$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d3ef49cd-8608-350f-8c72-87aecbe7971d.roa File: d3ef49cd-8608-350f-8c72-87aecbe7971d.roa (raw, json) Hash identifier: V5tbtjx1cJWMhq3OMbrJEhvtYMxQz89VlRtxBd4sIKg= Subject key identifier: A5:8C:C2:5B:76:B0:66:C6:EB:9B:D7:3A:B7:7E:D7:DC:33:92:D5:CF Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DA8157BA1349B1368D57F2C80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d3ef49cd-8608-350f-8c72-87aecbe7971d.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 203 IP address blocks: 20.138.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:7b:a1:34:9b:13:68:d5:7f:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=1f6749d4-e255-4638-a9e4-8eeb691a7dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:c8:92:31:29:1d:3b:c7:e1:31:33:ad:4a: 30:16:e9:f4:87:61:b2:da:61:82:1a:85:a7:54:71: 2b:98:4b:da:61:ad:51:a6:22:a4:79:ab:85:aa:c8: 6f:ae:17:32:d5:19:fa:98:c3:91:20:63:d4:26:16: b1:b3:ff:47:b8:c5:13:ac:80:af:a5:1e:79:e3:40: 38:3c:63:e7:b8:a5:24:9e:a3:c5:76:fb:dd:95:47: 64:b6:f7:09:33:68:4d:04:ad:20:d8:7b:e4:0f:78: 7b:8f:7d:73:ce:ae:c5:1c:7e:69:17:d6:d7:19:aa: 3c:97:4c:9f:ae:1f:42:6c:98:f2:05:a2:d1:8f:23: c2:c0:c2:ab:94:a2:49:6c:1b:b4:6c:d3:b4:00:9d: 13:3b:4e:c1:ae:d9:85:62:90:37:9f:b2:33:21:c0: 93:4f:cc:66:59:15:d3:6f:d3:97:c9:0e:80:a3:da: 80:ad:ce:b0:49:9c:3e:25:0e:d1:bc:23:75:3b:9f: 41:75:21:12:ba:fa:66:b7:3c:bb:3c:43:bb:54:e0: 6b:08:f7:bd:92:f6:c1:55:a6:e9:a3:73:3a:a8:ea: f7:53:1b:39:81:30:62:0d:67:cb:46:1f:35:7a:05: 97:72:fa:3b:31:96:dc:48:ea:d2:a1:e7:d8:bf:0c: e0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8C:C2:5B:76:B0:66:C6:EB:9B:D7:3A:B7:7E:D7:DC:33:92:D5:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d3ef49cd-8608-350f-8c72-87aecbe7971d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:69:89:90:6d:6f:eb:ee:ea:aa:5b:8a:a8:e0:c7:3f:f3:66: c9:1e:84:00:e7:3b:5e:d2:24:46:93:41:ce:77:3f:cc:24:41: 53:48:1c:dc:43:02:2e:5c:ff:30:1e:14:f5:c2:c6:f1:68:e0: 78:32:04:bf:fe:ee:60:46:0b:76:3f:34:c8:b5:c4:9d:1e:09: 1a:af:26:80:76:ea:b5:41:0b:4c:40:fd:13:c1:d5:b0:fa:9a: d5:17:22:52:c8:3d:82:ef:c7:f1:8b:64:d3:52:35:b2:c9:8a: e2:49:94:74:4d:72:86:a2:49:8b:12:1f:9e:48:63:2a:88:d6: 1f:1c:63:08:35:89:5b:5d:bb:e0:8d:5d:96:c0:17:39:15:84: d9:1d:fe:64:ad:c4:ba:68:18:e7:aa:cd:00:5d:f5:30:e2:07: 2d:b2:04:23:c3:7c:2e:ef:e6:d8:e4:41:d4:27:3c:99:1f:84: 9e:d6:94:94:95:9c:b4:0c:d2:a3:c2:1d:f8:9c:52:75:4b:55: 27:a2:79:73:17:9f:19:b4:0a:7e:b5:f2:cd:51:18:65:0f:5c: 94:dc:f8:4c:cb:4a:45:70:2a:45:1b:6a:f4:15:95:96:8a:f4: 73:42:59:3a:e9:2b:20:ad:af:1a:2a:ae:43:6d:b7:28:0c:02: b0:08:11:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXuhNJsTaNV/LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MWY2NzQ5ZDQtZTI1NS00NjM4LWE5ZTQtOGVlYjY5MWE3ZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzPIkjEpHTvH4TEzrUowFun0h2Gy2mGCGoWn VHErmEvaYa1RpiKkeauFqshvrhcy1Rn6mMORIGPUJhaxs/9HuMUTrICvpR5540A4 PGPnuKUknqPFdvvdlUdktvcJM2hNBK0g2HvkD3h7j31zzq7FHH5pF9bXGao8l0yf rh9CbJjyBaLRjyPCwMKrlKJJbBu0bNO0AJ0TO07BrtmFYpA3n7IzIcCTT8xmWRXT b9OXyQ6Ao9qArc6wSZw+JQ7RvCN1O59BdSESuvpmtzy7PEO7VOBrCPe9kvbBVabp o3M6qOr3Uxs5gTBiDWfLRh81egWXcvo7MZbcSOrSoefYvwzg0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWMwlt2sGbG65vXOrd+19wzktXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDNlZjQ5Y2QtODYwOC0z NTBmLThjNzItODdhZWNiZTc5NzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIr2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZpiZBtb+vu6qpbiqjgxz/zZskehADnO17SJEaTQc53P8wkQVNIHNxD Ai5c/zAeFPXCxvFo4HgyBL/+7mBGC3Y/NMi1xJ0eCRqvJoB26rVBC0xA/RPB1bD6 mtUXIlLIPYLvx/GLZNNSNbLJiuJJlHRNcoaiSYsSH55IYyqI1h8cYwg1iVtdu+CN XZbAFzkVhNkd/mStxLpoGOeqzQBd9TDiBy2yBCPDfC7v5tjkQdQnPJkfhJ7WlJSV nLQM0qPCHficUnVLVSeieXMXnxm0Cn618s1RGGUPXJTc+EzLSkVwKkUbavQVlZaK 9HNCWTrpKyCtrxoqrkNttygMArAIEVc= -----END CERTIFICATE-----Generated at Wed May 13 16:10:46 2026 by rpki-client