$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa File: 57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa (raw, json) Hash identifier: RwrFwV86QXdbls9hgzN5muCDol6RYKtP7dt3MU6mAkk= Subject key identifier: DA:CE:88:CE:BB:C5:84:1B:32:D8:47:81:F1:DD:67:FD:CE:55:07:1C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DD625B80E51A4DFB9304543C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 3356 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:b8:0e:51:a4:df:b9:30:45:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=c892ae9c-f98f-4775-b6fe-e3f1ffa99000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c5:2a:b0:b4:88:77:cd:53:a4:7a:f0:9a:37: e0:f8:b4:18:7b:9d:8e:48:ff:f6:6d:ef:fc:93:49: a9:13:55:32:f3:57:0c:86:11:bd:f3:6d:e4:29:4b: e3:0b:6b:91:ad:d3:7f:83:b5:9f:38:86:98:11:1e: 2f:d0:6b:fb:43:e8:7e:bf:fa:56:f7:c5:e7:f0:94: 00:19:41:74:e4:f8:30:b9:e1:f7:4e:1f:c1:c1:3f: ff:80:cb:84:fc:63:ae:0f:fa:72:a3:4c:af:ff:16: 91:83:e1:c5:9b:22:38:0a:f9:0f:b9:5c:7f:9e:9a: b7:82:51:bb:09:b8:d4:c0:2e:be:17:d5:ed:4c:94: 89:c3:1b:40:60:e7:96:0e:14:50:a2:98:09:35:97: 32:e7:32:95:58:fb:f6:1a:40:2a:49:54:de:1b:cd: 44:55:88:4c:eb:f9:24:96:fa:58:0d:a1:5d:26:1f: 11:3d:1d:31:d0:4c:fe:67:d0:98:76:69:ae:27:c7: 67:0f:cd:4e:17:c9:ed:60:b3:14:91:84:34:5f:b8: 9f:c3:82:36:de:3c:a0:c4:83:b9:1e:e4:bb:e8:68: 00:11:e8:81:f5:40:7e:96:23:e1:f0:ce:4e:a4:e7: e8:1c:7f:73:cd:9a:8c:8c:93:b6:d5:3a:96:a6:4d: 3e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CE:88:CE:BB:C5:84:1B:32:D8:47:81:F1:DD:67:FD:CE:55:07:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:91:bd:a9:eb:d9:93:81:5d:ff:91:61:8e:7c:ae:b8:9e:cd: af:e6:2f:03:7c:79:10:b5:52:ea:06:6f:0e:ca:b8:db:64:0c: 54:63:e5:c4:6b:92:60:98:68:fc:ab:0b:13:2a:df:63:60:3b: c0:a9:66:25:f6:86:68:ab:a4:09:c6:72:5e:f1:d4:fb:7b:d3: 94:67:62:e7:dd:a5:2a:75:4b:89:d7:4b:1e:ff:f7:83:e5:c8: bb:1f:fd:e0:1b:3f:ab:ab:1f:62:12:33:7c:f5:ef:d1:f3:ca: 4a:df:0c:a7:b3:e4:af:09:ab:af:cf:ed:8a:71:ff:5e:4a:8d: 1d:db:1e:ad:a3:18:13:30:ea:00:94:94:f5:d9:6a:f4:e3:a6: ee:0a:4c:80:21:b6:2d:00:29:75:a2:ec:65:a3:ae:9e:db:a4: 52:dd:b3:1d:c7:0b:ca:e5:44:ae:43:ea:fd:cf:bd:e7:47:c1: 99:89:f6:ca:d6:f5:98:f4:e5:3a:e6:97:99:01:e9:4e:2c:83: 70:3f:0d:eb:39:e2:e1:46:6a:ea:f8:b5:d9:dd:b0:af:cd:58: 9c:46:a7:62:1c:68:00:2e:fb:42:02:e0:95:31:4a:00:c4:f8: 21:4e:0e:e3:90:55:8f:f0:1c:c0:60:ff:62:a2:f6:f0:f5:63: a0:3c:3b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbgOUaTfuTBFQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk Yzg5MmFlOWMtZjk4Zi00Nzc1LWI2ZmUtZTNmMWZmYTk5MDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8UqsLSId81TpHrwmjfg+LQYe52OSP/2be/8 k0mpE1Uy81cMhhG9823kKUvjC2uRrdN/g7WfOIaYER4v0Gv7Q+h+v/pW98Xn8JQA GUF05PgwueH3Th/BwT//gMuE/GOuD/pyo0yv/xaRg+HFmyI4CvkPuVx/npq3glG7 CbjUwC6+F9XtTJSJwxtAYOeWDhRQopgJNZcy5zKVWPv2GkAqSVTeG81EVYhM6/kk lvpYDaFdJh8RPR0x0Ez+Z9CYdmmuJ8dnD81OF8ntYLMUkYQ0X7ifw4I23jygxIO5 HuS76GgAEeiB9UB+liPh8M5OpOfoHH9zzZqMjJO21TqWpk0+owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrOiM67xYQbMthHgfHdZ/3OVQccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTdmZmQxZTYtYjE0YS0z N2IwLTljZmEtZDFmNDhhZWVjOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuRvanr2ZOBXf+RYY58rrieza/mLwN8eRC1UuoGbw7KuNtkDFRj5cRr kmCYaPyrCxMq32NgO8CpZiX2hmirpAnGcl7x1Pt705RnYufdpSp1S4nXSx7/94Pl yLsf/eAbP6urH2ISM3z179HzykrfDKez5K8Jq6/P7Ypx/15KjR3bHq2jGBMw6gCU lPXZavTjpu4KTIAhti0AKXWi7GWjrp7bpFLdsx3HC8rlRK5D6v3PvedHwZmJ9srW 9Zj05Trml5kB6U4sg3A/Des54uFGaur4tdndsK/NWJxGp2IcaAAu+0IC4JUxSgDE +CFODuOQVY/wHMBg/2Ki9vD1Y6A8O48= -----END CERTIFICATE-----Generated at Mon Jun 8 20:07:33 2026 by rpki-client