$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa File: b52783db-6e4d-373b-ae95-1528b234da8f.roa (raw, json) Hash identifier: HRovOPfz/ZC8vEjGZ+6fgfLpaKMv+hGz7UU2qgKh/2Q= Subject key identifier: BC:AF:D8:9F:75:20:27:DA:E9:7E:3A:57:8C:A7:75:AD:4E:58:6C:16 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CAE572F2A836332EC9EB5A960 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 203 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:2f:2a:83:63:32:ec:9e:b5:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d5b9062c-b2ca-4930-9b4d-dc460ef237d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:2e:ce:f1:98:27:09:e2:f2:de:5e:c9:1b:cd: 1d:7b:13:e3:02:ae:1d:c3:ac:ce:33:a4:37:2f:93: e5:5f:20:0c:4d:b9:e1:dc:09:6f:e9:dd:5e:79:18: 00:40:00:d8:cd:33:88:ee:06:54:c5:23:27:7e:30: 68:ba:8d:ff:8e:dd:3a:bc:87:1a:db:65:69:ae:8a: cf:a4:dd:db:21:a1:7b:38:5b:bd:1f:fd:f9:40:5b: da:d1:55:0b:8c:c3:bd:72:28:44:0e:a7:a1:a7:d3: 43:98:16:d1:f8:84:00:6e:6a:02:14:80:00:92:38: 9d:77:88:41:14:eb:a1:04:3b:82:90:01:95:6f:ab: 5c:60:07:86:d6:4f:9e:5e:fd:6f:82:f9:9c:22:01: ba:fc:f8:21:17:95:6e:57:45:b1:a1:d0:f0:7e:73: 47:76:99:37:17:fc:b9:22:f5:3a:f6:fa:a0:7c:e3: 9e:ca:13:4a:44:e4:b0:4b:25:b1:99:ff:5f:6b:87: 71:d9:f0:59:de:87:a8:10:9f:71:0b:7c:22:bb:e6: d4:bb:18:95:d4:44:88:22:04:c6:7c:80:71:4f:58: d6:e1:16:5a:48:98:7d:f9:d7:87:4e:6a:92:1e:cf: 04:da:dc:1c:80:36:58:22:98:d1:70:44:17:c5:39: 2a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AF:D8:9F:75:20:27:DA:E9:7E:3A:57:8C:A7:75:AD:4E:58:6C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c6:8b:22:6a:f9:5b:1b:95:55:5c:83:87:45:57:f8:e4:8c: 42:64:f5:36:b6:7e:f0:1a:5d:49:94:68:22:92:c5:88:e8:4b: aa:9f:b0:79:25:f5:9e:e6:a5:cc:bc:e2:44:0f:db:d8:2b:08: 4e:37:cb:39:e8:61:a5:fd:90:c3:3a:13:7d:6b:89:d2:9c:3a: 0b:c4:c2:0d:64:14:23:59:71:36:82:bc:da:b0:53:76:a7:2a: 56:a9:8d:ef:b2:32:47:72:7a:47:c7:86:a8:5b:27:be:e0:4b: 42:17:9c:20:20:0e:e8:3c:9a:34:25:62:cf:0a:53:39:8e:2e: 84:3e:31:77:61:50:ed:d1:b4:b3:2d:66:da:c1:3a:85:48:a4: fc:61:a5:6f:9f:87:e9:07:f8:6b:30:05:4c:ba:e9:a5:87:e6: f2:07:57:c8:65:32:16:97:34:37:ed:10:9d:98:8d:62:af:45: 65:5f:ca:0a:26:8f:29:f8:2a:b4:8b:89:2a:fe:f3:eb:b8:e3: 7e:d4:80:1a:93:e8:36:53:52:80:99:41:54:cf:d4:57:0e:4e: 92:88:97:54:a2:dd:92:35:bf:ea:67:73:07:ef:17:d6:a2:cb: 90:e6:d1:62:29:73:28:6f:36:dc:6f:26:c1:db:40:a2:4b:53: 82:39:43:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVy8qg2My7J61qWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDViOTA2MmMtYjJjYS00OTMwLTliNGQtZGM0NjBlZjIzN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/i7O8ZgnCeLy3l7JG80dexPjAq4dw6zOM6Q3 L5PlXyAMTbnh3Alv6d1eeRgAQADYzTOI7gZUxSMnfjBouo3/jt06vIca22VprorP pN3bIaF7OFu9H/35QFva0VULjMO9cihEDqehp9NDmBbR+IQAbmoCFIAAkjidd4hB FOuhBDuCkAGVb6tcYAeG1k+eXv1vgvmcIgG6/PghF5VuV0WxodDwfnNHdpk3F/y5 IvU69vqgfOOeyhNKROSwSyWxmf9fa4dx2fBZ3oeoEJ9xC3wiu+bUuxiV1ESIIgTG fIBxT1jW4RZaSJh9+deHTmqSHs8E2twcgDZYIpjRcEQXxTkqOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyv2J91ICfa6X46V4ynda1OWGwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjUyNzgzZGItNmU0ZC0z NzNiLWFlOTUtMTUyOGIyMzRkYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDGiyJq+VsblVVcg4dFV/jkjEJk9Ta2fvAaXUmUaCKSxYjoS6qfsHkl 9Z7mpcy84kQP29grCE43yznoYaX9kMM6E31ridKcOgvEwg1kFCNZcTaCvNqwU3an Klapje+yMkdyekfHhqhbJ77gS0IXnCAgDug8mjQlYs8KUzmOLoQ+MXdhUO3RtLMt ZtrBOoVIpPxhpW+fh+kH+GswBUy66aWH5vIHV8hlMhaXNDftEJ2YjWKvRWVfygom jyn4KrSLiSr+8+u4437UgBqT6DZTUoCZQVTP1FcOTpKIl1Si3ZI1v+pncwfvF9ai y5Dm0WIpcyhvNtxvJsHbQKJLU4I5Qyw= -----END CERTIFICATE-----Generated at Tue Mar 3 03:49:59 2026 by rpki-client