$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa File: df22a43e-e64f-3eee-a833-cc30d25d5a51.roa (raw, json) Hash identifier: CQzE89+9V0FOr5sjUkinlutFU6TK4U/UkkKfnKsLyf0= Subject key identifier: 79:62:32:B7:5E:B8:42:9A:75:3E:35:E0:19:99:5A:85:AB:DA:8A:E3 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E18AEFC6BC6BE308394D33D80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 3356 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:fc:6b:c6:be:30:83:94:d3:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=e2be0fe6-409b-4101-9a42-04d1de2d47c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:5b:f5:2f:34:cc:2f:a7:61:46:38:48:0a: bd:56:8d:fd:89:e9:9e:91:5c:a5:bd:8a:53:17:7a: 20:48:fa:2d:18:39:39:4d:01:79:80:61:4e:91:aa: 13:dd:dc:b2:2e:f6:7d:35:4c:ba:63:80:39:c5:e6: c3:e6:4c:00:41:60:a3:24:65:8f:a9:60:0d:59:af: 95:20:7b:4f:2c:a8:1f:ac:5f:0d:2d:7b:e1:bc:d2: 11:6f:f0:1d:e4:60:a9:2a:cb:db:31:bd:1c:71:8c: 44:29:41:8a:4f:49:b0:5b:06:b5:39:7b:26:3e:c4: 1e:37:04:8f:84:89:cb:39:0a:22:a0:30:02:ae:01: e8:51:06:3f:d0:08:a1:ef:ec:aa:17:85:bb:f1:a0: b2:9b:11:49:32:be:0b:90:2e:69:cc:00:ee:67:36: 18:1a:d2:27:47:61:f0:df:35:f5:17:c8:d0:2b:35: 8e:91:a0:48:1c:bb:13:a4:da:6b:9e:f1:85:4f:9b: 9e:6c:79:fa:6e:48:18:ec:8f:a8:0c:42:4e:6c:fd: d9:fc:47:95:e3:fd:43:f6:45:c0:fd:98:cd:b8:a3: d7:cc:86:ab:a8:d3:2a:de:4d:7b:00:85:e4:cb:c2: 58:7d:fb:23:ab:86:5d:53:bc:b0:f8:5d:8c:c3:7a: 5c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:62:32:B7:5E:B8:42:9A:75:3E:35:E0:19:99:5A:85:AB:DA:8A:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:60:9a:d0:12:78:c4:78:5f:33:00:5b:50:df:53:41:63:e8: 33:13:13:1c:79:86:81:d8:7c:72:95:1e:46:c0:d5:1f:14:29: 73:49:6b:71:38:6c:b1:18:2e:52:98:f4:6f:c2:23:84:94:11: 24:71:e7:9c:9f:d8:93:7f:65:1b:23:b5:e7:a3:40:38:f6:e4: a1:00:8e:a9:a4:26:d2:50:11:ef:51:4c:46:02:d0:de:ce:8a: ca:b5:13:4c:a4:4c:80:2d:74:8c:12:76:2a:ad:49:cd:89:65: 93:37:1a:83:65:00:53:19:72:ac:85:6c:01:4b:39:40:98:9b: ae:7d:c5:92:a5:30:73:ed:8a:79:10:c3:13:ce:ea:e7:97:fb: 7f:e4:56:4c:88:8a:8b:72:11:aa:9b:45:e0:5e:28:a4:35:85: a3:fc:20:33:e5:bb:44:6d:ca:33:b4:56:87:0f:46:3a:c3:87: b3:35:73:56:d6:bd:38:bb:a8:c4:8b:e5:ec:2b:d8:92:ec:29: c1:81:2c:15:34:4a:65:e6:75:2f:21:f4:e6:5e:7d:4f:ec:52: 86:88:85:a3:67:ea:74:65:d2:e5:3d:b4:b6:7e:04:05:b8:e1: ac:8b:de:25:e5:04:d4:f9:39:4d:c8:04:57:08:45:64:0d:4b: 06:e8:19:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Yrvxrxr4wg5TTPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk ZTJiZTBmZTYtNDA5Yi00MTAxLTlhNDItMDRkMWRlMmQ0N2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIJb9S80zC+nYUY4SAq9Vo39iemekVylvYpT F3ogSPotGDk5TQF5gGFOkaoT3dyyLvZ9NUy6Y4A5xebD5kwAQWCjJGWPqWANWa+V IHtPLKgfrF8NLXvhvNIRb/Ad5GCpKsvbMb0ccYxEKUGKT0mwWwa1OXsmPsQeNwSP hInLOQoioDACrgHoUQY/0Aih7+yqF4W78aCymxFJMr4LkC5pzADuZzYYGtInR2Hw 3zX1F8jQKzWOkaBIHLsTpNprnvGFT5uebHn6bkgY7I+oDEJObP3Z/EeV4/1D9kXA /ZjNuKPXzIarqNMq3k17AIXky8JYffsjq4ZdU7yw+F2Mw3pcoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHliMrdeuEKadT414BmZWoWr2orjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGYyMmE0M2UtZTY0Zi0z ZWVlLWE4MzMtY2MzMGQyNWQ1YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZgmtASeMR4XzMAW1DfU0Fj6DMTExx5hoHYfHKVHkbA1R8UKXNJa3E4 bLEYLlKY9G/CI4SUESRx55yf2JN/ZRsjteejQDj25KEAjqmkJtJQEe9RTEYC0N7O isq1E0ykTIAtdIwSdiqtSc2JZZM3GoNlAFMZcqyFbAFLOUCYm659xZKlMHPtinkQ wxPO6ueX+3/kVkyIiotyEaqbReBeKKQ1haP8IDPlu0RtyjO0VocPRjrDh7M1c1bW vTi7qMSL5ewr2JLsKcGBLBU0SmXmdS8h9OZefU/sUoaIhaNn6nRl0uU9tLZ+BAW4 4ayL3iXlBNT5OU3IBFcIRWQNSwboGZM= -----END CERTIFICATE-----Generated at Mon Jun 8 20:07:14 2026 by rpki-client