$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa File: 3844cb66-4923-3faf-8c4d-519000648600.roa (raw, json) Hash identifier: AnucLtZkE5dxnAIkElQsWl7DgnftOS0YLbhhOAKd8nU= Subject key identifier: 54:C6:55:09:1E:1D:D2:C4:24:B1:EF:95:3F:04:58:3C:BE:79:37:9B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CE3620FFABC93793E31663B38 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa Signing time: Tue 17 Feb 2026 02:00:31 +0000 ROA not before: Tue 17 Feb 2026 02:00:31 +0000 ROA not after: Mon 18 May 2026 01:00:31 +0000 asID: 202 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:62:0f:fa:bc:93:79:3e:31:66:3b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 17 02:00:31 2026 GMT Not After : May 18 01:00:31 2026 GMT Subject: CN=20f58cb6-07a0-48cb-8b9a-754d7249aba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:29:fb:fc:14:a0:52:0c:c8:7a:29:38:8d:c1: ae:10:a1:5c:ac:44:46:f8:ef:92:89:dd:74:9e:5d: 73:dd:48:a7:c9:b1:b1:fc:86:9c:a9:08:45:e9:01: fe:5e:e9:45:2c:6c:55:69:bc:53:f9:d1:85:cd:ad: 6b:a4:52:33:5e:a5:ce:ba:a4:ea:58:ed:39:bb:96: 83:4b:20:fc:ac:a3:f8:ff:64:80:f3:41:ae:7f:7c: fa:ae:d8:83:9e:c8:b4:5f:2a:65:09:6f:97:0e:9f: 08:e4:79:07:a6:2a:55:6e:a8:c3:7a:92:c9:a1:b5: 4b:c1:a9:f5:11:67:62:f7:ca:e8:2e:83:e1:c5:50: 64:ea:61:c1:22:95:78:8f:3c:ce:c2:9e:5c:ee:02: e4:46:bc:8f:7c:2f:05:a9:63:9b:73:d4:8d:f2:96: a5:aa:0c:2f:2e:aa:2c:98:46:d3:61:aa:97:71:79: 47:a3:5f:c0:39:3f:19:73:4a:78:2a:77:83:85:42: 04:4a:72:c3:28:da:d5:fe:fb:e7:48:9e:a6:29:78: 8f:f1:e0:32:fd:52:d0:00:94:8f:9e:c9:9b:e8:6f: b4:40:6d:20:96:1e:45:54:a7:f9:17:16:9a:f6:1f: 15:a3:b2:8c:c7:8c:df:21:86:61:15:d8:44:9f:e7: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C6:55:09:1E:1D:D2:C4:24:B1:EF:95:3F:04:58:3C:BE:79:37:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:22:05:ad:70:1e:bf:c9:46:87:03:88:f2:bd:93:a5:3b:47: 70:0f:05:af:c1:f7:61:75:41:3a:25:61:e6:a2:4c:21:12:e4: 58:5c:6a:64:21:44:fb:3a:33:a5:72:87:21:96:b1:19:3f:f4: a9:41:54:e9:da:49:03:ec:2f:d1:4e:1f:2f:7f:ec:42:22:0d: a3:d6:54:7c:f8:18:fa:e1:cc:cc:0c:09:ed:58:88:db:fd:34: 16:0b:57:2e:10:bf:09:bf:02:62:df:f8:66:91:31:f9:e2:2d: b8:20:ef:54:57:6c:40:b5:5a:0e:b3:d2:df:8b:81:b3:7e:44: 00:58:04:7a:95:c8:7c:a0:3f:00:ba:f1:ab:52:38:df:72:e5: 3a:3b:4a:b9:58:7a:e5:12:02:56:d0:26:05:02:6d:55:98:5f: 41:12:68:7d:67:a8:87:43:7b:1f:c6:ae:04:5c:73:04:3e:37: 38:19:37:28:8a:e5:9d:5f:63:9c:48:56:16:81:7e:33:8c:f0: 53:3c:1e:cb:6a:fe:30:36:16:10:8c:f9:ed:21:7f:f3:59:0f: ac:37:71:da:bc:c8:ad:cd:ca:09:c6:26:e7:d7:78:4f:3a:43: 4d:c0:35:e8:13:82:c0:9f:97:4e:b9:90:4c:4d:32:b5:c6:6c: 35:ed:53:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzjYg/6vJN5PjFmOzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk MjBmNThjYjYtMDdhMC00OGNiLThiOWEtNzU0ZDcyNDlhYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjin7/BSgUgzIeik4jcGuEKFcrERG+O+Sid10 nl1z3UinybGx/IacqQhF6QH+XulFLGxVabxT+dGFza1rpFIzXqXOuqTqWO05u5aD SyD8rKP4/2SA80Guf3z6rtiDnsi0XyplCW+XDp8I5HkHpipVbqjDepLJobVLwan1 EWdi98roLoPhxVBk6mHBIpV4jzzOwp5c7gLkRryPfC8FqWObc9SN8palqgwvLqos mEbTYaqXcXlHo1/AOT8Zc0p4KneDhUIESnLDKNrV/vvnSJ6mKXiP8eAy/VLQAJSP nsmb6G+0QG0glh5FVKf5Fxaa9h8Vo7KMx4zfIYZhFdhEn+e88QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTGVQkeHdLEJLHvlT8EWDy+eTebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzg0NGNiNjYtNDkyMy0z ZmFmLThjNGQtNTE5MDAwNjQ4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4iBa1wHr/JRocDiPK9k6U7R3APBa/B92F1QTolYeaiTCES5FhcamQh RPs6M6VyhyGWsRk/9KlBVOnaSQPsL9FOHy9/7EIiDaPWVHz4GPrhzMwMCe1YiNv9 NBYLVy4Qvwm/AmLf+GaRMfniLbgg71RXbEC1Wg6z0t+LgbN+RABYBHqVyHygPwC6 8atSON9y5To7SrlYeuUSAlbQJgUCbVWYX0ESaH1nqIdDex/GrgRccwQ+NzgZNyiK 5Z1fY5xIVhaBfjOM8FM8Hstq/jA2FhCM+e0hf/NZD6w3cdq8yK3NygnGJufXeE86 Q03ANegTgsCfl065kExNMrXGbDXtU70= -----END CERTIFICATE-----Generated at Mon Mar 2 21:29:09 2026 by rpki-client