$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa File: f68ba57f-5e4d-33d2-960d-57b417d05011.roa (raw, json) Hash identifier: nJun0pe/KFYyfYgMTR+VyfiVAOYmm7tofoTMv3yFsdE= Subject key identifier: DB:82:EC:54:90:A2:D5:CB:5C:78:6D:70:44:54:B9:7F:A2:27:A7:40 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A33585529B39E24662E80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 3356 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:33:58:55:29:b3:9e:24:66:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=7af43087-976f-4fad-bf60-b8c1a3767837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:6a:77:6b:c5:a3:d3:66:3f:81:6b:c6:3d: 4c:c4:6a:25:50:75:b8:db:a8:20:75:57:19:29:27: 5d:e5:b2:4f:20:05:9a:45:a0:57:f5:8c:8d:05:6c: db:ab:83:5f:6d:20:50:62:f8:5a:9d:7b:6b:78:f1: b1:df:76:1c:97:78:cc:96:3d:82:af:b6:98:e2:51: ad:44:bd:af:f2:c3:b6:5b:67:fe:b2:04:40:50:61: 96:5a:3a:54:16:29:a3:e2:c4:9c:8e:da:39:73:11: c9:b2:4c:3d:6e:9a:6a:8c:3b:b8:a9:cd:4e:79:36: ca:3f:88:a5:70:7c:5b:3d:13:80:50:3f:17:4b:75: 4f:f8:f6:aa:80:31:16:58:1f:42:3a:cc:9f:a2:05: b3:71:cf:88:5c:0e:f1:dc:c0:2c:ca:1f:b3:d0:7e: 68:c1:ce:97:d1:0b:6f:1b:83:43:00:99:db:63:40: f1:51:ab:21:7d:fe:ab:d6:f3:19:0e:2b:ce:33:71: 1f:12:5b:ae:03:de:96:d6:ac:8f:db:a0:ff:5f:c8: 0f:b7:af:48:a6:0c:04:01:0c:83:4d:85:e6:4e:e3: 36:e6:c3:32:02:22:f3:9d:97:7b:76:17:e5:89:42: 1a:d7:ad:ce:1d:c8:5c:b5:2a:36:9c:07:d3:3e:24: 89:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:82:EC:54:90:A2:D5:CB:5C:78:6D:70:44:54:B9:7F:A2:27:A7:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:bf:e6:ab:1b:7c:89:a6:45:ec:fb:58:ae:23:a1:68:11:ff: d4:ee:98:cf:0b:4f:59:52:26:41:fd:da:74:98:8d:22:78:c7: d6:64:e4:1e:96:35:cf:33:5c:80:f7:57:29:e4:2f:6b:5e:ea: 62:93:dc:30:ed:0e:52:78:1c:23:9d:7d:51:59:94:eb:da:65: 5e:70:66:53:68:af:6c:e7:09:ed:07:b7:7e:ec:28:11:eb:a2: 6d:87:5a:c7:73:1d:25:b1:76:1e:b3:be:1a:e8:1b:08:2f:26: 75:06:6c:49:5a:a9:ab:cf:12:93:3a:fc:e3:de:e7:3f:6c:e7: e8:b7:a6:ff:b8:97:02:b4:e2:41:21:66:f3:19:29:5d:14:4b: 4f:78:ee:7c:38:f2:76:55:a4:c0:ea:3a:59:23:92:4a:f0:ee: fa:77:45:11:82:f8:6d:a4:0c:c7:b1:c1:b8:33:9a:31:f7:23: db:61:ae:6c:7f:52:f0:5c:62:96:91:d6:4a:e1:f7:dd:12:1a: 92:fa:6f:be:90:ed:52:8a:f7:00:54:f9:43:00:11:af:53:4d: ea:77:b8:77:20:d9:87:61:54:8d:28:b3:dd:16:e4:f9:ed:d0: 25:b4:1d:9f:03:35:c9:4a:19:24:b3:bf:15:c5:d8:b8:4b:08: 7f:53:d7:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ajNYVSmzniRmLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk N2FmNDMwODctOTc2Zi00ZmFkLWJmNjAtYjhjMWEzNzY3ODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApldqd2vFo9NmP4Frxj1MxGolUHW426ggdVcZ KSdd5bJPIAWaRaBX9YyNBWzbq4NfbSBQYvhanXtrePGx33Ycl3jMlj2Cr7aY4lGt RL2v8sO2W2f+sgRAUGGWWjpUFimj4sScjto5cxHJskw9bppqjDu4qc1OeTbKP4il cHxbPROAUD8XS3VP+PaqgDEWWB9COsyfogWzcc+IXA7x3MAsyh+z0H5owc6X0Qtv G4NDAJnbY0DxUashff6r1vMZDivOM3EfEluuA96W1qyP26D/X8gPt69IpgwEAQyD TYXmTuM25sMyAiLznZd7dhfliUIa163OHchctSo2nAfTPiSJZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuC7FSQotXLXHhtcERUuX+iJ6dAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjY4YmE1N2YtNWU0ZC0z M2QyLTk2MGQtNTdiNDE3ZDA1MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG/5qsbfImmRez7WK4joWgR/9TumM8LT1lSJkH92nSYjSJ4x9Zk5B6W Nc8zXID3VynkL2te6mKT3DDtDlJ4HCOdfVFZlOvaZV5wZlNor2znCe0Ht37sKBHr om2HWsdzHSWxdh6zvhroGwgvJnUGbElaqavPEpM6/OPe5z9s5+i3pv+4lwK04kEh ZvMZKV0US0947nw48nZVpMDqOlkjkkrw7vp3RRGC+G2kDMexwbgzmjH3I9thrmx/ UvBcYpaR1krh990SGpL6b76Q7VKK9wBU+UMAEa9TTep3uHcg2YdhVI0os90W5Pnt 0CW0HZ8DNclKGSSzvxXF2LhLCH9T1yE= -----END CERTIFICATE-----Generated at Thu Mar 26 20:46:28 2026 by rpki-client