$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa File: 2358e127-b9cd-321b-a2ed-09882df26c20.roa (raw, json) Hash identifier: Dqw/SGBw5yjo/unmvJ+xEVd7D02dM8r7FVAQ4y1sHiQ= Subject key identifier: 17:E9:5A:8B:45:9A:DD:FF:83:3F:59:6E:10:8B:E4:FF:F0:2F:1F:E7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DD625B888D2C60FCD4916F700 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 202 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:b8:88:d2:c6:0f:cd:49:16:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=624a3f16-0ed5-4e2b-82cd-91ff7711ed9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:78:0a:63:b7:9c:df:77:d3:f5:bd:bd:6b: 02:77:e9:3c:1b:4c:de:dd:74:f3:56:f8:c1:1f:29: cc:ee:29:09:8a:9f:b0:91:a2:7e:d4:5c:b2:bf:5a: 7b:ab:18:60:bd:41:7a:3d:6c:dc:0e:23:1b:8f:dd: ef:13:93:fa:89:ed:d2:6a:53:ae:68:63:10:2e:d2: 5c:e3:0a:ae:15:e9:cf:18:07:b6:7a:bf:23:b4:f8: 2d:6e:7f:03:1f:16:81:5d:21:10:19:27:58:7b:23: 6e:a6:99:b4:c4:41:d6:af:ee:de:ff:7b:fc:90:9b: 41:cd:9c:ca:23:aa:6c:08:8f:a5:38:67:95:ac:41: 5d:14:13:eb:c6:5b:f2:a0:45:0a:8c:79:f2:f0:0d: e8:9c:5d:df:d6:0f:82:6d:dc:a8:53:8d:6b:ff:27: c4:7f:ad:ea:2e:9e:4d:14:16:4c:25:fe:67:0c:18: d4:ac:7d:33:1f:7b:31:5f:cb:2c:fc:9c:f3:37:17: d3:08:07:a6:1d:8d:db:1c:f5:e8:1d:eb:c3:88:57: f4:1e:95:9c:ce:d0:fd:0c:85:90:b6:52:02:01:e2: 22:74:37:23:c6:c3:b0:a1:6d:db:26:a9:af:98:26: e7:ac:b1:dd:71:c9:9b:81:84:aa:2e:e8:cf:03:6f: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E9:5A:8B:45:9A:DD:FF:83:3F:59:6E:10:8B:E4:FF:F0:2F:1F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c0:c8:ba:eb:6d:0b:fd:32:7d:a5:e7:b0:88:7a:6f:98:bc: 5a:b2:63:62:a7:73:50:42:12:8f:16:20:0b:cc:4f:8b:1e:6c: e9:83:e2:12:f9:82:da:f6:01:6e:64:a8:88:89:17:1f:b7:c4: 9e:0f:7f:b9:7c:41:d1:5f:6b:0a:e2:c1:28:f6:83:24:66:c6: 7a:21:86:cf:34:c1:db:ea:a9:b2:43:17:7a:d2:b5:ec:bc:35: 7b:ae:5b:79:70:ab:c3:a4:8b:5d:e0:2b:2e:a5:fc:c5:5f:87: 33:c9:6e:9b:fd:8f:5d:24:cb:d6:94:d9:d8:cb:51:18:3c:12: a4:56:be:00:98:49:9b:a9:cd:47:69:f5:13:0c:56:95:a9:cd: 82:39:0d:a6:9b:89:7d:98:85:45:6b:2b:69:27:40:2f:e7:73: 10:5f:27:c5:5c:70:59:80:15:89:a8:52:72:0f:5c:dc:bf:18: 23:11:4a:fb:7a:2d:a6:2a:c3:17:f0:47:ea:15:5e:8c:e1:86: d4:84:ae:4f:c6:a7:e7:48:f9:23:ed:aa:2f:5e:28:a5:4b:d8: 64:44:c4:0a:7b:b7:0f:d7:68:32:97:a0:23:18:ce:ec:ad:d6: 65:5c:0c:7a:ca:3d:e8:72:8e:87:12:62:58:4b:be:47:08:39: d4:ea:59:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbiI0sYPzUkW9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk NjI0YTNmMTYtMGVkNS00ZTJiLTgyY2QtOTFmZjc3MTFlZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBd4CmO3nN930/W9vWsCd+k8G0ze3XTzVvjB HynM7ikJip+wkaJ+1Fyyv1p7qxhgvUF6PWzcDiMbj93vE5P6ie3SalOuaGMQLtJc 4wquFenPGAe2er8jtPgtbn8DHxaBXSEQGSdYeyNuppm0xEHWr+7e/3v8kJtBzZzK I6psCI+lOGeVrEFdFBPrxlvyoEUKjHny8A3onF3f1g+CbdyoU41r/yfEf63qLp5N FBZMJf5nDBjUrH0zH3sxX8ss/JzzNxfTCAemHY3bHPXoHevDiFf0HpWcztD9DIWQ tlICAeIidDcjxsOwoW3bJqmvmCbnrLHdccmbgYSqLujPA2/U7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfpWotFmt3/gz9ZbhCL5P/wLx/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjM1OGUxMjctYjljZC0z MjFiLWEyZWQtMDk4ODJkZjI2YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbAyLrrbQv9Mn2l57CIem+YvFqyY2Knc1BCEo8WIAvMT4sebOmD4hL5 gtr2AW5kqIiJFx+3xJ4Pf7l8QdFfawriwSj2gyRmxnohhs80wdvqqbJDF3rStey8 NXuuW3lwq8Oki13gKy6l/MVfhzPJbpv9j10ky9aU2djLURg8EqRWvgCYSZupzUdp 9RMMVpWpzYI5DaabiX2YhUVrK2knQC/ncxBfJ8VccFmAFYmoUnIPXNy/GCMRSvt6 LaYqwxfwR+oVXozhhtSErk/Gp+dI+SPtqi9eKKVL2GRExAp7tw/XaDKXoCMYzuyt 1mVcDHrKPehyjocSYlhLvkcIOdTqWWQ= -----END CERTIFICATE-----Generated at Sun Jun 7 14:15:35 2026 by rpki-client