$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d3ef49cd-8608-350f-8c72-87aecbe7971d.roa File: d3ef49cd-8608-350f-8c72-87aecbe7971d.roa (raw, json) Hash identifier: doSXd+/5jKohujDv9ltNcqLF92PvlQfLENcU80jJYco= Subject key identifier: 9E:0E:5E:10:19:DD:73:9E:28:41:A5:6B:67:E6:A4:AC:F6:AF:BA:34 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CC7772280A651D6830B450C70 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d3ef49cd-8608-350f-8c72-87aecbe7971d.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 203 IP address blocks: 20.138.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:22:80:a6:51:d6:83:0b:45:0c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=9feaa49d-510c-49c5-be83-f866938f9f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:eb:68:df:cd:24:34:8e:3b:55:69:10:1f: a9:c8:27:7e:f9:e4:7d:42:b7:29:dd:cd:63:ac:c3: 53:91:c5:d4:0d:17:91:a4:71:13:f6:62:0c:fd:15: 70:6a:65:7b:87:b9:0f:a7:c2:13:96:76:7d:e7:ee: ac:19:64:c7:36:a5:f2:c0:54:a4:b2:33:89:ee:f1: 64:26:4f:a3:4c:a8:6d:f1:50:53:83:02:35:40:34: 08:dd:94:31:20:92:98:2a:cc:7b:38:61:53:f8:dc: 87:6b:ec:a6:ca:21:19:29:62:4c:52:fe:f6:3a:3a: fc:84:1d:38:74:98:99:a0:e1:67:5c:8f:ca:ee:4e: 61:e4:f8:6d:f6:ba:1b:54:48:1a:22:14:82:27:ed: 73:67:39:2d:ec:a8:da:52:9c:02:a0:25:2b:e4:4b: da:6a:a0:7d:66:08:c4:40:ad:68:25:0c:5d:51:af: c1:bf:5b:49:ab:55:09:ef:dc:c9:96:09:8d:c5:c0: db:7a:79:84:22:23:14:2c:d1:e0:4b:b5:d3:7d:c1: 36:7b:5a:50:40:f0:64:5a:cf:3d:9d:35:16:e2:b1: 20:5f:1e:30:99:94:b9:1b:b9:e7:f6:15:39:02:f6: 25:ba:6a:fa:17:04:20:5e:ce:75:b3:89:e3:13:01: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0E:5E:10:19:DD:73:9E:28:41:A5:6B:67:E6:A4:AC:F6:AF:BA:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d3ef49cd-8608-350f-8c72-87aecbe7971d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:58:80:5e:30:98:44:b0:22:38:4c:e6:f7:5d:20:a0:73:d0: 3b:e3:78:99:2c:e1:2d:95:e8:96:1f:39:79:63:c0:ed:4f:e5: 88:ac:d4:c3:29:5b:7f:af:b2:72:d6:22:ee:33:8f:ee:c0:37: 9d:f9:a5:c8:ef:0b:09:0f:7e:f1:e8:a1:a8:8a:31:49:f4:6c: 3e:1e:26:30:ac:34:66:7d:a6:c0:41:5c:7d:fc:90:9d:ca:19: 31:ad:fe:50:a8:62:25:b0:e3:f9:23:3d:5d:51:0b:4e:e4:3f: e6:71:df:e5:ea:a1:cf:10:88:fc:36:1a:37:6d:a0:e0:a9:11: 6f:ff:a7:14:e5:b3:e7:ca:74:93:0d:7a:8e:b3:ea:56:49:ec: 91:1b:e6:d0:09:96:63:71:c3:fe:e1:f7:dd:cd:a9:c9:b5:e0: 48:0e:0e:78:7b:d9:55:85:59:7f:35:97:c9:cf:de:1b:7b:1d: 35:c2:6f:5c:46:48:87:04:ca:9c:70:54:2b:09:41:2c:e7:7c: b6:cf:9a:d6:86:06:21:b0:33:2b:eb:ff:85:2c:4d:54:34:bf: c6:93:42:be:5a:43:f4:e6:9f:56:80:74:a9:5e:b8:af:28:d4: bb:69:7e:e1:19:8e:ae:80:56:93:e0:c4:6a:07:ae:5b:88:bc: e6:bc:b1:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHdyKAplHWgwtFDHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk OWZlYWE0OWQtNTEwYy00OWM1LWJlODMtZjg2NjkzOGY5ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNnraN/NJDSOO1VpEB+pyCd++eR9Qrcp3c1j rMNTkcXUDReRpHET9mIM/RVwamV7h7kPp8ITlnZ95+6sGWTHNqXywFSksjOJ7vFk Jk+jTKht8VBTgwI1QDQI3ZQxIJKYKsx7OGFT+NyHa+ymyiEZKWJMUv72Ojr8hB04 dJiZoOFnXI/K7k5h5Pht9robVEgaIhSCJ+1zZzkt7KjaUpwCoCUr5EvaaqB9ZgjE QK1oJQxdUa/Bv1tJq1UJ79zJlgmNxcDbenmEIiMULNHgS7XTfcE2e1pQQPBkWs89 nTUW4rEgXx4wmZS5G7nn9hU5AvYlumr6FwQgXs51s4njEwErPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4OXhAZ3XOeKEGla2fmpKz2r7o0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDNlZjQ5Y2QtODYwOC0z NTBmLThjNzItODdhZWNiZTc5NzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIr2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxYgF4wmESwIjhM5vddIKBz0DvjeJks4S2V6JYfOXljwO1P5Yis1MMp W3+vsnLWIu4zj+7AN535pcjvCwkPfvHooaiKMUn0bD4eJjCsNGZ9psBBXH38kJ3K GTGt/lCoYiWw4/kjPV1RC07kP+Zx3+Xqoc8QiPw2GjdtoOCpEW//pxTls+fKdJMN eo6z6lZJ7JEb5tAJlmNxw/7h993Nqcm14EgODnh72VWFWX81l8nP3ht7HTXCb1xG SIcEypxwVCsJQSznfLbPmtaGBiGwMyvr/4UsTVQ0v8aTQr5aQ/Tmn1aAdKleuK8o 1LtpfuEZjq6AVpPgxGoHrluIvOa8sS4= -----END CERTIFICATE-----Generated at Sun Mar 1 21:12:47 2026 by rpki-client