$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7fe65c36-0855-383c-bd31-06995badfc55.roa File: 7fe65c36-0855-383c-bd31-06995badfc55.roa (raw, json) Hash identifier: KK4xUtefOKAmRDXBA+rLIO4yH+nWDj9pPpb8TiQNoMc= Subject key identifier: DF:30:0F:37:A4:54:BA:BC:D3:E4:3D:C3:50:57:29:32:52:24:38:CF Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D143D4A7CAB08BD65FC200DD8 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7fe65c36-0855-383c-bd31-06995badfc55.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 202 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4a:7c:ab:08:bd:65:fc:20:0d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=26d557d0-1c1f-4b36-a7bc-29b1dacb009a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:e2:ca:89:e9:69:fb:d6:b8:8f:b9:2b:9c: f9:96:62:17:02:59:33:9a:c0:60:2a:34:0e:54:0e: ac:42:47:ba:b1:e9:21:30:e5:4b:3f:1a:53:be:29: 42:c2:1e:df:a3:c7:b4:23:29:b1:c8:81:6a:34:3a: 42:b5:6e:61:5d:8c:86:86:f6:47:e3:80:75:95:d3: 1c:34:56:ed:54:ec:17:c6:cf:f6:76:f0:9e:be:73: 47:81:f0:82:47:07:2f:8f:ae:e3:c5:dc:8f:57:8b: 9e:77:ee:fd:67:f6:f1:35:6b:2c:44:89:b0:24:cd: 35:fd:b0:93:39:31:ef:43:db:d7:35:f8:26:e3:51: 6f:4c:7b:f0:7c:0e:9e:27:a3:78:c8:5b:fe:dd:37: 35:b0:92:0c:3c:0b:e3:fa:eb:a2:17:ed:c3:07:50: fa:1b:91:90:ac:85:41:44:80:c0:e2:36:32:f9:e1: a4:17:fe:ef:1e:ce:75:00:4e:a3:c4:4e:6b:8b:4b: 04:86:b2:43:7e:ff:b7:3e:22:12:9f:ae:58:14:0d: aa:f5:05:09:06:68:08:e3:e8:9e:4d:c2:00:a9:39: ca:de:54:fe:68:42:84:ca:17:32:e8:6b:b6:e6:0d: 9a:fd:e7:76:70:8e:ea:28:31:ed:cf:ce:47:53:1e: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:30:0F:37:A4:54:BA:BC:D3:E4:3D:C3:50:57:29:32:52:24:38:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7fe65c36-0855-383c-bd31-06995badfc55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:44:bb:2c:19:fe:d8:95:39:23:43:82:38:42:16:9a:ab:3b: 01:e5:47:21:1f:f1:3f:65:f6:68:e3:60:ad:6a:dc:92:a4:b7: 09:90:62:bc:d2:93:2c:02:a5:71:19:bb:da:60:60:90:2c:bd: 40:34:2d:2e:cb:27:e5:1a:61:2d:ab:da:40:7f:b2:8c:9d:da: 73:a7:f5:48:71:72:2b:fc:f3:c6:bb:fd:8f:00:cc:02:dd:85: 8f:f8:6f:db:38:03:65:0f:4c:34:5f:f0:ca:4b:a6:45:f2:bc: b2:22:23:66:dc:61:a6:65:c9:6c:81:74:4a:0a:bb:36:c4:02: b8:4c:11:f1:30:ee:be:d2:31:1a:80:33:23:13:13:1e:ef:c1: 80:aa:cd:d7:2f:fe:5b:f0:33:5c:54:c6:73:75:78:44:f0:cc: 41:9c:d1:1d:82:52:03:ae:70:4e:be:2a:23:92:c6:e9:56:11: 96:4b:3a:8a:f4:5f:2e:cc:1e:b3:48:8c:34:c0:c7:87:96:19: 85:2d:f2:3a:b3:69:07:06:f8:b3:d7:ea:c8:52:34:ea:a4:9c: 6e:ba:fa:63:8b:c0:ec:2b:cb:43:22:d8:d5:45:c0:57:a4:77: 87:f6:03:9b:bc:cb:16:82:93:ea:76:91:ff:18:0e:4a:7b:63: 47:de:3d:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUp8qwi9ZfwgDdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MjZkNTU3ZDAtMWMxZi00YjM2LWE3YmMtMjliMWRhY2IwMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquTiyonpafvWuI+5K5z5lmIXAlkzmsBgKjQO VA6sQke6sekhMOVLPxpTvilCwh7fo8e0IymxyIFqNDpCtW5hXYyGhvZH44B1ldMc NFbtVOwXxs/2dvCevnNHgfCCRwcvj67jxdyPV4ued+79Z/bxNWssRImwJM01/bCT OTHvQ9vXNfgm41FvTHvwfA6eJ6N4yFv+3Tc1sJIMPAvj+uuiF+3DB1D6G5GQrIVB RIDA4jYy+eGkF/7vHs51AE6jxE5ri0sEhrJDfv+3PiISn65YFA2q9QUJBmgI4+ie TcIAqTnK3lT+aEKEyhcy6Gu25g2a/ed2cI7qKDHtz85HUx6hZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8wDzekVLq80+Q9w1BXKTJSJDjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2ZlNjVjMzYtMDg1NS0z ODNjLWJkMzEtMDY5OTViYWRmYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlEuywZ/tiVOSNDgjhCFpqrOwHlRyEf8T9l9mjjYK1q3JKktwmQYrzS kywCpXEZu9pgYJAsvUA0LS7LJ+UaYS2r2kB/soyd2nOn9Uhxciv888a7/Y8AzALd hY/4b9s4A2UPTDRf8MpLpkXyvLIiI2bcYaZlyWyBdEoKuzbEArhMEfEw7r7SMRqA MyMTEx7vwYCqzdcv/lvwM1xUxnN1eETwzEGc0R2CUgOucE6+KiOSxulWEZZLOor0 Xy7MHrNIjDTAx4eWGYUt8jqzaQcG+LPX6shSNOqknG66+mOLwOwry0Mi2NVFwFek d4f2A5u8yxaCk+p2kf8YDkp7Y0fePXM= -----END CERTIFICATE-----Generated at Thu Mar 26 19:56:05 2026 by rpki-client