$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa File: 4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa (raw, json) Hash identifier: qEWHnA3c5HvXINVS96jaYZIrdCAq+O/WQtfSFbqcWTI= Subject key identifier: 5E:FD:2A:01:19:8E:3B:2C:C3:FE:D9:7E:2B:CC:BC:B3:17:88:17:80 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DC4005346C55CA429255EBA00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 3360 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:53:46:c5:5c:a4:29:25:5e:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=ab420423-94d9-41f2-841d-db1c1e78714c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:7b:ad:a1:b6:8d:7d:f3:66:1e:3d:a2:58:14: 9c:1d:cf:99:93:86:cf:95:61:c7:ff:8f:b7:1d:25: 79:12:64:ef:47:37:92:51:a2:c7:72:30:35:16:d3: a7:4f:66:f9:8a:20:5f:c2:4e:7b:07:47:bc:1b:d8: fe:86:45:59:3d:f5:14:da:de:d8:23:5f:ab:3d:e7: 63:17:49:dc:46:48:a6:c3:ee:06:19:fa:b4:6e:aa: 9a:35:5e:44:71:6c:14:14:84:71:f9:4e:59:9b:fc: ea:b5:17:2b:50:d5:51:9e:06:be:66:a1:b2:04:43: 96:46:83:76:f0:0b:79:f9:eb:8a:1c:89:e6:4e:04: 2a:bd:b8:72:c7:6b:f8:7e:a7:29:36:65:63:12:62: 22:0b:77:f0:69:ee:fe:a7:14:86:76:81:45:51:45: 10:16:82:7a:18:29:08:9a:cd:64:68:48:25:12:e5: 4a:2a:81:c1:37:0a:8a:b3:ca:af:63:0c:1a:fb:7a: 29:d0:ed:d1:73:1c:ab:9e:62:b1:75:6f:2d:45:fc: 54:15:79:b2:54:85:54:45:dd:8a:df:22:e3:5f:65: 49:21:88:99:d8:25:50:2b:5e:be:4f:09:3a:33:fa: e7:c5:28:61:67:a5:28:7d:4a:ce:04:31:d0:0a:14: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FD:2A:01:19:8E:3B:2C:C3:FE:D9:7E:2B:CC:BC:B3:17:88:17:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5b:bf:76:6b:ec:79:8d:df:76:c5:5f:2a:04:b9:a1:6e:65: f8:be:73:40:24:a6:8f:37:48:f3:2f:a1:80:f1:04:f1:ba:d7: 11:53:57:92:0e:54:91:f0:e5:8d:79:fd:a0:23:ba:13:98:22: 1e:74:0c:1d:f9:ba:80:e5:84:2c:00:46:12:11:b6:2c:09:89: 8d:20:fb:53:fd:ac:81:d4:32:48:60:ed:40:49:36:07:e1:e2: 53:ef:c7:a1:0a:c7:c9:57:15:1f:02:85:6a:10:a0:de:63:62: 8b:db:b8:ac:3c:7a:56:15:07:e2:ae:d5:a1:de:d0:a7:85:46: 7e:e7:51:c2:63:8b:7d:75:c4:4a:09:59:27:af:b5:3a:50:dd: f8:5a:71:e7:24:e2:1d:5a:e3:0c:2a:9c:c6:50:f2:05:9a:ca: 35:ef:85:54:00:52:5c:57:52:e3:c1:88:b6:b4:8e:af:85:cb: e1:62:6d:c3:c7:52:1b:ba:8f:7c:0b:9f:47:41:18:3d:ce:56: b5:be:49:09:91:b2:84:31:3e:a7:a0:1d:47:61:12:50:c9:f6: 41:bd:e8:2d:3c:27:de:16:b2:15:6c:a8:31:53:87:99:60:9b: 39:fc:30:55:10:70:40:46:7b:15:74:81:46:39:b6:f5:3f:47: 13:f8:d9:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAFNGxVykKSVeugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk YWI0MjA0MjMtOTRkOS00MWYyLTg0MWQtZGIxYzFlNzg3MTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nutobaNffNmHj2iWBScHc+Zk4bPlWHH/4+3 HSV5EmTvRzeSUaLHcjA1FtOnT2b5iiBfwk57B0e8G9j+hkVZPfUU2t7YI1+rPedj F0ncRkimw+4GGfq0bqqaNV5EcWwUFIRx+U5Zm/zqtRcrUNVRnga+ZqGyBEOWRoN2 8At5+euKHInmTgQqvbhyx2v4fqcpNmVjEmIiC3fwae7+pxSGdoFFUUUQFoJ6GCkI ms1kaEglEuVKKoHBNwqKs8qvYwwa+3op0O3RcxyrnmKxdW8tRfxUFXmyVIVURd2K 3yLjX2VJIYiZ2CVQK16+Twk6M/rnxShhZ6UofUrOBDHQChRsewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF79KgEZjjssw/7ZfivMvLMXiBeAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNGMwOWQ1ZGYtN2FjZC0z NGVjLWFlMTEtMDYyNzI1ZWU3YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFbv3Zr7HmN33bFXyoEuaFuZfi+c0Akpo83SPMvoYDxBPG61xFTV5IO VJHw5Y15/aAjuhOYIh50DB35uoDlhCwARhIRtiwJiY0g+1P9rIHUMkhg7UBJNgfh 4lPvx6EKx8lXFR8ChWoQoN5jYovbuKw8elYVB+Ku1aHe0KeFRn7nUcJji311xEoJ WSevtTpQ3fhaceck4h1a4wwqnMZQ8gWayjXvhVQAUlxXUuPBiLa0jq+Fy+FibcPH Uhu6j3wLn0dBGD3OVrW+SQmRsoQxPqegHUdhElDJ9kG96C08J94WshVsqDFTh5lg mzn8MFUQcEBGexV0gUY5tvU/RxP42fk= -----END CERTIFICATE-----Generated at Wed May 13 15:33:32 2026 by rpki-client