$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e1d923da-5465-3854-9de4-5bbaedd91b23.roa File: e1d923da-5465-3854-9de4-5bbaedd91b23.roa (raw, json) Hash identifier: 4dnd06RDscsD77jokmtqxkMNjsY7mVDFkXzvisb+Ys8= Subject key identifier: D0:D7:98:05:2D:69:30:CD:7A:7D:EB:31:80:19:BB:08:6A:73:59:2D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D55BA4920DE8277E8DBE73DF0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e1d923da-5465-3854-9de4-5bbaedd91b23.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 3360 IP address blocks: 20.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:49:20:de:82:77:e8:db:e7:3d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3788cbaf-7e1d-4d26-abdc-cf6cb1106d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b3:3a:03:9a:86:a7:52:73:80:66:98:6d:e7: 59:24:ee:ae:80:a2:11:b4:08:56:cb:b0:61:6f:6d: 71:e8:6b:14:3f:0e:51:fa:dc:97:55:f8:c5:d4:6d: d9:7e:85:fa:77:86:f3:ab:3b:a3:47:f6:bf:da:3c: c9:d2:72:57:84:8d:c7:b5:d2:d1:b1:54:56:fc:5b: 72:0b:d5:2a:51:f3:ac:d0:25:e3:dc:2c:a0:65:08: 24:f3:e0:06:40:9e:5e:4f:9f:a3:ff:ec:3c:0e:ab: 83:7d:06:6a:59:70:15:9d:9a:f5:a0:e7:aa:af:c8: f9:00:0a:40:88:87:36:a5:7b:93:9f:3d:e5:b5:51: a3:3e:41:3a:b6:5e:d1:62:4b:bf:ae:91:93:36:0a: 4a:8a:31:b5:f2:67:d8:6c:07:99:5f:a3:9f:e4:d7: d8:b8:21:ec:6e:94:fd:26:91:d3:bd:85:0e:91:ca: de:dd:86:f5:98:97:6a:79:8d:d6:0a:10:38:6f:f2: ac:fd:77:a8:39:f0:2b:22:14:28:d4:ab:c3:eb:92: ed:bd:85:24:46:f8:fe:b9:de:73:ae:e3:f4:88:3d: 14:68:7d:45:97:0d:37:68:c1:5c:3f:ce:63:9e:a2: a2:d3:b3:cd:74:7b:16:85:97:80:5c:e0:8b:39:51: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D7:98:05:2D:69:30:CD:7A:7D:EB:31:80:19:BB:08:6A:73:59:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e1d923da-5465-3854-9de4-5bbaedd91b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ea:8e:6e:fe:6b:fd:2c:0e:d3:3f:9a:be:d5:81:b4:9b:53: 56:e3:07:0b:76:e2:9b:91:9b:c3:71:5a:2a:fd:0b:a9:32:9e: ed:d3:9f:94:3c:3a:96:63:df:0f:cf:6a:91:4e:02:60:7e:d8: 7e:73:81:49:a4:2e:9d:6f:36:fe:df:c4:3e:c0:77:76:8a:fa: ce:20:67:97:29:6f:98:66:b8:0f:13:45:87:60:43:e5:6c:de: f8:63:8a:40:8b:39:79:5a:fe:2d:bd:4c:51:c1:16:b4:d9:e5: 3b:38:97:d1:04:1c:09:75:a8:e7:3b:69:58:9b:7e:84:23:5f: 49:e5:65:64:16:ab:c0:52:cb:58:c6:a3:8e:43:1c:f9:b4:4c: 1d:e0:0e:04:64:41:5e:4e:57:d1:78:8d:89:82:d7:74:5a:93: a5:c8:d7:0d:fe:d1:12:f2:dd:9e:22:38:18:77:b5:ed:bd:48: 9a:47:79:f1:e4:e8:6c:1a:52:9b:24:0b:db:5b:ba:33:07:cf: f5:72:ea:df:99:79:4a:8c:87:05:f5:d8:a9:5b:24:5b:be:d7: 22:6b:89:ad:20:8e:5b:c7:7f:ea:54:0b:42:48:d5:c1:56:60: 98:a8:13:f5:58:62:b6:7b:c3:ab:50:0e:99:13:f9:32:5e:bf: 0b:8b:ea:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vukkg3oJ36NvnPfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Mzc4OGNiYWYtN2UxZC00ZDI2LWFiZGMtY2Y2Y2IxMTA2ZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLM6A5qGp1JzgGaYbedZJO6ugKIRtAhWy7Bh b21x6GsUPw5R+tyXVfjF1G3ZfoX6d4bzqzujR/a/2jzJ0nJXhI3HtdLRsVRW/Fty C9UqUfOs0CXj3CygZQgk8+AGQJ5eT5+j/+w8DquDfQZqWXAVnZr1oOeqr8j5AApA iIc2pXuTnz3ltVGjPkE6tl7RYku/rpGTNgpKijG18mfYbAeZX6Of5NfYuCHsbpT9 JpHTvYUOkcre3Yb1mJdqeY3WChA4b/Ks/XeoOfArIhQo1KvD65LtvYUkRvj+ud5z ruP0iD0UaH1Flw03aMFcP85jnqKi07PNdHsWhZeAXOCLOVHA2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDXmAUtaTDNen3rMYAZuwhqc1ktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTFkOTIzZGEtNTQ2NS0z ODU0LTlkZTQtNWJiYWVkZDkxYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7qjm7+a/0sDtM/mr7VgbSbU1bjBwt24puRm8NxWir9C6kynu3Tn5Q8 OpZj3w/PapFOAmB+2H5zgUmkLp1vNv7fxD7Ad3aK+s4gZ5cpb5hmuA8TRYdgQ+Vs 3vhjikCLOXla/i29TFHBFrTZ5Ts4l9EEHAl1qOc7aVibfoQjX0nlZWQWq8BSy1jG o45DHPm0TB3gDgRkQV5OV9F4jYmC13Rak6XI1w3+0RLy3Z4iOBh3te29SJpHefHk 6GwaUpskC9tbujMHz/Vy6t+ZeUqMhwX12KlbJFu+1yJria0gjlvHf+pUC0JI1cFW YJioE/VYYrZ7w6tQDpkT+TJevwuL6i4= -----END CERTIFICATE-----Generated at Fri Apr 17 23:04:33 2026 by rpki-client