$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa File: bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa (raw, json) Hash identifier: dfGdrmBtQ/X2620PqBBZxe/B1mgXPW5sKjcov5SOuH8= Subject key identifier: 00:E5:C4:6F:C3:17:C6:40:2A:C0:E7:37:93:97:6A:11:6E:E8:71:0E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A2AC8A0F7E2B1E7817580 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 203 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:2a:c8:a0:f7:e2:b1:e7:81:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=09892a89-6fe9-430c-a7e7-75113f6415b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:73:a4:99:9b:cf:e6:15:21:a7:ba:53:51:4e: 7a:90:54:a8:33:1b:a4:96:e1:40:fc:fb:4f:b5:e4: 4f:17:01:3c:eb:68:5d:04:38:1e:1c:2d:9b:76:35: a8:58:2a:8c:81:9e:39:ba:bf:3d:54:9e:59:eb:d7: 18:65:19:1f:8d:0e:25:6c:b5:28:5a:ef:9e:7a:47: 94:b9:b6:0b:ae:10:fc:17:ef:83:b7:af:5f:7c:dd: 8c:56:d9:ff:55:4f:81:f5:c6:9e:f2:6d:47:af:ab: f5:38:91:03:80:c0:5c:f8:9c:d3:05:6a:32:52:7f: 76:41:4d:5f:f9:55:38:3f:20:c3:80:76:46:35:e9: 1b:b0:ff:0a:18:95:fb:ec:0d:2f:12:3a:47:80:d7: f3:3a:e4:f8:9b:d3:b5:55:f8:b5:6c:82:8c:0c:f4: 43:52:2f:fc:ee:6f:27:22:94:50:15:78:09:26:d8: 1b:df:22:b4:d2:a9:84:21:10:90:e2:a1:50:2f:26: 9e:ee:3f:a8:01:95:8d:a5:88:41:09:19:d7:ab:9a: 6e:98:33:f2:9a:fc:92:af:f0:fb:f9:8a:a0:f4:c4: 6e:52:9a:e6:ee:8c:0a:d9:5b:da:1a:2b:47:25:97: 19:39:92:49:a7:f5:a7:68:23:fe:97:75:16:91:20: 84:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E5:C4:6F:C3:17:C6:40:2A:C0:E7:37:93:97:6A:11:6E:E8:71:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:11:96:12:17:f4:b2:30:17:b7:fa:b8:c9:b4:bc:85:52:98: 58:ac:95:60:08:3a:32:bd:3b:38:dc:7a:7f:46:f4:67:6b:eb: c7:43:80:23:c2:eb:7a:eb:b5:4e:b4:81:9b:73:93:75:a6:97: 68:72:e9:dd:7e:c7:af:39:6c:fd:0b:3f:04:19:76:9f:4a:8a: 77:a3:58:3f:08:6f:e9:12:1f:47:3b:52:ac:39:eb:50:a9:55: 70:44:0c:7e:cf:e3:3c:14:eb:ec:27:07:f8:d5:e9:4a:a3:4a: 99:2f:37:27:29:5e:ba:f1:07:ee:5a:22:93:e4:01:37:cd:63: c7:81:dd:26:60:cb:e1:e4:63:3d:e1:f4:e1:c8:18:8c:6c:f9: 80:18:fd:2e:66:ae:dd:2f:88:9b:a4:8b:41:5e:63:6f:11:37: b3:cf:65:53:75:e7:cd:77:75:ce:1e:9f:6f:60:0e:1f:4c:0e: c9:46:13:8c:98:33:01:d4:4b:c5:a9:09:dd:97:01:56:63:95: 2d:39:31:b2:48:ae:fc:33:82:3d:d4:6f:ef:d0:06:86:b9:cc: af:48:5a:1f:13:e7:0b:d2:75:8d:74:9c:41:6d:f8:50:5d:4a: 5a:9a:c8:ab:ff:5b:d0:41:e4:ff:06:86:b9:ae:7f:97:3f:17: ed:6f:02:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04airIoPfiseeBdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MDk4OTJhODktNmZlOS00MzBjLWE3ZTctNzUxMTNmNjQxNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHOkmZvP5hUhp7pTUU56kFSoMxukluFA/PtP teRPFwE862hdBDgeHC2bdjWoWCqMgZ45ur89VJ5Z69cYZRkfjQ4lbLUoWu+eekeU ubYLrhD8F++Dt69ffN2MVtn/VU+B9cae8m1Hr6v1OJEDgMBc+JzTBWoyUn92QU1f +VU4PyDDgHZGNekbsP8KGJX77A0vEjpHgNfzOuT4m9O1Vfi1bIKMDPRDUi/87m8n IpRQFXgJJtgb3yK00qmEIRCQ4qFQLyae7j+oAZWNpYhBCRnXq5pumDPymvySr/D7 +Yqg9MRuUprm7owK2VvaGitHJZcZOZJJp/WnaCP+l3UWkSCEnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADlxG/DF8ZAKsDnN5OXahFu6HEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmNkMDhmN2QtODAwNC0z MjdiLTkyZDMtODdiYzdjZmI0NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsRlhIX9LIwF7f6uMm0vIVSmFislWAIOjK9Ozjcen9G9Gdr68dDgCPC 63rrtU60gZtzk3Wml2hy6d1+x685bP0LPwQZdp9KinejWD8Ib+kSH0c7Uqw561Cp VXBEDH7P4zwU6+wnB/jV6UqjSpkvNycpXrrxB+5aIpPkATfNY8eB3SZgy+HkYz3h 9OHIGIxs+YAY/S5mrt0viJuki0FeY28RN7PPZVN15813dc4en29gDh9MDslGE4yY MwHUS8WpCd2XAVZjlS05MbJIrvwzgj3Ub+/QBoa5zK9IWh8T5wvSdY10nEFt+FBd SlqayKv/W9BB5P8Ghrmuf5c/F+1vAps= -----END CERTIFICATE-----Generated at Thu Mar 26 21:58:48 2026 by rpki-client