$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa File: b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa (raw, json) Hash identifier: qDw/WzwHfH7ctU4DWYcddEisKqzpmYybV0EGLhBol3g= Subject key identifier: 44:8D:31:F6:C9:A7:54:0C:3A:B2:F2:AD:4B:B3:64:74:47:82:BF:6E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A3CA4AEC90C7081ED7B40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 3360 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:3c:a4:ae:c9:0c:70:81:ed:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=b21e0d4a-f4dc-4a31-b5d7-11857ee27d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:42:c4:da:04:e5:f3:8e:aa:53:15:fd:30: 59:6d:a4:5a:c1:61:89:a3:8b:ed:aa:f7:a2:aa:30: a4:f0:1a:00:a6:9d:04:35:00:40:01:9e:dc:df:9c: 63:0f:7d:b4:c4:56:c5:44:8c:60:d7:85:6c:ec:c2: ed:81:76:7e:89:2c:42:40:55:f6:87:36:ab:e1:6f: f2:e9:32:49:ed:69:4d:2d:fd:11:6d:23:52:3c:86: a7:72:ce:09:0d:ce:ca:0d:ac:f5:15:ff:51:04:9f: cc:e9:05:25:31:11:36:bf:e1:bf:04:35:2b:5d:3e: df:01:e4:78:e8:f6:a2:de:45:ee:5b:60:60:4a:b9: 81:92:02:2c:c7:6a:67:9d:1b:ba:ed:30:89:a4:2f: f6:63:b0:9f:66:a9:02:dc:78:dc:38:57:0a:26:13: 88:46:ed:f8:bb:7c:1d:41:97:06:58:3e:80:88:d6: b3:b0:1a:a5:c3:3a:2b:9a:a4:ae:74:ff:f5:4c:ac: 95:08:f0:33:1a:51:96:9f:bb:fd:cc:5a:26:54:3a: 7a:12:20:e2:5d:23:1a:71:03:6a:52:80:e5:85:87: ec:4f:df:d8:f8:76:53:03:57:04:30:e1:19:e4:f0: e9:9a:e2:ab:92:1b:07:22:a9:09:c4:01:7a:d5:2c: 0e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8D:31:F6:C9:A7:54:0C:3A:B2:F2:AD:4B:B3:64:74:47:82:BF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d5:ba:80:8c:71:e8:b2:90:1b:fd:37:c9:50:5a:6f:1b:83: 37:4d:0a:6d:08:a8:28:eb:c1:39:03:14:73:a8:16:b2:8d:22: d6:fb:6e:66:2d:40:4b:df:2f:24:d0:9c:16:98:fe:50:38:1c: 77:f2:c5:6d:7c:ca:c5:a6:11:6a:40:17:bf:1e:34:30:c5:41: 54:65:2a:ec:b8:c6:58:e5:a1:98:cc:89:c7:36:18:07:fe:d5: 95:6c:0f:3f:05:c8:d3:8d:a0:16:8b:df:53:8b:7c:8e:d2:e4: d5:8f:5c:e7:5e:69:93:72:e0:2c:4c:59:5f:14:c0:21:0f:79: 5d:a8:c9:d7:eb:78:c2:c1:d4:75:38:98:7b:43:66:6f:88:c8: cc:9a:6f:76:ea:60:57:88:08:e0:f1:63:26:8c:1e:97:d4:a8: 5f:f8:65:cf:0e:a1:ac:b3:4e:84:63:e2:34:df:ba:e1:5a:42: 2f:c8:2b:3b:15:2f:3f:ec:05:00:db:d9:8f:8a:ca:49:8c:94: cf:80:eb:96:1f:69:72:67:2f:94:a5:41:08:13:ab:e1:ca:0e: 77:54:59:df:ad:0d:b4:fc:67:6a:ee:8e:18:2d:5e:51:ae:0f: 5b:2a:b2:ae:af:cc:99:ee:2f:ec:92:e8:27:a8:fe:66:f6:d5: 3c:a8:aa:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ajykrskMcIHte0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YjIxZTBkNGEtZjRkYy00YTMxLWI1ZDctMTE4NTdlZTI3ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZpCxNoE5fOOqlMV/TBZbaRawWGJo4vtqvei qjCk8BoApp0ENQBAAZ7c35xjD320xFbFRIxg14Vs7MLtgXZ+iSxCQFX2hzar4W/y 6TJJ7WlNLf0RbSNSPIancs4JDc7KDaz1Ff9RBJ/M6QUlMRE2v+G/BDUrXT7fAeR4 6Pai3kXuW2BgSrmBkgIsx2pnnRu67TCJpC/2Y7CfZqkC3HjcOFcKJhOIRu34u3wd QZcGWD6AiNazsBqlwzormqSudP/1TKyVCPAzGlGWn7v9zFomVDp6EiDiXSMacQNq UoDlhYfsT9/Y+HZTA1cEMOEZ5PDpmuKrkhsHIqkJxAF61SwOxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESNMfbJp1QMOrLyrUuzZHRHgr9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjVlZGNlZTAtMjZmZC0z NGIzLTg2NmQtZGY0YjJkMmQyYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATVuoCMceiykBv9N8lQWm8bgzdNCm0IqCjrwTkDFHOoFrKNItb7bmYt QEvfLyTQnBaY/lA4HHfyxW18ysWmEWpAF78eNDDFQVRlKuy4xljloZjMicc2GAf+ 1ZVsDz8FyNONoBaL31OLfI7S5NWPXOdeaZNy4CxMWV8UwCEPeV2oydfreMLB1HU4 mHtDZm+IyMyab3bqYFeICODxYyaMHpfUqF/4Zc8OoayzToRj4jTfuuFaQi/IKzsV Lz/sBQDb2Y+KykmMlM+A65YfaXJnL5SlQQgTq+HKDndUWd+tDbT8Z2rujhgtXlGu D1sqsq6vzJnuL+yS6Ceo/mb21Tyoqv8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:37:44 2026 by rpki-client