$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa File: 24f0832c-135e-30d8-934a-392b9947dce4.roa (raw, json) Hash identifier: XpdGbV5813SY575eVLyD33z4pEdYMbliZKYwQdPxkRU= Subject key identifier: 2B:C6:64:88:F3:8B:7C:5F:EE:01:AC:1C:A8:46:82:80:98:74:3A:23 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DF4DB60513B0085DFA2EFEF40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 3360 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:60:51:3b:00:85:df:a2:ef:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=ac434a14-9662-4267-b7c8-44cb720a8459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8f:41:61:9e:d6:fe:ea:28:ef:20:c5:ed:54: 1f:d6:e7:f1:c9:ed:83:36:9a:fd:18:45:db:e7:5b: 4f:e5:36:0f:23:e5:8a:a1:64:c5:c8:33:f7:b3:2b: cf:21:8a:41:6c:75:98:51:27:01:06:9e:3a:cc:16: 85:31:c7:b9:7a:0b:1d:cf:51:23:4f:08:4c:c6:a4: 11:df:0a:d9:a6:11:9e:58:c3:0b:9b:ef:19:2e:5e: af:8a:57:68:95:2e:28:e9:b2:f7:67:19:e3:70:b8: 10:1f:b3:78:18:24:5a:04:5a:0e:ea:6b:ae:fa:b1: 7c:40:0c:21:9b:37:59:2c:f0:8f:e9:21:b8:83:01: f6:23:db:0c:09:2d:7d:3a:11:2a:c1:e2:9e:cb:bf: cc:29:92:25:2b:d2:d5:4b:37:68:65:eb:0e:25:2a: 82:96:4c:d0:66:c5:9e:bc:68:b4:55:fb:07:1a:e4: 20:5f:10:3e:1f:30:ae:81:21:5b:ea:e5:56:8a:c4: bf:e3:9c:3f:73:c6:fb:f2:57:29:23:c2:92:35:7b: b9:7e:aa:70:13:53:06:2a:33:e5:f7:e1:ff:cc:50: 7d:07:0c:f8:da:07:0f:54:3d:bc:cf:a5:9f:60:ca: 56:c5:b5:b6:78:86:e5:40:98:6d:a2:f0:9e:7d:96: 60:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C6:64:88:F3:8B:7C:5F:EE:01:AC:1C:A8:46:82:80:98:74:3A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:38:e7:98:d6:86:a6:5a:8b:30:70:4e:fb:e2:cd:46:42:3c: 14:e2:f1:e0:cc:50:79:01:6b:cc:1a:94:9e:24:e4:4c:a3:26: a1:b3:20:b7:3b:9c:b9:5b:cb:6a:a2:07:07:04:99:47:06:f8: bd:ed:6b:d5:39:5e:14:56:9a:6f:67:66:93:68:7d:69:8a:af: d3:72:06:68:fc:14:e3:e9:18:d3:d4:98:b1:12:33:2f:05:34: 45:e5:99:79:24:cd:81:ef:57:57:f8:e8:28:99:32:82:01:c1: d9:0d:89:9c:69:17:28:50:b3:6a:40:55:2b:fc:bc:55:42:e7: 86:63:72:63:76:5d:22:0b:49:df:13:db:ce:3a:0a:d6:21:41: 8e:bc:f7:78:5d:25:46:ab:99:86:67:7a:d1:cb:78:ec:16:f0: b9:52:38:46:ad:85:c0:79:1e:cb:e8:05:95:89:4f:86:51:13: de:16:c3:ec:f1:5b:2f:03:c3:e7:c5:79:f6:d8:db:82:25:85: 5d:c8:61:d7:09:36:75:4c:dd:e9:98:fe:6c:2f:d7:33:dc:d1: 51:a1:ea:98:85:f5:21:d8:70:1e:d9:48:62:cb:5b:3f:c7:78: 05:2b:80:1d:5b:a3:56:39:71:eb:d6:8d:39:8d:e2:ab:43:8e: e8:0b:7c:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022BROwCF36Lv70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YWM0MzRhMTQtOTY2Mi00MjY3LWI3YzgtNDRjYjcyMGE4NDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY9BYZ7W/uoo7yDF7VQf1ufxye2DNpr9GEXb 51tP5TYPI+WKoWTFyDP3syvPIYpBbHWYUScBBp46zBaFMce5egsdz1EjTwhMxqQR 3wrZphGeWMMLm+8ZLl6vildolS4o6bL3ZxnjcLgQH7N4GCRaBFoO6muu+rF8QAwh mzdZLPCP6SG4gwH2I9sMCS19OhEqweKey7/MKZIlK9LVSzdoZesOJSqClkzQZsWe vGi0VfsHGuQgXxA+HzCugSFb6uVWisS/45w/c8b78lcpI8KSNXu5fqpwE1MGKjPl 9+H/zFB9Bwz42gcPVD28z6WfYMpWxbW2eIblQJhtovCefZZg8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvGZIjzi3xf7gGsHKhGgoCYdDojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjRmMDgzMmMtMTM1ZS0z MGQ4LTkzNGEtMzkyYjk5NDdkY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU455jWhqZaizBwTvvizUZCPBTi8eDMUHkBa8walJ4k5EyjJqGzILc7 nLlby2qiBwcEmUcG+L3ta9U5XhRWmm9nZpNofWmKr9NyBmj8FOPpGNPUmLESMy8F NEXlmXkkzYHvV1f46CiZMoIBwdkNiZxpFyhQs2pAVSv8vFVC54ZjcmN2XSILSd8T 2846CtYhQY6893hdJUarmYZnetHLeOwW8LlSOEathcB5HsvoBZWJT4ZRE94Ww+zx Wy8Dw+fFefbY24IlhV3IYdcJNnVM3emY/mwv1zPc0VGh6piF9SHYcB7ZSGLLWz/H eAUrgB1bo1Y5cevWjTmN4qtDjugLfPY= -----END CERTIFICATE-----Generated at Sun Jun 14 02:53:48 2026 by rpki-client