$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa File: 66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa (raw, json) Hash identifier: nklkuAaMsN7UZv/X0YsXtWKk4St2rYLxMX5N4Tms+x8= Subject key identifier: 98:A1:AA:9D:5A:EF:B9:EE:1D:CD:59:6A:E2:5D:A7:FD:9C:FB:A1:19 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DD625B8E83C5BC7876BFCCC40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 3356 IP address blocks: 20.137.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:b8:e8:3c:5b:c7:87:6b:fc:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=1d4658c0-4ee5-4261-a21f-06e9812a495c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:27:ef:7e:34:55:ed:12:a1:8e:4c:e4:d0: 8f:9b:0d:f2:2c:4f:60:25:37:18:aa:08:7e:89:df: 2c:3a:76:6e:fc:e6:fa:1e:b1:77:48:ee:ed:98:f8: c0:a9:6d:60:49:98:7d:22:16:c8:b9:99:19:2f:cc: 88:91:7d:7a:9c:09:75:1a:90:67:65:2b:e6:21:a9: 98:39:20:96:df:7a:d5:3c:07:72:5a:77:a5:61:22: f5:45:10:86:5d:14:a1:cc:63:ea:ee:a9:d2:7c:79: 48:25:cf:89:67:69:3e:e2:40:91:75:93:e8:2b:74: fb:56:f9:6b:4c:4c:b7:2d:ba:7f:51:3c:13:b0:1f: 3c:1d:67:8e:10:e7:59:12:35:64:ab:ef:04:c5:01: c3:f2:be:0e:37:14:46:9f:66:5a:67:75:3e:d0:50: 54:42:84:10:84:a0:a2:3b:78:f8:93:67:d7:43:f9: a2:e0:5d:ba:0d:56:f4:24:ab:cd:b2:c5:5a:43:18: 28:c8:85:f8:c8:bb:12:31:6a:dd:6e:b8:13:82:c3: 15:7d:db:2e:64:24:3f:9c:66:68:f6:f2:74:f7:a2: fe:c7:18:3a:4c:2e:c8:d0:b5:a3:ef:71:bb:25:40: 68:9f:95:6c:2c:60:48:13:0f:c5:15:b2:73:9d:06: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A1:AA:9D:5A:EF:B9:EE:1D:CD:59:6A:E2:5D:A7:FD:9C:FB:A1:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0e:81:ee:68:c1:93:27:0c:62:a6:45:68:b3:c1:0e:89:cc: e1:f9:fc:8e:de:ee:1f:66:e4:26:43:0f:90:b5:71:ca:dc:4f: c7:84:f9:76:32:e6:f0:69:a1:b0:7e:bc:d8:ce:f9:de:c3:53: 5c:6a:66:fa:15:83:4d:67:60:2a:c5:fa:b1:90:14:87:3a:d9: 2b:b7:6f:30:3c:25:8b:15:68:bf:d8:dc:32:53:7e:f3:2f:bd: c9:56:7c:3c:d5:ca:e3:aa:54:81:74:53:0a:0c:a8:10:21:17: 1d:1f:48:39:10:c6:f9:3a:5c:b0:67:a1:65:57:60:cf:04:a5: dd:81:11:56:c4:00:61:6c:e9:3a:24:2f:89:f1:6c:01:b1:17: 86:4a:be:06:34:34:e4:cf:9c:92:bd:dc:19:03:2d:f4:8c:73: cf:93:00:e5:58:0b:9c:96:7e:73:40:09:71:b1:69:32:db:a5: f4:37:52:7f:f2:8a:c7:ba:a7:a5:44:ef:e2:4f:68:b0:32:63: eb:40:9a:8d:ee:0b:aa:23:a3:cf:e8:7f:aa:80:07:7f:6a:15: 09:7f:f5:f3:c1:b5:ea:fa:49:be:46:e2:83:02:7c:bb:0c:85: 79:42:34:93:78:b1:26:5b:c7:20:30:03:0c:ea:a0:91:35:61: 78:00:c0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbjoPFvHh2v8zEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk MWQ0NjU4YzAtNGVlNS00MjYxLWEyMWYtMDZlOTgxMmE0OTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3kn7340Ve0SoY5M5NCPmw3yLE9gJTcYqgh+ id8sOnZu/Ob6HrF3SO7tmPjAqW1gSZh9IhbIuZkZL8yIkX16nAl1GpBnZSvmIamY OSCW33rVPAdyWnelYSL1RRCGXRShzGPq7qnSfHlIJc+JZ2k+4kCRdZPoK3T7Vvlr TEy3Lbp/UTwTsB88HWeOEOdZEjVkq+8ExQHD8r4ONxRGn2ZaZ3U+0FBUQoQQhKCi O3j4k2fXQ/mi4F26DVb0JKvNssVaQxgoyIX4yLsSMWrdbrgTgsMVfdsuZCQ/nGZo 9vJ096L+xxg6TC7I0LWj73G7JUBon5VsLGBIEw/FFbJznQa1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJihqp1a77nuHc1ZauJdp/2c+6EZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjZhM2M5MzQtYThhZS0z OWM2LTllMDctOTU3OTRiNjNiOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFInwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcOge5owZMnDGKmRWizwQ6JzOH5/I7e7h9m5CZDD5C1ccrcT8eE+XYy 5vBpobB+vNjO+d7DU1xqZvoVg01nYCrF+rGQFIc62Su3bzA8JYsVaL/Y3DJTfvMv vclWfDzVyuOqVIF0UwoMqBAhFx0fSDkQxvk6XLBnoWVXYM8Epd2BEVbEAGFs6Tok L4nxbAGxF4ZKvgY0NOTPnJK93BkDLfSMc8+TAOVYC5yWfnNACXGxaTLbpfQ3Un/y ise6p6VE7+JPaLAyY+tAmo3uC6ojo8/of6qAB39qFQl/9fPBter6Sb5G4oMCfLsM hXlCNJN4sSZbxyAwAwzqoJE1YXgAwGo= -----END CERTIFICATE-----Generated at Mon Jun 8 20:09:54 2026 by rpki-client