$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa File: 9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa (raw, json) Hash identifier: sVcL6lmwKGAlHFALrd/lxrqPGOo3aJ6wSNHkZ6cX7Z4= Subject key identifier: 2E:78:89:84:7F:58:F9:E7:66:44:24:3D:67:0F:61:69:D3:51:70:CC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CF5879CF95F188EAF5606F600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 4237 IP address blocks: 20.137.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:9c:f9:5f:18:8e:af:56:06:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=9aef28a6-a4bc-4721-abe6-b0cec13732e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:9b:09:5d:33:54:9e:98:92:ca:70:87:37: 0c:14:56:12:aa:31:92:a5:4c:e4:ef:59:21:53:d6: a1:7c:80:93:db:49:87:3c:db:1b:60:1e:b8:05:a5: 56:0b:22:6c:75:e8:e0:5a:18:13:25:b0:66:98:fc: 90:a2:15:a8:aa:a8:40:bf:ea:54:2b:f2:5b:09:7a: 63:2f:b4:dc:ae:22:b0:f3:61:c4:74:94:1e:16:8a: 2d:b7:32:5e:6a:4a:5e:2e:02:9c:cc:4e:4e:4c:44: be:3a:19:c7:e6:f3:d1:ea:e2:90:27:32:a1:a4:97: 16:00:b9:d4:d6:56:47:dc:5a:47:14:53:ad:0d:7e: 0f:47:64:89:86:cd:d1:4f:22:55:38:b9:6b:53:c7: 95:1f:18:02:44:51:96:9b:40:78:be:37:a4:12:c5: 08:ae:4e:d9:bb:08:cb:58:da:2b:45:c7:5b:65:ad: 14:90:dc:3c:14:14:60:15:54:d0:de:f7:1d:f8:07: ac:18:b7:fa:2c:3a:7a:ef:95:20:90:b5:64:84:5f: e9:57:8a:a1:0c:55:f7:5d:18:d6:5a:ad:2e:a8:e8: 52:38:79:a1:9e:e6:6b:aa:80:40:98:4f:a0:3e:f3: 01:1d:a9:b4:e3:33:9c:bc:0c:95:cf:bb:52:09:c8: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:78:89:84:7F:58:F9:E7:66:44:24:3D:67:0F:61:69:D3:51:70:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:73:96:83:59:a8:1b:c4:85:5b:e7:69:ea:7a:e2:d7:1e:be: 8d:ba:54:a9:5b:fa:b4:3f:b7:ac:55:15:30:5a:18:5d:60:01: 89:6a:18:cf:50:ce:5e:9d:b6:21:3a:ab:45:dc:d2:e1:1a:09: bb:6e:98:af:82:17:50:df:2c:0b:e4:87:0c:70:11:75:7b:ed: fe:3c:93:da:22:68:27:12:00:68:15:ae:9b:d2:fc:28:c6:d2: 89:45:1f:65:51:5b:5a:db:5e:2c:ad:5b:c3:3e:89:11:cf:fb: 64:38:b5:45:19:ba:ce:96:7a:ed:dc:83:3a:ce:34:9c:b3:e8: 3e:07:03:e1:b4:82:7c:0d:f5:00:e0:bf:eb:a4:0f:3e:b3:0c: 24:42:60:da:c5:4b:f2:70:95:21:bc:3b:d0:45:87:20:54:74: bb:2e:eb:ec:24:a9:6d:9a:ec:24:11:f2:3d:6f:73:55:d2:24: 2a:f2:df:c6:24:8a:73:56:af:c2:4b:24:76:cc:2f:87:f8:65: 8b:55:89:bc:91:46:48:db:52:3a:5e:24:f1:e1:0a:20:6f:23: 8e:26:d5:f4:5f:4d:b7:d6:cc:c1:6c:3b:1f:25:1c:6c:82:66: 51:86:9b:80:5d:b8:d9:33:57:a1:bd:d0:1c:78:b5:02:8a:ce: 36:34:cd:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5z5XxiOr1YG9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk OWFlZjI4YTYtYTRiYy00NzIxLWFiZTYtYjBjZWMxMzczMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBKbCV0zVJ6YkspwhzcMFFYSqjGSpUzk71kh U9ahfICT20mHPNsbYB64BaVWCyJsdejgWhgTJbBmmPyQohWoqqhAv+pUK/JbCXpj L7TcriKw82HEdJQeFoottzJeakpeLgKczE5OTES+OhnH5vPR6uKQJzKhpJcWALnU 1lZH3FpHFFOtDX4PR2SJhs3RTyJVOLlrU8eVHxgCRFGWm0B4vjekEsUIrk7ZuwjL WNorRcdbZa0UkNw8FBRgFVTQ3vcd+AesGLf6LDp675UgkLVkhF/pV4qhDFX3XRjW Wq0uqOhSOHmhnuZrqoBAmE+gPvMBHam04zOcvAyVz7tSCcj0DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC54iYR/WPnnZkQkPWcPYWnTUXDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWY4MGE4YjMtMzNhNC0z OGJhLWI0NjQtMGQxMTUyZDFlMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJzloNZqBvEhVvnaep64tcevo26VKlb+rQ/t6xVFTBaGF1gAYlqGM9Q zl6dtiE6q0Xc0uEaCbtumK+CF1DfLAvkhwxwEXV77f48k9oiaCcSAGgVrpvS/CjG 0olFH2VRW1rbXiytW8M+iRHP+2Q4tUUZus6Weu3cgzrONJyz6D4HA+G0gnwN9QDg v+ukDz6zDCRCYNrFS/JwlSG8O9BFhyBUdLsu6+wkqW2a7CQR8j1vc1XSJCry38Yk inNWr8JLJHbML4f4ZYtVibyRRkjbUjpeJPHhCiBvI44m1fRfTbfWzMFsOx8lHGyC ZlGGm4BduNkzV6G90Bx4tQKKzjY0zYg= -----END CERTIFICATE-----Generated at Sun Mar 1 21:13:52 2026 by rpki-client