$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa File: 38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa (raw, json) Hash identifier: FCc27qGpOYrj6Ghah58Z1ARO0/s1CobVGtIm47bDjFo= Subject key identifier: 5E:4F:CC:92:48:77:7F:15:8F:CB:9E:66:FC:A6:6C:B6:0C:AA:6F:1D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D8EF57A54F577EAF05ABC2520 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 3360 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7a:54:f5:77:ea:f0:5a:bc:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ca9d49f1-02da-4b59-bd51-ffe914b2f242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4f:c1:e9:dd:62:2a:fe:22:20:b7:46:10:cd: fd:bc:54:4f:cf:fa:57:2c:87:57:c6:7c:04:38:7f: 56:37:e5:3d:93:c7:1e:95:fe:b6:ce:31:df:e6:d6: 45:df:ef:9e:59:d6:c1:aa:58:ab:e2:69:38:15:a3: 52:82:20:af:7d:31:d3:10:f3:32:1c:b3:da:bc:b7: ba:20:be:27:b1:67:f8:80:35:a6:04:ed:67:94:5b: 51:ee:ea:7b:3d:9a:1f:21:5b:70:ee:11:43:8b:29: 20:b9:21:2e:a3:39:e7:4b:47:9e:93:96:bc:59:a2: 73:3d:37:a7:30:d6:54:28:31:8f:08:10:5d:36:87: 48:2e:1c:24:33:55:a5:5f:36:86:4b:18:87:86:e5: 55:13:9f:ec:48:0b:e8:2b:17:7f:d7:e4:14:7c:bb: c7:ce:1d:2b:c9:18:f7:bc:9d:83:c0:d8:86:ce:2e: ad:f0:5e:7f:43:84:b9:f9:4f:95:70:74:53:5b:1a: ab:9a:8e:c5:c7:74:99:14:70:2e:ea:a1:05:cd:dc: da:04:55:ec:de:c7:a7:21:54:c1:64:7a:f0:5c:9a: d6:70:6a:fe:59:7e:ae:f5:94:25:05:3b:02:4b:76: 60:54:9b:2f:af:cc:52:33:dc:24:fa:1f:ba:9f:b7: 51:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4F:CC:92:48:77:7F:15:8F:CB:9E:66:FC:A6:6C:B6:0C:AA:6F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ad:93:ca:f5:3d:c9:36:1a:92:14:07:47:c0:80:8c:18:06: 7e:16:f5:c5:b1:df:70:da:85:e7:b1:c9:fb:25:1e:5e:44:e5: 2c:9a:22:91:4b:a7:68:58:20:ed:77:47:cc:95:1a:e0:ad:d8: 78:2a:e4:46:83:6a:21:13:ae:04:83:08:3b:ec:ee:c6:fc:b0: 25:97:f0:c4:e1:0f:79:59:ad:50:89:f4:cf:d5:d8:40:4d:ec: eb:be:d1:a2:ec:cf:85:a5:39:8e:14:e5:03:86:bd:80:bd:6b: 9e:06:87:39:d5:f7:70:14:2c:de:be:5a:4a:f2:51:06:5a:fc: de:eb:9b:66:af:21:a4:a9:10:92:88:d4:f5:ea:6b:ba:18:25: a4:e4:0c:a2:6f:1c:8a:95:ed:db:f5:c5:1c:2a:23:ca:63:30: 9d:c5:91:c6:11:cd:c7:0c:0e:ce:f0:a6:72:ff:fb:ac:bc:ef: dc:41:45:e7:f1:e6:b4:a3:a2:4d:2a:f6:11:5e:a4:d1:e5:2c: cd:d3:8e:3f:56:68:37:33:08:69:ab:4a:29:05:c4:a7:58:57: 80:11:68:6a:9c:68:a7:79:33:d7:ad:80:c9:b0:b9:ba:af:ab: 78:3b:72:95:ed:24:ed:d2:cd:50:43:62:8f:a1:a9:a6:1b:d9: df:c5:f2:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XpU9Xfq8Fq8JSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk Y2E5ZDQ5ZjEtMDJkYS00YjU5LWJkNTEtZmZlOTE0YjJmMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k/B6d1iKv4iILdGEM39vFRPz/pXLIdXxnwE OH9WN+U9k8celf62zjHf5tZF3++eWdbBqlir4mk4FaNSgiCvfTHTEPMyHLPavLe6 IL4nsWf4gDWmBO1nlFtR7up7PZofIVtw7hFDiykguSEuoznnS0eek5a8WaJzPTen MNZUKDGPCBBdNodILhwkM1WlXzaGSxiHhuVVE5/sSAvoKxd/1+QUfLvHzh0ryRj3 vJ2DwNiGzi6t8F5/Q4S5+U+VcHRTWxqrmo7Fx3SZFHAu6qEFzdzaBFXs3senIVTB ZHrwXJrWcGr+WX6u9ZQlBTsCS3ZgVJsvr8xSM9wk+h+6n7dRGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5PzJJId38Vj8ueZvymbLYMqm8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhmNWYyYzQtYzFiMS0z YmU4LWFhNmYtMmVkNzg3MTNiMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOtk8r1Pck2GpIUB0fAgIwYBn4W9cWx33DaheexyfslHl5E5SyaIpFL p2hYIO13R8yVGuCt2Hgq5EaDaiETrgSDCDvs7sb8sCWX8MThD3lZrVCJ9M/V2EBN 7Ou+0aLsz4WlOY4U5QOGvYC9a54GhznV93AULN6+WkryUQZa/N7rm2avIaSpEJKI 1PXqa7oYJaTkDKJvHIqV7dv1xRwqI8pjMJ3FkcYRzccMDs7wpnL/+6y879xBRefx 5rSjok0q9hFepNHlLM3Tjj9WaDczCGmrSikFxKdYV4ARaGqcaKd5M9etgMmwubqv q3g7cpXtJO3SzVBDYo+hqaYb2d/F8vk= -----END CERTIFICATE-----Generated at Wed May 13 17:46:32 2026 by rpki-client