$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa File: a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa (raw, json) Hash identifier: ma8lVIaD6FUp9OwqqGxhJQ3+fcCp0snUkZWkl8xOU5s= Subject key identifier: 54:51:44:E3:4B:87:2B:2F:A8:64:11:36:DE:FF:28:7F:73:C3:D4:3F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CAE572EF790BCB8C7347A25C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 3356 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Feb 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:2e:f7:90:bc:b8:c7:34:7a:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=855692bb-ef4b-4ad8-87be-cfe78961c604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8b:c6:92:72:f1:62:f2:ea:34:d5:86:c8:8b: f9:76:6b:92:71:32:02:c3:ae:be:1b:f6:7c:00:fc: 90:b0:51:01:d0:5e:e5:73:02:c1:f0:3b:40:e9:0a: 23:8d:56:7a:9b:c8:f7:38:fa:bc:cd:2f:36:34:03: 80:f4:ba:aa:78:3b:23:96:bb:40:ab:bb:9b:e7:a2: f1:43:97:4c:d6:ed:5b:34:d8:87:1a:bc:73:06:ac: 95:e6:7a:ca:c2:e5:4c:b6:36:df:8d:59:50:b3:d6: 94:e4:ed:a7:44:22:d1:59:83:24:4b:25:e7:53:02: 9f:f2:11:f4:52:d8:ca:d7:2f:ba:49:13:27:c0:88: 16:c5:59:c0:92:10:e4:0f:21:0f:a8:b5:b0:d9:ae: 80:a8:34:c0:63:a8:aa:e7:5f:5e:09:17:82:7a:69: 5a:4a:b2:86:23:e7:96:f1:29:96:f8:0e:d5:bb:ca: de:8f:ab:80:20:54:b6:ee:23:d4:0e:90:43:bd:2f: ec:15:2f:02:5e:81:3b:9b:96:d3:c7:24:d5:78:e5: 2c:b4:f8:73:3f:0a:6f:7c:ef:73:30:fe:87:e0:13: d9:6c:64:23:8c:2d:a5:71:60:46:c5:4f:0b:d7:45: 90:d4:05:1a:e2:ef:4e:dc:92:10:7c:34:cf:15:0b: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:51:44:E3:4B:87:2B:2F:A8:64:11:36:DE:FF:28:7F:73:C3:D4:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ea:46:d1:71:56:55:9f:eb:e2:75:3b:0b:c6:dd:27:14:f1: 74:92:4a:69:bd:cc:fa:78:99:2f:d3:2d:f6:9a:e8:32:4d:b3: ca:25:fa:22:8e:45:80:79:6e:5a:dc:1b:b6:d2:9d:fe:dd:f5: d1:61:aa:b3:f7:cc:a1:aa:6e:16:71:d5:fd:cc:f3:58:4b:2f: 78:36:44:df:cf:01:a9:f8:ed:54:ac:fb:66:73:13:d7:33:fe: 3c:c4:7e:e4:e5:46:fd:a0:bd:82:46:30:10:49:43:b3:a2:28: 54:97:db:f2:d3:9d:05:49:b8:75:aa:ce:f1:ba:65:7f:67:b4: 23:b6:3d:9d:02:13:b6:3c:91:63:c8:a5:13:3f:a4:9f:9e:c2: 00:43:04:99:a9:ea:4f:fd:b0:6d:5a:a8:af:3f:dc:cf:1f:d6: e1:c9:3a:a3:c1:50:85:82:e4:79:d2:e7:ca:b0:17:51:ef:90: f0:7f:e5:86:fe:35:22:f1:93:d8:3d:88:09:f5:bd:cf:bb:53: 23:1e:71:df:8b:48:c6:b2:33:5e:5f:31:21:2d:ff:22:89:a8: 8a:4e:ce:b3:8a:69:4e:6b:64:58:fd:70:91:41:22:c5:ad:07: a7:1c:ed:6e:63:86:40:b1:7f:1b:86:01:32:2a:8f:40:1c:26: 69:10:8a:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVy73kLy4xzR6JcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODU1NjkyYmItZWY0Yi00YWQ4LTg3YmUtY2ZlNzg5NjFjNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgovGknLxYvLqNNWGyIv5dmuScTICw66+G/Z8 APyQsFEB0F7lcwLB8DtA6QojjVZ6m8j3OPq8zS82NAOA9LqqeDsjlrtAq7ub56Lx Q5dM1u1bNNiHGrxzBqyV5nrKwuVMtjbfjVlQs9aU5O2nRCLRWYMkSyXnUwKf8hH0 UtjK1y+6SRMnwIgWxVnAkhDkDyEPqLWw2a6AqDTAY6iq519eCReCemlaSrKGI+eW 8SmW+A7Vu8rej6uAIFS27iPUDpBDvS/sFS8CXoE7m5bTxyTVeOUstPhzPwpvfO9z MP6H4BPZbGQjjC2lcWBGxU8L10WQ1AUa4u9O3JIQfDTPFQvv0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRRRONLhysvqGQRNt7/KH9zw9Q/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTEwYTA2NDYtZDBkYy0z MGRjLWI5YjQtMzMyMzVmNmM4MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3qRtFxVlWf6+J1OwvG3ScU8XSSSmm9zPp4mS/TLfaa6DJNs8ol+iKO RYB5blrcG7bSnf7d9dFhqrP3zKGqbhZx1f3M81hLL3g2RN/PAan47VSs+2ZzE9cz /jzEfuTlRv2gvYJGMBBJQ7OiKFSX2/LTnQVJuHWqzvG6ZX9ntCO2PZ0CE7Y8kWPI pRM/pJ+ewgBDBJmp6k/9sG1aqK8/3M8f1uHJOqPBUIWC5HnS58qwF1HvkPB/5Yb+ NSLxk9g9iAn1vc+7UyMecd+LSMayM15fMSEt/yKJqIpOzrOKaU5rZFj9cJFBIsWt B6cc7W5jhkCxfxuGATIqj0AcJmkQilg= -----END CERTIFICATE-----Generated at Tue Feb 17 22:58:49 2026 by rpki-client