$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa File: 219ed1da-c95c-3af6-9248-3707f5300999.roa (raw, json) Hash identifier: Lmx7kKKO+8ugtpCNhoEeAEprbdTp1Gb1wjuxF+lOh+M= Subject key identifier: 8E:B1:90:36:EF:F4:97:B2:26:67:66:20:0D:B7:8D:8D:2B:16:23:5E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CF5879C20839BC3A518767100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 203 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:9c:20:83:9b:c3:a5:18:76:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=5a1bccfe-dec7-4673-95ac-15d0b6d437f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:fb:bf:fd:7c:b9:25:44:71:a4:20:11:08: 29:1a:f2:d3:9a:b0:6f:7a:5a:58:06:de:47:67:b4: 19:4d:83:ef:50:85:52:59:99:b8:7c:fd:81:2b:cf: cb:7e:12:54:d2:e7:30:54:2a:fe:ab:4d:58:c0:c2: 50:83:ca:70:53:28:56:91:e7:62:8a:94:fc:09:8a: 71:47:e4:08:f2:9d:f6:00:ac:1e:8f:40:80:fb:54: aa:86:d6:6c:bc:c9:da:f2:b7:b5:01:1c:75:e1:73: 9d:26:84:ae:28:b5:e4:73:39:75:6c:57:a0:81:81: 94:36:28:2e:6b:9e:51:cf:84:c7:2b:1a:24:c7:b9: 05:2a:c4:38:74:09:41:d1:81:89:28:1a:24:cf:9c: b9:e6:f5:ba:e2:ec:f7:83:69:58:ea:a8:99:c1:c2: 31:dd:f3:11:61:84:51:cf:c2:30:03:4b:99:e8:d9: bc:44:b1:7a:16:cf:af:ed:7b:9c:08:74:24:82:31: 54:ab:8d:fe:ef:cd:7f:18:78:84:6e:b3:9f:db:03: b6:ad:7b:1d:73:1a:32:a8:c5:45:7c:b8:7c:ae:b8: 88:2b:d3:8d:65:86:5c:5c:82:57:ff:27:37:9a:43: 8f:92:57:7c:b0:b0:16:01:0c:58:89:fb:2e:1a:4a: 97:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B1:90:36:EF:F4:97:B2:26:67:66:20:0D:B7:8D:8D:2B:16:23:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:31:8c:7f:28:f7:b4:63:c1:46:71:40:62:fa:95:20:92:26: 01:e0:ab:fd:4f:e3:64:cf:b1:d6:bf:dd:71:15:73:53:d4:ed: 6b:6d:0b:57:42:9e:a1:78:29:ad:06:b7:73:01:9e:2c:de:5e: e7:4c:0f:b7:2e:8b:f5:c9:22:bb:82:83:d9:54:de:ae:4a:af: 3e:5b:ac:52:15:fa:9e:fd:85:00:66:df:1b:c0:d8:0a:a6:72: 20:e1:d0:00:3d:b6:5d:3c:fd:0c:9b:af:2a:d4:79:b2:11:88: af:68:f9:f6:33:e9:c7:aa:48:18:c9:18:df:3b:6a:70:d0:40: 82:12:63:70:15:6c:fb:2e:8b:17:4f:1b:74:09:ec:f9:6c:44: b2:e5:16:d1:b7:42:24:ef:38:c3:21:5b:26:97:4a:da:bf:03: 3c:5c:ba:12:73:fb:1c:19:b0:c8:d9:10:52:36:8c:6d:aa:67: 67:8c:6d:1a:48:ba:2d:51:ea:ef:77:85:7a:00:32:7a:62:00: 2b:57:04:39:f9:79:78:3d:86:af:5b:54:d5:e2:1b:d5:46:a0: 18:74:25:f4:9a:29:c0:cb:5f:15:1d:0e:ab:c0:54:6c:ff:f7: 6c:28:b8:4f:c1:79:a8:95:bc:7b:e4:6e:c7:db:5e:d9:61:91: 81:67:49:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5wgg5vDpRh2cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk NWExYmNjZmUtZGVjNy00NjczLTk1YWMtMTVkMGI2ZDQzN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzML7v/18uSVEcaQgEQgpGvLTmrBvelpYBt5H Z7QZTYPvUIVSWZm4fP2BK8/LfhJU0ucwVCr+q01YwMJQg8pwUyhWkediipT8CYpx R+QI8p32AKwej0CA+1SqhtZsvMna8re1ARx14XOdJoSuKLXkczl1bFeggYGUNigu a55Rz4THKxokx7kFKsQ4dAlB0YGJKBokz5y55vW64uz3g2lY6qiZwcIx3fMRYYRR z8IwA0uZ6Nm8RLF6Fs+v7XucCHQkgjFUq43+781/GHiEbrOf2wO2rXsdcxoyqMVF fLh8rriIK9ONZYZcXIJX/yc3mkOPkld8sLAWAQxYifsuGkqXYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6xkDbv9JeyJmdmIA23jY0rFiNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjE5ZWQxZGEtYzk1Yy0z YWY2LTkyNDgtMzcwN2Y1MzAwOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsxjH8o97RjwUZxQGL6lSCSJgHgq/1P42TPsda/3XEVc1PU7WttC1dC nqF4Ka0Gt3MBnizeXudMD7cui/XJIruCg9lU3q5Krz5brFIV+p79hQBm3xvA2Aqm ciDh0AA9tl08/QybryrUebIRiK9o+fYz6ceqSBjJGN87anDQQIISY3AVbPsuixdP G3QJ7PlsRLLlFtG3QiTvOMMhWyaXStq/AzxcuhJz+xwZsMjZEFI2jG2qZ2eMbRpI ui1R6u93hXoAMnpiACtXBDn5eXg9hq9bVNXiG9VGoBh0JfSaKcDLXxUdDqvAVGz/ 92wouE/BeaiVvHvkbsfbXtlhkYFnSUs= -----END CERTIFICATE-----Generated at Sun Mar 1 21:15:24 2026 by rpki-client