$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa File: d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa (raw, json) Hash identifier: EAFlV1dDyxZe5B2XAbM5rLV/4GlgbD2qF3D+bEqzZ1Q= Subject key identifier: A3:F4:B3:69:F5:5C:4D:BF:84:67:BC:66:A3:81:A5:1B:CE:DF:98:84 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E18AF025CE8ACE23479172100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 3360 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:af:02:5c:e8:ac:e2:34:79:17:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=49910756-3527-4366-8470-71014cdeeb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:57:13:a0:01:f7:f8:15:99:50:8e:ea:f2: e8:7a:51:37:ec:c9:ab:66:0c:4d:7f:06:46:bb:16: 57:23:ad:a1:f3:a0:77:1e:9b:36:59:f0:65:7e:1c: 3a:87:32:6b:b3:5c:f5:e9:49:19:c2:9a:de:e9:28: 8f:15:da:86:89:9c:0f:6b:76:ea:b3:08:21:32:97: b8:5a:8f:bb:94:53:8a:dd:8d:3a:71:3b:2d:ce:80: cc:96:8e:8d:65:cf:65:31:38:1f:d0:13:ef:b3:09: d8:2f:63:3e:d9:62:e9:4a:bb:08:9b:5c:02:e0:c0: 75:4a:3c:a9:da:85:ce:39:e7:42:c8:c7:86:bd:ae: 95:b9:40:d8:c1:13:4a:55:d8:10:98:d5:50:3b:30: 26:05:80:08:9b:4a:ee:bb:ed:60:d1:a6:12:76:63: 08:1f:20:23:d7:e3:4f:7e:f5:a0:2a:9c:8d:88:4e: e1:9c:9c:19:20:8e:1d:ee:d3:8d:5e:94:15:1d:5c: 98:5f:8d:7c:c8:0d:85:72:f0:06:8a:dc:12:f4:8d: 51:2f:65:18:ac:75:c9:23:4a:d5:a5:83:ae:00:e6: 30:41:0a:7a:07:48:b8:ca:c2:9b:93:39:37:83:9f: ca:9e:05:d8:b5:46:89:71:09:e2:75:81:99:80:f2: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F4:B3:69:F5:5C:4D:BF:84:67:BC:66:A3:81:A5:1B:CE:DF:98:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2d:f1:df:31:90:a2:22:fc:f5:ef:2e:bf:2d:67:71:43:24: a3:e1:df:f9:ea:34:e2:b1:16:b5:fb:ba:c6:f2:08:b9:dd:21: 6e:fb:7c:97:8c:ec:c8:a7:42:9b:81:cb:cf:ca:31:d6:2c:93: 94:74:33:70:f7:c5:ad:f1:ce:04:2e:b5:98:73:64:5a:d3:02: 2f:ca:02:7d:2b:e8:68:0f:24:61:61:5b:99:57:28:01:cf:f1: 1c:02:b3:7e:52:3b:7e:ae:54:56:a4:60:67:76:af:6e:41:75: bf:9b:df:a7:f4:f0:24:92:96:64:a0:44:bf:41:d7:f1:10:f0: cc:a8:ed:80:82:c4:48:4e:ee:29:91:05:df:a7:8c:55:b5:f1: 1f:33:02:04:52:a9:21:65:f4:ec:49:fc:49:65:80:64:f6:5c: 47:a8:17:22:cb:72:19:3c:0d:b3:a8:08:97:f9:ec:ff:1c:0e: b9:3b:44:b5:c4:79:b8:ba:4e:0b:59:10:b8:f8:e9:b7:68:33: 5a:a8:d9:bb:2e:5a:e5:8a:fd:fc:a8:b4:b4:82:2e:0b:5b:74: 83:cf:30:2a:62:d2:bf:b6:f8:c6:23:02:b4:a2:7f:14:50:73: 0c:9c:93:0e:9b:4e:c4:e0:85:cd:a3:cd:f4:6e:89:9a:7d:ae: b5:ac:97:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrwJc6KziNHkXIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk NDk5MTA3NTYtMzUyNy00MzY2LTg0NzAtNzEwMTRjZGVlYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYJXE6AB9/gVmVCO6vLoelE37MmrZgxNfwZG uxZXI62h86B3Hps2WfBlfhw6hzJrs1z16UkZwpre6SiPFdqGiZwPa3bqswghMpe4 Wo+7lFOK3Y06cTstzoDMlo6NZc9lMTgf0BPvswnYL2M+2WLpSrsIm1wC4MB1Sjyp 2oXOOedCyMeGva6VuUDYwRNKVdgQmNVQOzAmBYAIm0ruu+1g0aYSdmMIHyAj1+NP fvWgKpyNiE7hnJwZII4d7tONXpQVHVyYX418yA2FcvAGitwS9I1RL2UYrHXJI0rV pYOuAOYwQQp6B0i4ysKbkzk3g5/KngXYtUaJcQnidYGZgPL9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP0s2n1XE2/hGe8ZqOBpRvO35iEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDhhODg5NGQtZDAzNC0z OWM3LWFhNzEtY2UzOWZiMGQ4YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgt8d8xkKIi/PXvLr8tZ3FDJKPh3/nqNOKxFrX7usbyCLndIW77fJeM 7MinQpuBy8/KMdYsk5R0M3D3xa3xzgQutZhzZFrTAi/KAn0r6GgPJGFhW5lXKAHP 8RwCs35SO36uVFakYGd2r25Bdb+b36f08CSSlmSgRL9B1/EQ8Myo7YCCxEhO7imR Bd+njFW18R8zAgRSqSFl9OxJ/EllgGT2XEeoFyLLchk8DbOoCJf57P8cDrk7RLXE ebi6TgtZELj46bdoM1qo2bsuWuWK/fyotLSCLgtbdIPPMCpi0r+2+MYjArSifxRQ cwyckw6bTsTghc2jzfRuiZp9rrWsl90= -----END CERTIFICATE-----Generated at Sun Jun 14 00:56:36 2026 by rpki-client