$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa File: d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa (raw, json) Hash identifier: TJk9zcZM1YpLqsuOxWBF53tuMMUlmqJLDCI64ve6K40= Subject key identifier: 69:65:DD:FE:AF:00:EE:AB:42:83:72:A0:03:6E:66:37:76:74:5B:C2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A644734832B9133057B80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 3360 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:64:47:34:83:2b:91:33:05:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=9b66a2a4-721a-4ee4-a96e-26cfa8f576a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d0:81:b6:d3:16:a1:e1:8f:d0:97:a0:38:e8: 93:bc:c5:2c:c6:eb:98:e6:2f:55:0e:5f:f3:21:aa: e2:04:ef:75:b0:9d:4e:2e:64:08:e4:48:78:89:6c: c7:82:5f:18:2b:01:25:30:3f:6f:44:89:34:e4:d1: e5:93:3f:42:ab:97:3b:34:29:01:40:61:28:7c:46: 5c:7d:c1:aa:e4:ea:dc:cc:a4:d6:7d:e8:4d:2a:a4: 94:2d:6f:1a:61:19:c1:19:3c:6d:47:84:4f:63:66: f1:a6:d7:f5:83:31:70:f6:bd:4b:73:df:6b:d5:d4: 7f:37:a7:bb:d0:3e:96:0c:1d:2c:cc:fc:01:f7:fd: 04:22:55:68:4e:54:5f:ff:5e:6f:47:a1:f5:3f:ae: c5:18:40:94:a0:6f:88:63:58:53:1c:a3:f4:da:1d: c5:c1:6d:e2:42:03:6b:b0:29:a2:39:e3:d3:1c:c4: 20:20:eb:0c:df:24:18:3d:c9:aa:69:14:7a:99:9d: 67:88:05:fb:4f:a3:75:4a:1b:42:4b:41:63:44:54: c1:29:3d:23:05:94:be:2b:4b:18:db:a4:c9:ad:0c: 98:83:c0:60:46:2c:0c:3b:92:f3:01:d6:f5:3b:b2: 41:61:b2:0f:1f:fe:c4:c8:db:b7:98:7a:1b:69:19: 76:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:65:DD:FE:AF:00:EE:AB:42:83:72:A0:03:6E:66:37:76:74:5B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:23:75:59:67:a2:a1:f7:49:5e:51:61:92:51:c9:14:60:d4: f8:b4:e9:80:40:dd:d8:84:cb:95:a4:58:7d:ca:0a:2a:9a:cc: 7a:c2:f5:72:2f:ee:74:7c:2e:50:b6:54:a9:81:3c:6b:7b:fd: 5a:22:d7:b0:67:fa:07:56:d7:63:32:84:71:5f:d4:99:5d:a0: 8f:ed:8a:63:05:23:00:df:cd:f1:06:0d:dd:40:53:1f:05:a7: b8:85:20:32:e0:1c:ec:fd:7d:df:b6:f4:6b:ca:fe:6b:f5:32: c8:b4:45:86:b0:c5:7d:91:4d:d6:4e:21:50:7b:38:d0:7a:3b: fd:be:38:d4:dc:58:18:90:f5:90:c2:bd:d5:9b:b8:7b:bf:43: 2e:2d:08:7a:e8:70:71:56:63:a5:aa:65:c7:0d:fb:47:33:5e: d4:8d:f4:20:5c:2d:c7:0c:08:86:04:9f:a9:8e:25:e4:2a:a2: c8:a9:63:1e:75:f5:d4:1f:10:84:82:3d:7f:37:fe:af:1a:a4: 9d:aa:93:48:1e:8d:cf:16:8b:45:cd:a0:e5:91:91:cf:1a:22: 2f:cd:ae:c8:b5:e8:58:79:18:98:4e:77:cd:6d:75:6a:ea:00: 2b:34:42:5c:e2:1f:d0:a1:bc:4b:ac:9d:1e:8f:be:6e:9d:31: 82:cb:8e:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04amRHNIMrkTMFe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk OWI2NmEyYTQtNzIxYS00ZWU0LWE5NmUtMjZjZmE4ZjU3NmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltCBttMWoeGP0JegOOiTvMUsxuuY5i9VDl/z IariBO91sJ1OLmQI5Eh4iWzHgl8YKwElMD9vRIk05NHlkz9Cq5c7NCkBQGEofEZc fcGq5OrczKTWfehNKqSULW8aYRnBGTxtR4RPY2bxptf1gzFw9r1Lc99r1dR/N6e7 0D6WDB0szPwB9/0EIlVoTlRf/15vR6H1P67FGECUoG+IY1hTHKP02h3FwW3iQgNr sCmiOePTHMQgIOsM3yQYPcmqaRR6mZ1niAX7T6N1ShtCS0FjRFTBKT0jBZS+K0sY 26TJrQyYg8BgRiwMO5LzAdb1O7JBYbIPH/7EyNu3mHobaRl29QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGll3f6vAO6rQoNyoANuZjd2dFvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDhhODg5NGQtZDAzNC0z OWM3LWFhNzEtY2UzOWZiMGQ4YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYjdVlnoqH3SV5RYZJRyRRg1Pi06YBA3diEy5WkWH3KCiqazHrC9XIv 7nR8LlC2VKmBPGt7/Voi17Bn+gdW12MyhHFf1JldoI/timMFIwDfzfEGDd1AUx8F p7iFIDLgHOz9fd+29GvK/mv1Msi0RYawxX2RTdZOIVB7ONB6O/2+ONTcWBiQ9ZDC vdWbuHu/Qy4tCHrocHFWY6WqZccN+0czXtSN9CBcLccMCIYEn6mOJeQqosipYx51 9dQfEISCPX83/q8apJ2qk0gejc8Wi0XNoOWRkc8aIi/Nrsi16Fh5GJhOd81tdWrq ACs0QlziH9ChvEusnR6Pvm6dMYLLju0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:56:10 2026 by rpki-client