$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f53243-f56a-3ac2-9bea-227907a4d81c.roa File: 38f53243-f56a-3ac2-9bea-227907a4d81c.roa (raw, json) Hash identifier: b3Hh0colzMNoYXGi0UkIaVFm6XqommJ73Aj69gx+Q9s= Subject key identifier: D7:60:FB:DD:60:39:A5:30:4C:DB:A4:44:79:FD:A2:37:65:8D:A6:2E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D59EA6A5FF2C4A19597F10400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f53243-f56a-3ac2-9bea-227907a4d81c.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 203 IP address blocks: 20.134.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6a:5f:f2:c4:a1:95:97:f1:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=6ccbab65-b266-48f4-b718-632e07ef5c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:2d:6b:8f:7b:42:df:52:4e:9d:a5:79:ca: 9b:74:49:e4:39:5a:a1:0b:44:3d:3a:33:6b:2d:fc: 01:20:73:80:96:5f:d1:c4:8e:c2:f5:7d:ca:38:16: 6a:dc:88:f3:d9:89:a6:96:c3:9d:a6:04:dd:27:5b: 15:e6:71:00:3d:a6:4e:f8:ad:cd:05:62:7c:55:2d: 43:2c:84:e1:e7:a3:97:f4:bf:e8:65:39:95:c6:26: c8:30:b6:31:d7:a9:c8:13:81:15:ef:7d:d6:68:92: a4:b0:98:51:42:a0:b0:0e:2f:40:49:c5:af:55:b9: d6:71:dd:b2:eb:87:96:8e:43:54:7b:d9:cb:5c:bc: 70:a4:68:ef:ad:f3:45:ec:fa:53:a3:4e:df:5d:1a: 38:6e:86:90:ad:2d:2a:fb:cf:e0:44:1e:06:a3:0b: f8:eb:fb:c1:63:4d:87:22:99:d0:23:0d:b8:01:ac: 96:69:a0:6b:b4:27:52:56:53:36:f8:ae:f1:f8:43: f6:eb:f7:aa:cf:4c:2b:09:78:56:f8:1f:13:f3:af: 5e:e1:04:59:2b:4e:8e:0b:33:ee:41:11:c8:98:65: 8c:a5:09:31:77:af:fe:83:47:c6:a1:dc:fa:91:eb: 5d:41:a8:51:d9:54:c5:1c:1a:6d:e4:27:df:0f:a0: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:60:FB:DD:60:39:A5:30:4C:DB:A4:44:79:FD:A2:37:65:8D:A6:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f53243-f56a-3ac2-9bea-227907a4d81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b7:67:e2:17:72:dc:7c:39:d8:8f:da:22:31:7d:aa:f1:3a: 8a:7f:e4:e2:cd:68:e8:ab:81:22:5c:d3:6c:83:74:73:62:42: 9c:48:17:91:34:5d:f4:7c:29:cb:a9:14:32:9d:54:94:58:0a: 4c:51:5c:c4:8b:d5:47:cb:43:2d:89:d8:c0:e3:6b:8e:96:5f: 6a:a5:41:16:7b:d7:76:f3:f2:fd:e2:f6:fc:a4:78:09:ea:ff: 20:37:dd:e0:9e:42:df:38:06:b3:61:f5:20:eb:37:ef:9d:ac: 9e:65:5b:8e:62:a4:4a:06:c4:c9:56:9e:e8:cf:5e:9e:3d:76: 65:8b:22:70:30:70:b8:2f:52:e1:68:fb:d2:d3:31:1f:3a:a1: 8d:8e:0c:c0:1d:1b:b6:81:73:5e:1e:d7:ef:6c:5e:aa:2d:9b: 39:16:d9:01:22:11:a9:2f:e6:d6:8c:fe:4b:56:22:9f:8b:16: 9c:17:41:71:d5:7a:e1:95:2c:e8:f0:ac:64:fd:94:49:8d:1d: 97:09:56:42:33:93:9e:fe:96:0c:06:80:24:f2:3c:59:b9:3d: 12:0d:a2:58:be:b7:58:cb:05:14:c8:35:bf:80:5b:94:8c:e3: e8:01:72:55:c3:45:61:33:2d:13:44:c1:60:66:8e:2c:a1:cb: b1:62:fe:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mpf8sShlZfxBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NmNjYmFiNjUtYjI2Ni00OGY0LWI3MTgtNjMyZTA3ZWY1YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Eta497Qt9STp2lecqbdEnkOVqhC0Q9OjNr LfwBIHOAll/RxI7C9X3KOBZq3Ijz2YmmlsOdpgTdJ1sV5nEAPaZO+K3NBWJ8VS1D LITh56OX9L/oZTmVxibIMLYx16nIE4EV733WaJKksJhRQqCwDi9AScWvVbnWcd2y 64eWjkNUe9nLXLxwpGjvrfNF7PpTo07fXRo4boaQrS0q+8/gRB4Gowv46/vBY02H IpnQIw24AayWaaBrtCdSVlM2+K7x+EP26/eqz0wrCXhW+B8T869e4QRZK06OCzPu QRHImGWMpQkxd6/+g0fGodz6ketdQahR2VTFHBpt5CffD6AFUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdg+91gOaUwTNukRHn9ojdljaYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhmNTMyNDMtZjU2YS0z YWMyLTliZWEtMjI3OTA3YTRkODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW3Z+IXctx8OdiP2iIxfarxOop/5OLNaOirgSJc02yDdHNiQpxIF5E0 XfR8KcupFDKdVJRYCkxRXMSL1UfLQy2J2MDja46WX2qlQRZ713bz8v3i9vykeAnq /yA33eCeQt84BrNh9SDrN++drJ5lW45ipEoGxMlWnujPXp49dmWLInAwcLgvUuFo +9LTMR86oY2ODMAdG7aBc14e1+9sXqotmzkW2QEiEakv5taM/ktWIp+LFpwXQXHV euGVLOjwrGT9lEmNHZcJVkIzk57+lgwGgCTyPFm5PRINoli+t1jLBRTINb+AW5SM 4+gBclXDRWEzLRNEwWBmjiyhy7Fi/qA= -----END CERTIFICATE-----Generated at Sat Apr 18 00:43:12 2026 by rpki-client