$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa File: 3844cb66-4923-3faf-8c4d-519000648600.roa (raw, json) Hash identifier: TPz2BEACgTDtrkQ6+KFwwg5Ha+6mgNsbZIfZSX1T+TA= Subject key identifier: 0E:26:4C:9A:D8:6C:6F:79:91:52:A0:3D:B2:47:FA:1D:0F:FA:CC:8F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DC40052E2764D21E53BCCBF60 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 202 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:52:e2:76:4d:21:e5:3b:cc:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=070ab341-cd41-42f1-90bc-5d72abbc8e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:89:18:40:d5:89:ed:47:2c:8b:29:81:88:68: b5:36:7c:3d:39:5c:e3:d3:e7:4f:90:8a:a1:c2:32: 7a:9a:87:e2:ed:0e:b9:62:f3:55:7f:53:32:dc:dc: 8a:72:12:64:6f:cd:c3:2b:ec:c7:9d:ba:a9:45:2a: 2a:16:c2:e8:8e:33:e9:a4:14:54:93:69:af:7c:5c: 10:21:ce:44:19:a3:81:4f:82:c1:d7:bb:18:28:f1: 70:23:8c:f3:1b:33:9d:0e:c8:77:1b:6e:db:72:c7: a5:f1:63:2d:c1:12:55:f9:5a:73:11:5a:a3:9f:4f: f3:cb:d9:9b:d8:75:1c:aa:14:16:e2:dc:78:33:b8: 14:b9:72:9d:0f:96:59:91:a3:68:22:de:e9:59:79: 81:22:d0:13:6c:48:ed:8d:19:26:fd:83:32:1f:f2: 79:ad:dc:da:94:1e:7f:d8:83:74:75:14:0f:3f:03: 99:83:81:78:ab:20:6b:fc:82:66:da:77:6c:22:6b: fa:10:b8:f5:2f:3f:6f:a0:88:97:df:16:69:be:7c: ff:c7:98:51:f7:74:d0:ca:da:ea:09:9f:48:36:cf: 6f:06:f2:d3:a0:37:ae:26:67:92:3c:25:b2:3a:ec: d2:dd:a6:22:69:43:72:65:44:8e:2e:6f:10:bf:f3: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:26:4C:9A:D8:6C:6F:79:91:52:A0:3D:B2:47:FA:1D:0F:FA:CC:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b1:b9:45:45:aa:73:81:52:17:54:53:1b:01:a9:57:c6:c6: 5f:bf:8c:0c:8c:cf:76:04:28:24:c8:c7:8e:31:33:2f:67:be: 9e:8b:5b:08:16:30:2b:5f:b8:bf:9d:1d:d9:87:cc:da:57:4e: 67:9d:c1:a9:66:70:d5:58:43:3e:23:38:a7:b0:14:09:88:90: 8a:b1:e6:6b:47:81:4d:1c:d4:71:8e:be:9e:2f:bb:e6:39:20: 28:c2:32:57:df:f1:67:ee:93:11:59:cd:86:87:5c:a9:d1:37: 9d:4c:47:15:f6:a3:76:4d:4e:63:a3:13:3e:12:c5:97:85:f7: 28:1c:cc:c8:5d:bb:08:80:ef:38:8b:53:aa:48:1e:20:6e:45: f1:0b:d0:80:08:e4:73:34:af:77:a1:48:c6:6c:bc:1c:c2:68: 25:07:60:73:a7:bc:fb:8f:3b:3c:c9:1e:65:9e:51:83:88:f8: 41:22:cb:05:53:73:bc:88:60:cf:10:ea:6e:ce:01:11:27:07: 9d:41:8b:30:05:d3:3a:9c:b8:83:5b:42:0e:ac:7a:54:9f:d0: 04:f2:dd:9e:a6:a4:d2:97:ad:0d:9a:33:a2:52:47:8f:2e:c6: a2:cb:43:84:d6:f1:ad:65:8f:24:c1:a2:06:c2:18:0d:f6:8d: 77:93:b6:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAFLidk0h5TvMv2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk MDcwYWIzNDEtY2Q0MS00MmYxLTkwYmMtNWQ3MmFiYmM4ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4kYQNWJ7UcsiymBiGi1Nnw9OVzj0+dPkIqh wjJ6mofi7Q65YvNVf1My3NyKchJkb83DK+zHnbqpRSoqFsLojjPppBRUk2mvfFwQ Ic5EGaOBT4LB17sYKPFwI4zzGzOdDsh3G27bcsel8WMtwRJV+VpzEVqjn0/zy9mb 2HUcqhQW4tx4M7gUuXKdD5ZZkaNoIt7pWXmBItATbEjtjRkm/YMyH/J5rdzalB5/ 2IN0dRQPPwOZg4F4qyBr/IJm2ndsImv6ELj1Lz9voIiX3xZpvnz/x5hR93TQytrq CZ9INs9vBvLToDeuJmeSPCWyOuzS3aYiaUNyZUSOLm8Qv/OvFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4mTJrYbG95kVKgPbJH+h0P+syPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzg0NGNiNjYtNDkyMy0z ZmFmLThjNGQtNTE5MDAwNjQ4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADixuUVFqnOBUhdUUxsBqVfGxl+/jAyMz3YEKCTIx44xMy9nvp6LWwgW MCtfuL+dHdmHzNpXTmedwalmcNVYQz4jOKewFAmIkIqx5mtHgU0c1HGOvp4vu+Y5 ICjCMlff8WfukxFZzYaHXKnRN51MRxX2o3ZNTmOjEz4SxZeF9ygczMhduwiA7ziL U6pIHiBuRfEL0IAI5HM0r3ehSMZsvBzCaCUHYHOnvPuPOzzJHmWeUYOI+EEiywVT c7yIYM8Q6m7OAREnB51BizAF0zqcuINbQg6selSf0ATy3Z6mpNKXrQ2aM6JSR48u xqLLQ4TW8a1ljyTBogbCGA32jXeTtjo= -----END CERTIFICATE-----Generated at Wed May 13 16:57:23 2026 by rpki-client