$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa File: c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa (raw, json) Hash identifier: Qn5NfzgRW6z/4NR9w8ZSfgJAoO3ncJ4vf+NWc7CQOvg= Subject key identifier: 1C:65:81:22:4D:ED:A2:9B:F6:17:33:83:F0:A1:EE:10:14:7B:D2:27 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A3E14BEE8932EDB15BCCC Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 202 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:3e:14:be:e8:93:2e:db:15:bc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=1bcef66d-6fac-419a-bf61-9d54a3e3040e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:28:07:98:a0:e9:2c:0b:20:40:b8:fa:dd:52: 81:eb:16:54:92:2d:bc:2c:2a:25:73:e0:70:09:9d: 7e:9b:6a:87:e8:17:ea:6d:d5:6c:fd:85:72:03:80: 8e:38:32:7f:53:c5:6b:e3:b6:c9:51:36:89:1f:51: 69:b1:59:a7:b6:f5:be:ac:78:da:02:b4:82:5c:4a: f7:f2:a7:5a:b5:19:38:2a:d1:bb:5f:af:46:0b:cf: aa:78:4a:47:b5:6d:bc:82:ec:6f:2c:13:c0:72:27: 09:91:60:0a:00:bc:28:f7:9e:87:a1:61:ac:57:f4: c8:5f:58:0d:b7:e6:49:a1:f2:1d:fe:cf:56:e0:7d: cb:f0:24:88:70:8c:af:ea:25:44:91:96:e5:21:01: 77:e8:ed:17:da:c4:78:1d:9c:29:6f:65:43:18:73: 03:10:13:30:d7:42:54:92:a1:2b:b3:05:33:ea:2e: 0d:20:12:39:ed:5f:4a:97:c8:08:90:dd:67:b2:d3: 65:7d:b2:a3:fc:2d:c8:48:62:26:dc:74:b1:42:4d: c8:10:74:ee:bd:80:e5:1b:59:e0:7f:dc:c0:a9:1d: e0:52:27:6d:f2:a3:32:cb:e1:70:b5:f5:b9:06:38: 30:82:42:2f:a6:1b:f8:67:38:04:b1:d4:cc:89:c1: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:65:81:22:4D:ED:A2:9B:F6:17:33:83:F0:A1:EE:10:14:7B:D2:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d9:91:07:48:6f:b1:ae:ce:5f:d8:91:26:06:f0:09:d8:ff: ef:c1:42:5c:5f:2d:51:90:ff:13:e0:64:1a:8c:13:c7:9d:ed: 96:b7:d1:3c:55:75:4e:a2:0c:11:8c:df:f1:ca:de:1c:92:77: 52:79:20:3d:c8:32:3b:f5:dd:dc:bb:8f:c6:9a:07:c0:f4:cf: 53:85:a7:79:63:6b:e1:aa:b7:f8:da:72:7a:d0:1a:a5:6e:6f: 02:7e:b8:da:fa:c6:f0:c9:da:cb:a6:44:4d:f8:64:38:98:d0: b8:e4:04:5c:16:d1:36:53:8d:7c:f9:0f:43:1d:86:61:24:45: 05:6b:8a:65:9c:f5:85:c7:3e:c6:3a:1a:5a:aa:22:ce:7f:af: 9b:b9:44:bf:0b:ba:90:1b:b6:3b:41:38:5f:34:d1:18:aa:cd: 19:6d:6f:d7:a9:ed:78:55:b9:c2:5b:0a:00:b8:68:93:15:60: f9:cb:eb:f3:e6:93:e6:72:66:e1:89:63:8b:60:19:26:1d:4e: 04:28:d7:ba:58:b3:7e:00:eb:6f:1b:1f:10:5e:6f:54:96:3e: 57:28:f4:c1:47:2d:32:27:d5:38:f8:45:3e:36:4e:2e:fe:03: 61:bf:a1:bf:fd:7d:88:23:39:85:8f:38:6c:b2:8b:fb:ee:6a: e7:f1:cf:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04aj4UvuiTLtsVvMwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MWJjZWY2NmQtNmZhYy00MTlhLWJmNjEtOWQ1NGEzZTMwNDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSgHmKDpLAsgQLj63VKB6xZUki28LColc+Bw CZ1+m2qH6BfqbdVs/YVyA4COODJ/U8Vr47bJUTaJH1FpsVmntvW+rHjaArSCXEr3 8qdatRk4KtG7X69GC8+qeEpHtW28guxvLBPAcicJkWAKALwo956HoWGsV/TIX1gN t+ZJofId/s9W4H3L8CSIcIyv6iVEkZblIQF36O0X2sR4HZwpb2VDGHMDEBMw10JU kqErswUz6i4NIBI57V9Kl8gIkN1nstNlfbKj/C3ISGIm3HSxQk3IEHTuvYDlG1ng f9zAqR3gUidt8qMyy+FwtfW5BjgwgkIvphv4ZzgEsdTMicHjIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxlgSJN7aKb9hczg/Ch7hAUe9InMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzQ4Y2M3MzAtOWE4Yi0z Mzc2LWFiNTctOWY0YWFmYzc5MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7ZkQdIb7Guzl/YkSYG8AnY/+/BQlxfLVGQ/xPgZBqME8ed7Za30TxV dU6iDBGM3/HK3hySd1J5ID3IMjv13dy7j8aaB8D0z1OFp3lja+Gqt/jacnrQGqVu bwJ+uNr6xvDJ2sumRE34ZDiY0LjkBFwW0TZTjXz5D0MdhmEkRQVrimWc9YXHPsY6 GlqqIs5/r5u5RL8LupAbtjtBOF800RiqzRltb9ep7XhVucJbCgC4aJMVYPnL6/Pm k+ZyZuGJY4tgGSYdTgQo17pYs34A628bHxBeb1SWPlco9MFHLTIn1Tj4RT42Ti7+ A2G/ob/9fYgjOYWPOGyyi/vuaufxz24= -----END CERTIFICATE-----Generated at Thu Mar 26 19:59:40 2026 by rpki-client