$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa File: 5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa (raw, json) Hash identifier: usj1j8CW3PaKXXgZaEg6QCuMJEWUJEyeblQ5zbJaNco= Subject key identifier: F4:2A:DE:A5:66:4D:A0:D3:7A:A1:02:8A:D0:2F:C2:B0:C2:F7:84:7C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D143D4AB0C18B7DA109FC8600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 203 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4a:b0:c1:8b:7d:a1:09:fc:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=ebc98294-64f9-4111-82b2-a1713b819d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2f:cb:35:8c:6b:2e:c3:24:a6:d9:64:07:24: d7:20:51:9a:2c:ab:dc:b3:f3:db:70:b9:e4:c9:27: 80:7a:fe:9d:63:49:ed:76:f9:cb:3a:0c:db:90:fe: 75:d9:7b:ab:c2:70:80:90:42:0b:fa:9b:dc:91:f6: 96:7e:33:4f:3e:1f:95:9e:c3:ce:32:b9:66:b2:7e: 35:d9:6b:10:86:99:4e:b6:6e:79:9f:af:07:89:2e: bd:b0:cf:f7:9a:52:b4:8e:af:41:de:2d:81:de:1e: c0:dc:dd:4d:cb:66:2e:a3:62:25:dc:e4:97:62:49: 9e:6b:a6:1d:3a:8e:6c:a0:61:7f:05:70:05:e9:a8: 30:03:5e:97:19:87:af:ef:8e:a6:f5:e6:d2:d9:0b: 44:ee:e3:dc:6f:69:df:ce:44:25:73:44:e5:b4:37: 43:05:ce:73:a8:03:aa:ff:98:0c:6b:fa:db:bd:b4: 76:3b:f5:d2:16:4c:3e:52:94:07:27:6c:39:8d:aa: 5d:c8:83:1b:a4:cb:69:b0:74:a4:0e:b0:18:cc:7c: d1:db:0d:8e:a7:0e:ca:16:21:e5:bf:ef:13:37:35: 42:08:66:1a:8f:7f:27:bb:43:da:db:65:8b:7f:89: 6b:29:ba:73:6e:18:27:44:e1:49:ff:fd:48:15:75: 36:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2A:DE:A5:66:4D:A0:D3:7A:A1:02:8A:D0:2F:C2:B0:C2:F7:84:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:fc:aa:b7:ce:09:a9:77:66:f4:63:dc:d9:06:db:90:7b:da: 4c:f7:13:e9:e3:35:3f:37:73:f8:e7:75:42:6f:1c:82:59:af: 1b:f9:ef:0f:1f:47:0d:b0:08:7b:25:17:06:df:62:d3:dc:fb: 30:c7:02:5d:f7:7c:5a:9d:17:7f:3b:74:5c:e0:f3:1d:1d:c6: c7:12:6f:5d:76:46:63:fc:10:ad:3f:f7:03:73:ab:e6:1e:e3: c7:be:ea:1a:06:83:07:c4:2a:dc:c5:27:31:6b:c2:0e:01:c6: ab:59:27:3f:ce:e4:8e:3d:82:d6:57:e2:e8:f8:b6:b0:21:18: 26:a2:ae:41:d7:23:ab:13:5c:d5:6a:1e:c2:3c:c9:b6:5a:74: b5:e7:9a:ea:3e:30:4a:5b:0e:48:15:89:bf:4e:0d:64:26:58: c8:17:4b:9a:89:58:12:2f:20:7c:b4:8a:de:58:95:da:63:d1: da:83:fe:08:12:ed:30:12:3c:39:ef:f1:c2:05:31:3c:b1:d4: c3:42:4e:67:f5:5c:a7:96:cd:a6:32:ae:01:b8:65:f7:e9:6b: 8f:10:75:de:b2:01:a0:5a:18:a5:5e:b8:1c:7c:bf:77:b2:10: 62:4d:7c:a4:ba:96:3c:10:22:c7:bf:c8:6d:e6:6f:c4:22:e8: 15:ed:0f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUqwwYt9oQn8hgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWJjOTgyOTQtNjRmOS00MTExLTgyYjItYTE3MTNiODE5ZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi/LNYxrLsMkptlkByTXIFGaLKvcs/PbcLnk ySeAev6dY0ntdvnLOgzbkP512XurwnCAkEIL+pvckfaWfjNPPh+VnsPOMrlmsn41 2WsQhplOtm55n68HiS69sM/3mlK0jq9B3i2B3h7A3N1Ny2Yuo2Il3OSXYkmea6Yd Oo5soGF/BXAF6agwA16XGYev746m9ebS2QtE7uPcb2nfzkQlc0TltDdDBc5zqAOq /5gMa/rbvbR2O/XSFkw+UpQHJ2w5japdyIMbpMtpsHSkDrAYzHzR2w2Opw7KFiHl v+8TNzVCCGYaj38nu0Pa22WLf4lrKbpzbhgnROFJ//1IFXU2yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQq3qVmTaDTeqECitAvwrDC94R8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWIzYmU3YzctMmRhOC0z MmIyLTliYTMtYTc1YWRlNmQ2MmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf8qrfOCal3ZvRj3NkG25B72kz3E+njNT83c/jndUJvHIJZrxv57w8f Rw2wCHslFwbfYtPc+zDHAl33fFqdF387dFzg8x0dxscSb112RmP8EK0/9wNzq+Ye 48e+6hoGgwfEKtzFJzFrwg4BxqtZJz/O5I49gtZX4uj4trAhGCairkHXI6sTXNVq HsI8ybZadLXnmuo+MEpbDkgVib9ODWQmWMgXS5qJWBIvIHy0it5Yldpj0dqD/ggS 7TASPDnv8cIFMTyx1MNCTmf1XKeWzaYyrgG4Zffpa48Qdd6yAaBaGKVeuBx8v3ey EGJNfKS6ljwQIse/yG3mb8Qi6BXtD8k= -----END CERTIFICATE-----Generated at Tue Mar 10 05:39:52 2026 by rpki-client