$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa File: a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa (raw, json) Hash identifier: vAXtw1JTIpkdhfJ55U73b1lFGOTwNZbxBzfbLZPCWPo= Subject key identifier: 0D:D0:42:91:35:10:94:B6:A1:A3:4B:64:D9:87:C7:C9:67:3B:6F:A5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D8EF57A49991DD20DEABBA900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 3356 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7a:49:99:1d:d2:0d:ea:bb:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ac185eca-5088-49af-8a9c-dfc008228ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:01:f5:ab:3d:72:af:ac:89:aa:bf:19:1b:5d: 07:c4:f0:5d:53:85:b3:8a:f5:ba:27:70:c1:32:b1: 6d:a0:2e:0a:eb:4c:e3:d4:6f:5b:2d:cc:b1:0b:12: 31:c0:94:b3:36:0e:af:3a:1f:59:c6:32:ba:a2:94: 96:b4:09:d7:0b:42:e6:e3:42:c9:0d:ac:05:ca:d0: 51:05:a9:77:a3:fd:ee:d6:c0:de:25:13:a9:97:0a: 00:6d:fd:cd:84:55:b8:d2:43:b8:e0:cd:28:de:ed: 8c:a0:0a:07:78:03:03:42:c6:3f:82:f2:39:2f:ff: 13:7c:e6:47:92:02:54:bd:e3:4d:43:5e:55:80:c1: 24:67:2b:fa:3c:b3:ca:11:7f:27:c3:0d:5b:8f:19: f8:8c:61:07:fe:11:08:57:22:a7:ec:ef:ce:26:51: 8b:93:87:2d:3d:1f:a5:4c:f4:10:b8:1e:1a:99:ed: 42:c3:e7:9f:30:de:38:5d:b9:74:5d:5c:b0:f9:54: 41:5a:93:b8:ea:12:9c:47:93:19:f7:73:84:12:a4: 22:08:0b:dd:58:6b:e9:ee:cd:89:7e:df:ce:7b:85: 16:17:fc:f5:ad:c4:ef:83:0f:0d:50:c2:80:cc:39: 3d:09:69:a9:6e:ee:1c:88:81:89:44:ac:8c:35:b0: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D0:42:91:35:10:94:B6:A1:A3:4B:64:D9:87:C7:C9:67:3B:6F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b1:c9:5c:2e:1f:b9:27:75:82:c7:b3:4f:ca:02:4f:59:18: bf:2f:1f:df:41:79:43:9c:ee:4b:d1:1f:f4:b4:ed:74:a8:a9: 80:54:95:7d:6f:e3:44:3c:9f:7b:a0:82:4a:31:7d:63:26:44: 22:68:13:4f:e9:0b:70:1d:77:57:0d:a1:cb:14:9e:b5:be:f1: 9d:65:e4:0c:c1:3d:ac:1f:a7:9b:e3:9d:2e:6b:11:e0:ad:c9: 12:a4:8e:66:ed:56:b4:3c:2c:dc:89:e5:b3:03:56:c6:57:e9: 72:35:fc:f5:50:2c:ee:d4:59:05:6a:04:38:ad:20:0d:2c:a6: d3:67:d5:d0:4a:6d:80:90:9d:7a:c5:5e:ec:20:6f:78:92:f7: 22:03:b4:e6:14:cc:5f:79:65:16:5c:e0:c0:72:c6:f0:12:e1: 06:f8:8d:1a:8d:36:33:cc:51:fb:ea:8e:4f:66:74:16:fc:fe: 4d:c3:7b:69:ca:f4:ec:7d:8f:6e:71:69:6d:73:9c:7f:8f:eb: 45:77:2f:5a:a9:d2:c7:ee:47:a0:65:a0:05:b2:0e:f2:4d:a6: c1:c9:bb:55:0e:30:ac:46:80:4f:46:14:e2:81:c9:f4:1c:1b: d7:94:c3:4a:63:bf:86:e8:05:57:55:2d:10:1e:10:b3:80:e3: b3:19:49:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XpJmR3SDeq7qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YWMxODVlY2EtNTA4OC00OWFmLThhOWMtZGZjMDA4MjI4ZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwH1qz1yr6yJqr8ZG10HxPBdU4WzivW6J3DB MrFtoC4K60zj1G9bLcyxCxIxwJSzNg6vOh9ZxjK6opSWtAnXC0Lm40LJDawFytBR Bal3o/3u1sDeJROplwoAbf3NhFW40kO44M0o3u2MoAoHeAMDQsY/gvI5L/8TfOZH kgJUveNNQ15VgMEkZyv6PLPKEX8nww1bjxn4jGEH/hEIVyKn7O/OJlGLk4ctPR+l TPQQuB4ame1Cw+efMN44Xbl0XVyw+VRBWpO46hKcR5MZ93OEEqQiCAvdWGvp7s2J ft/Oe4UWF/z1rcTvgw8NUMKAzDk9CWmpbu4ciIGJRKyMNbDgIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3QQpE1EJS2oaNLZNmHx8lnO2+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTEwYTA2NDYtZDBkYy0z MGRjLWI5YjQtMzMyMzVmNmM4MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAexyVwuH7kndYLHs0/KAk9ZGL8vH99BeUOc7kvRH/S07XSoqYBUlX1v 40Q8n3uggkoxfWMmRCJoE0/pC3Add1cNocsUnrW+8Z1l5AzBPawfp5vjnS5rEeCt yRKkjmbtVrQ8LNyJ5bMDVsZX6XI1/PVQLO7UWQVqBDitIA0sptNn1dBKbYCQnXrF Xuwgb3iS9yIDtOYUzF95ZRZc4MByxvAS4Qb4jRqNNjPMUfvqjk9mdBb8/k3De2nK 9Ox9j25xaW1znH+P60V3L1qp0sfuR6BloAWyDvJNpsHJu1UOMKxGgE9GFOKByfQc G9eUw0pjv4boBVdVLRAeELOA47MZSdE= -----END CERTIFICATE-----Generated at Fri Apr 24 12:11:11 2026 by rpki-client