$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa File: 023b5472-f6c0-3095-80c3-7b022b15a339.roa (raw, json) Hash identifier: sVVJATRQyhPapu3yo3+kwRtdXOAuGvg3Egj9py9pPOU= Subject key identifier: 62:6F:0C:EF:7A:DA:ED:2F:33:C4:A0:EF:DE:07:12:ED:98:CD:85:50 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D143D4A2AD9CB1E5EDB7B5200 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 203 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4a:2a:d9:cb:1e:5e:db:7b:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=fdbc55f3-3cfa-41ae-987d-a08b955ceb19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:9d:6e:ba:22:e3:ca:aa:d7:d8:95:b6:1a: 28:ab:e4:56:cc:a2:cd:86:20:70:2e:0e:88:7a:98: 2d:e4:75:ef:b2:af:68:43:6c:07:79:a6:a4:1f:77: f1:3b:9d:aa:58:cf:cc:9a:2b:31:ff:4c:f8:03:ca: b7:c3:e4:21:b7:7e:ba:a4:ab:cc:4d:31:e6:26:1f: 9c:92:bf:4b:11:ce:d4:b4:4e:87:d2:82:ec:5a:8a: aa:59:76:86:8f:ac:1f:90:d6:e8:ed:1d:4c:48:69: 38:ed:c1:58:8c:7d:c6:6a:a5:7a:f0:bc:31:0f:16: 47:c3:d3:a6:09:70:9a:20:29:c7:5e:f5:9e:41:99: af:29:ba:61:67:e5:00:79:38:1b:95:68:4c:0b:f2: 21:27:71:79:14:1c:ac:e7:7f:7c:00:98:d2:6d:58: 40:27:18:c9:14:c8:6b:21:14:a1:59:53:11:74:1f: 6e:8d:44:5c:2b:62:63:22:17:35:d8:f3:ca:43:e7: 6d:2e:8b:b4:c1:d4:89:09:86:bd:83:99:36:89:75: 92:c6:6c:43:eb:38:d6:6a:3a:19:1f:fd:0e:46:5b: a6:7b:7c:ea:68:80:96:50:ac:e0:68:19:b7:9a:39: 2f:9b:34:e6:e7:b6:1a:5f:b0:1d:95:b0:2c:c2:65: 1e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6F:0C:EF:7A:DA:ED:2F:33:C4:A0:EF:DE:07:12:ED:98:CD:85:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:01:04:58:54:7b:7f:31:33:fe:46:19:f5:e7:d2:53:08:5a: 5e:48:a1:e5:5e:52:85:b7:de:1f:02:ae:10:42:d7:fb:ec:10: 59:b0:12:6e:28:c6:2e:68:33:b1:1a:92:97:c2:e2:8b:ff:48: c4:d6:64:9b:49:3e:b2:a4:4f:b7:ee:5f:f4:a9:e1:13:6c:54: b6:7a:7f:1b:5c:a0:59:92:d2:fc:53:9d:0e:d3:ac:a4:79:f9: 24:e7:36:e7:b2:de:6d:df:5d:10:ae:8f:18:f1:e5:fc:04:2c: 24:c7:79:6b:71:19:e5:8e:40:0d:f3:5b:a0:f5:de:2e:1d:74: e6:8e:94:ab:76:67:0c:d0:a3:d0:91:33:da:57:a5:45:25:e9: 32:ae:8e:e9:e3:a4:bf:10:ce:29:06:03:b9:52:f2:59:98:a2: 50:90:bc:47:50:fd:6f:08:6c:6e:fa:8e:89:e5:c9:63:1e:1d: d1:02:6a:85:f6:ea:ba:ac:26:77:27:58:13:8e:51:b9:a6:7b: 1c:45:55:36:8a:3d:8e:96:ed:71:5a:2d:85:5a:d5:40:b1:1e: 8c:a8:06:d6:b1:b9:4c:39:70:c6:02:7d:10:0e:de:de:a5:46: 89:9b:77:39:43:0b:29:a9:6f:e7:2f:23:b2:a7:26:47:25:c0: 20:d2:44:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUoq2cseXtt7UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmRiYzU1ZjMtM2NmYS00MWFlLTk4N2QtYTA4Yjk1NWNlYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C6dbroi48qq19iVthooq+RWzKLNhiBwLg6I epgt5HXvsq9oQ2wHeaakH3fxO52qWM/Mmisx/0z4A8q3w+Qht366pKvMTTHmJh+c kr9LEc7UtE6H0oLsWoqqWXaGj6wfkNbo7R1MSGk47cFYjH3GaqV68LwxDxZHw9Om CXCaICnHXvWeQZmvKbphZ+UAeTgblWhMC/IhJ3F5FBys5398AJjSbVhAJxjJFMhr IRShWVMRdB9ujURcK2JjIhc12PPKQ+dtLou0wdSJCYa9g5k2iXWSxmxD6zjWajoZ H/0ORlume3zqaICWUKzgaBm3mjkvmzTm57YaX7AdlbAswmUeMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJvDO962u0vM8Sg794HEu2YzYVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDIzYjU0NzItZjZjMC0z MDk1LTgwYzMtN2IwMjJiMTVhMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsBBFhUe38xM/5GGfXn0lMIWl5IoeVeUoW33h8CrhBC1/vsEFmwEm4o xi5oM7EakpfC4ov/SMTWZJtJPrKkT7fuX/Sp4RNsVLZ6fxtcoFmS0vxTnQ7TrKR5 +STnNuey3m3fXRCujxjx5fwELCTHeWtxGeWOQA3zW6D13i4ddOaOlKt2ZwzQo9CR M9pXpUUl6TKujunjpL8QzikGA7lS8lmYolCQvEdQ/W8IbG76jonlyWMeHdECaoX2 6rqsJncnWBOOUbmmexxFVTaKPY6W7XFaLYVa1UCxHoyoBtaxuUw5cMYCfRAO3t6l RombdzlDCympb+cvI7KnJkclwCDSREc= -----END CERTIFICATE-----Generated at Thu Mar 26 23:26:57 2026 by rpki-client