$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa File: 5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa (raw, json) Hash identifier: xiHpSAHYxLzMDfiUgCEuQxjxXBHDfwhD1MQ1fqpxiAo= Subject key identifier: 7C:88:2A:A2:A3:9B:1D:6A:73:0C:2F:25:54:03:04:18:CC:85:91:4B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DF4DB60691E8BEB78485EE300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 203 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:60:69:1e:8b:eb:78:48:5e:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=97666a0c-2c4f-45e2-a59b-453371eb1389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:20:e7:7c:d9:68:65:ac:e6:15:b7:ab:6e:6d: ad:c5:44:cd:3c:d5:e2:af:9f:7b:59:c5:9a:08:d1: 66:a2:9a:7e:c4:c0:95:af:79:1c:38:c5:f4:ed:21: 0b:8d:0a:75:a4:d0:ad:c7:00:e0:a9:09:01:fa:59: d4:96:bb:db:0b:b3:35:3d:69:42:ad:5f:24:07:ce: 3b:eb:75:42:3a:85:f3:c6:42:2e:1c:88:74:31:27: 30:91:90:db:b5:84:3a:f5:06:94:fe:e5:11:22:54: 09:54:69:93:af:e6:4c:e3:65:5c:7f:5d:5a:4b:26: cc:67:90:01:38:74:be:73:24:79:c1:22:b9:71:42: 53:e7:bb:08:94:53:98:96:fb:9c:85:d1:19:59:c6: c0:d9:e4:f3:31:e2:e0:c4:4b:91:8a:da:12:c0:f9: b1:4b:57:5f:7b:d4:30:89:60:7a:38:37:15:65:43: 93:70:ca:15:80:2c:89:ce:2a:7e:03:0c:c9:d1:9a: b6:4f:61:32:87:51:5e:21:49:6a:fa:d3:d2:37:76: d0:fc:21:08:58:b3:83:ec:db:6f:26:2f:6d:4f:8e: 39:17:b7:3f:85:81:50:73:91:66:55:c9:3d:21:87: 4f:18:18:1f:9a:04:ad:90:7c:d2:4c:42:ba:12:9d: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:88:2A:A2:A3:9B:1D:6A:73:0C:2F:25:54:03:04:18:CC:85:91:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:08:c9:97:c0:41:2a:eb:1b:5f:db:b2:28:cf:4b:60:0e:02: 11:a4:e4:00:e1:66:c5:b6:22:da:fe:5e:01:a8:17:a0:0f:01: 36:43:24:60:7e:e9:99:e4:fe:81:91:18:85:b7:91:d9:1c:74: 70:ce:c9:75:f8:26:d6:6b:75:7b:1f:1f:90:5f:1a:56:cc:36: 04:a3:06:09:05:ae:46:9e:6b:5b:7b:a6:e6:71:1c:93:19:83: 1f:80:df:32:17:a4:13:5f:40:b6:f5:cc:2b:a0:c5:7f:3a:8e: 2c:42:68:16:a5:6b:db:37:73:7b:18:27:ca:59:bf:fc:8e:1e: 2e:7b:6c:41:a6:49:ae:2f:21:68:ae:e7:f8:10:2a:30:54:65: 01:b5:24:e3:32:0f:77:e2:71:25:00:46:19:a8:c4:57:6c:37: 9d:d5:36:3c:15:25:5a:e8:f1:e8:3c:3b:6f:dc:e4:e5:c6:4f: be:45:19:b0:4e:8c:ff:ec:c7:be:6f:8a:67:a8:a2:ea:2e:cf: 00:7f:bc:c1:70:77:cc:aa:b6:e5:07:08:2b:2e:04:6f:ba:db: b7:6c:82:ef:2d:c6:fd:f9:52:ca:ab:84:fb:10:e2:1f:ec:d1: ec:57:a8:fb:db:ee:cc:52:b6:b0:2c:7c:ee:d3:c4:30:c8:7f: 94:74:c2:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022BpHovreEhe4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk OTc2NjZhMGMtMmM0Zi00NWUyLWE1OWItNDUzMzcxZWIxMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCDnfNloZazmFberbm2txUTNPNXir597WcWa CNFmopp+xMCVr3kcOMX07SELjQp1pNCtxwDgqQkB+lnUlrvbC7M1PWlCrV8kB847 63VCOoXzxkIuHIh0MScwkZDbtYQ69QaU/uURIlQJVGmTr+ZM42Vcf11aSybMZ5AB OHS+cyR5wSK5cUJT57sIlFOYlvuchdEZWcbA2eTzMeLgxEuRitoSwPmxS1dfe9Qw iWB6ODcVZUOTcMoVgCyJzip+AwzJ0Zq2T2Eyh1FeIUlq+tPSN3bQ/CEIWLOD7Ntv Ji9tT445F7c/hYFQc5FmVck9IYdPGBgfmgStkHzSTEK6Ep0zCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyIKqKjmx1qcwwvJVQDBBjMhZFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWIzYmU3YzctMmRhOC0z MmIyLTliYTMtYTc1YWRlNmQ2MmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsIyZfAQSrrG1/bsijPS2AOAhGk5ADhZsW2Itr+XgGoF6APATZDJGB+ 6Znk/oGRGIW3kdkcdHDOyXX4JtZrdXsfH5BfGlbMNgSjBgkFrkaea1t7puZxHJMZ gx+A3zIXpBNfQLb1zCugxX86jixCaBala9s3c3sYJ8pZv/yOHi57bEGmSa4vIWiu 5/gQKjBUZQG1JOMyD3ficSUARhmoxFdsN53VNjwVJVro8eg8O2/c5OXGT75FGbBO jP/sx75vimeoououzwB/vMFwd8yqtuUHCCsuBG+627dsgu8txv35UsqrhPsQ4h/s 0exXqPvb7sxStrAsfO7TxDDIf5R0wgs= -----END CERTIFICATE-----Generated at Mon Jun 8 17:55:43 2026 by rpki-client