Z0GytXBLPDxMMplxmwMYKLQnQJNhnG6W33R YY8ikmWuLsP0JyUqmIPn7T/LsTBe2HP8GS7IAm0NqjEPzKKP4MREVbwQo3MZxox7 eJk0adtYkHYSAlLWWd7AD3i24I5id9Fk9e6IwZ6LbcXwf+/1rw8SBimErxXMDiMa ciQe34h9kS2MUD38IN9WK3/gfo8LrRX2YSy5LVMyWEG7NQxmNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAn9QHyZH9N8lduwtalXU1rvNSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjRmMDgzMmMtMTM1ZS0z MGQ4LTkzNGEtMzkyYjk5NDdkY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCejMASYly5uA2HVt06hEoAZo0kuqutDtD9mwvCA8fKdrpyEslyl6pC adHHX1CahsqV3o9Ar6vq0a2SHh1diozJd5bfjlqLNTgBnrPDcum8NZGuAmnbQvvc 3QrNksiEh8iMkHROCcfqyDiCOXOUL51FjRbxhLqdDUAKSsRy9bwSXyEpeb25mEtI gTlpWBafQT5vIAxAW0GNuE2Xw/bWpvq0dNZa7rVkrge2Zff/BJTcyTYjbUda9+U1 2Kc1nel6n9vWQAlMQ4Film9C2+Z4ljzQID+3nbZRTWrpfLHtGcxfFj64AwDCorF0 zso/lNsqKMapm6gtvchmyFXhCo0ysUQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:53:37 2026 by rpki-client