$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa File: 20b86aff-f738-359b-bf7f-a923168ca468.roa (raw, json) Hash identifier: rtl4Lnl8QWQpOz1P4z4zuHDulfi0uqJR5S6Hzg+Fbbg= Subject key identifier: 91:42:AE:7B:DD:2D:CB:37:49:36:F2:F2:A4:B0:34:15:1B:70:16:54 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CF5879CAE058631304734D580 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 3356 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:9c:ae:05:86:31:30:47:34:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=68a56563-991c-40af-9cb5-e8b2e007af6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:02:14:f9:fb:ca:f3:c3:40:78:5e:3a:d2: 93:0e:1a:9a:03:e0:87:94:73:68:48:9d:4c:01:03: 10:f0:25:76:99:69:cd:d4:a2:61:25:64:4d:67:3c: 9f:0c:80:56:94:27:f9:72:7b:1b:94:f4:2a:04:80: 41:9d:4f:ff:7e:0d:18:56:5d:55:e3:41:ca:73:da: 12:ac:0b:f1:f5:cc:35:ce:a0:97:97:01:fc:3e:59: 29:75:17:3c:3b:e9:af:f3:38:bc:e7:3c:81:3e:0b: dd:06:58:03:d0:3c:69:89:f5:b8:c7:42:7f:2e:f2: 11:b6:d4:ae:45:bd:67:47:ff:da:64:09:88:24:29: 9b:0a:b1:66:73:1a:39:c0:83:a8:60:06:82:5f:81: 30:44:94:58:27:90:bc:a2:9f:93:48:a9:66:be:91: 20:62:d0:0f:6e:b3:79:2d:9e:d4:b8:f1:84:a1:a2: 59:24:5d:08:2f:4d:bb:72:28:df:80:a2:3f:a3:a1: 7d:0b:a7:86:43:20:31:72:36:bb:fe:95:3e:e7:da: 7e:e8:72:08:5e:77:bb:23:d3:d6:c5:8f:12:21:d0: ae:25:76:9c:b6:99:b9:8d:b7:c5:a4:93:b8:00:d6: 85:21:cf:c4:6c:b4:1c:a0:3b:2d:af:25:a8:52:e6: 16:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:42:AE:7B:DD:2D:CB:37:49:36:F2:F2:A4:B0:34:15:1B:70:16:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ea:64:a7:e7:ac:dc:61:30:74:84:18:5c:c5:f5:d0:4b:93: 83:88:a5:eb:61:09:47:1a:08:8d:43:09:b6:73:e8:74:1a:7c: 4e:62:39:25:78:ee:7c:d4:3c:ab:f0:9f:ca:1f:23:0a:06:64: 01:46:49:64:c6:61:e3:05:0c:31:72:6c:b0:f2:7f:79:8f:21: cc:ad:c4:46:d7:b8:9e:21:75:9d:6e:47:70:c7:f3:9e:25:13: 03:f4:2a:39:58:6a:36:e1:7d:0c:c8:43:de:7d:81:1a:80:72: 1c:a0:bf:ed:13:37:03:25:89:8c:03:42:95:86:ca:03:1f:41: 8a:93:4c:61:83:1f:dc:76:1b:bc:df:46:d6:ff:1c:3c:b4:91: 08:45:6d:19:c0:d5:92:8c:c8:2f:ae:0b:5a:26:92:72:5c:e7: dc:e9:1e:97:26:73:8e:b1:48:8e:92:2a:28:9b:cb:60:b5:56: ca:8b:7a:13:32:e0:9e:bd:9b:df:d0:f4:5d:fb:f1:81:99:03: d5:43:45:89:e9:ae:07:e5:3b:77:98:d6:10:6a:48:dc:69:ee: 1e:1e:70:f7:40:c5:a9:63:7b:bd:de:ae:3f:ca:47:cc:59:86: e6:f4:71:ff:a7:73:1b:95:9f:1c:d8:96:5e:d0:4f:ec:ab:6f: fe:11:00:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5yuBYYxMEc01YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk NjhhNTY1NjMtOTkxYy00MGFmLTljYjUtZThiMmUwMDdhZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD8CFPn7yvPDQHheOtKTDhqaA+CHlHNoSJ1M AQMQ8CV2mWnN1KJhJWRNZzyfDIBWlCf5cnsblPQqBIBBnU//fg0YVl1V40HKc9oS rAvx9cw1zqCXlwH8PlkpdRc8O+mv8zi85zyBPgvdBlgD0DxpifW4x0J/LvIRttSu Rb1nR//aZAmIJCmbCrFmcxo5wIOoYAaCX4EwRJRYJ5C8op+TSKlmvpEgYtAPbrN5 LZ7UuPGEoaJZJF0IL027cijfgKI/o6F9C6eGQyAxcja7/pU+59p+6HIIXne7I9PW xY8SIdCuJXactpm5jbfFpJO4ANaFIc/EbLQcoDstryWoUuYWSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFCrnvdLcs3STby8qSwNBUbcBZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjBiODZhZmYtZjczOC0z NTliLWJmN2YtYTkyMzE2OGNhNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjqZKfnrNxhMHSEGFzF9dBLk4OIpethCUcaCI1DCbZz6HQafE5iOSV4 7nzUPKvwn8ofIwoGZAFGSWTGYeMFDDFybLDyf3mPIcytxEbXuJ4hdZ1uR3DH854l EwP0KjlYajbhfQzIQ959gRqAchygv+0TNwMliYwDQpWGygMfQYqTTGGDH9x2G7zf Rtb/HDy0kQhFbRnA1ZKMyC+uC1omknJc59zpHpcmc46xSI6SKiiby2C1VsqLehMy 4J69m9/Q9F378YGZA9VDRYnprgflO3eY1hBqSNxp7h4ecPdAxalje73erj/KR8xZ hub0cf+ncxuVnxzYll7QT+yrb/4RAMY= -----END CERTIFICATE-----Generated at Mon Mar 2 21:28:18 2026 by rpki-client