$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa File: 21be8a54-9d15-3bcf-b328-06e1c263d460.roa (raw, json) Hash identifier: MU9jR45uVXWnB/fKhu8Mde+qa1XvHT355z1dAXkVQgs= Subject key identifier: B2:E6:B8:72:E0:1B:0F:7B:07:A5:72:85:4D:B6:20:45:94:3C:62:C2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D143D4A0AE14D512E6A521380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 3356 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4a:0a:e1:4d:51:2e:6a:52:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=8516f496-1406-41aa-8ce3-0be933f2f943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5b:9b:3d:f9:95:26:eb:9b:af:9f:95:78:27: 9f:17:2a:5b:99:db:ee:81:ea:dd:af:62:c6:69:64: a3:b8:3d:60:94:64:35:9d:73:ad:36:2c:cd:f1:43: af:58:24:69:00:c5:0b:3e:aa:cd:4e:9d:b6:d7:96: a4:0a:53:51:3b:14:a7:42:ae:19:d1:ac:11:88:1c: 37:08:55:c0:0b:b7:8d:80:85:ce:35:f7:6c:c5:80: 29:f2:12:af:c6:cc:45:8c:c1:96:b5:7c:f9:d8:17: ad:d8:5a:e3:a1:ba:41:c7:3a:0d:2c:95:5b:5b:a3: 7b:8e:ce:4b:c1:1d:c1:be:6a:56:f4:c4:2a:b7:e4: 79:eb:3c:e4:10:8b:9f:9b:6f:d0:af:d6:56:4b:13: e2:d1:08:3d:73:a6:5e:82:b9:2b:3d:47:85:77:9b: fd:47:b5:bf:ce:fa:68:c3:44:ab:dd:61:44:0a:d6: 59:76:7b:1e:63:28:64:70:c1:c4:08:2a:0c:83:bd: 12:03:f9:54:18:95:ab:35:95:10:08:15:76:da:ba: 3a:dc:af:80:fa:f8:95:6c:12:3f:13:91:4c:18:67: 28:65:08:1a:94:47:27:4b:eb:bd:d9:43:08:e8:90: 11:68:d0:df:4e:5e:85:32:15:6f:72:a7:21:41:b5: 8d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E6:B8:72:E0:1B:0F:7B:07:A5:72:85:4D:B6:20:45:94:3C:62:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:71:db:0f:c5:94:33:51:a1:da:cd:64:2e:4f:0e:36:4c:70: c2:66:f2:9f:a7:b2:a3:fc:07:8c:10:57:d1:01:ae:cf:ec:3f: 7b:6d:57:68:7d:45:56:b1:82:2b:e1:8f:b2:49:64:3e:24:76: 96:bb:e2:54:55:e7:9f:00:79:60:1a:b7:c8:86:42:7b:7b:e2: 9b:a9:9c:5a:8f:5f:90:c0:68:a6:a9:88:43:72:b6:c7:18:0a: c8:58:ad:e3:fe:c1:ef:37:d5:09:d2:57:21:5a:c2:71:3f:df: e7:70:33:c5:d5:05:65:91:a5:2b:72:c1:54:97:1f:19:e2:6a: 95:e8:fe:12:c1:80:71:96:c7:1f:fa:d5:7e:bb:05:3f:73:ea: 8a:1a:9d:56:c1:96:a3:3c:59:19:9c:4f:29:2e:b4:fb:94:4c: b6:5f:07:14:98:cd:e8:db:49:44:6a:b3:41:81:71:a9:f1:c8: d1:cf:11:b9:36:ba:91:09:a5:2a:e3:8b:10:65:a8:cd:b6:5e: db:82:5e:fb:1b:12:c2:f6:69:40:4c:7a:e1:2f:23:cd:15:ae: 13:63:77:94:15:05:37:c0:ab:66:6d:7d:e2:cc:35:86:3c:5a: cc:ae:9e:c3:71:79:b3:62:52:23:96:f8:6e:11:84:c4:af:8c: 84:1a:97:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUoK4U1RLmpSE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ODUxNmY0OTYtMTQwNi00MWFhLThjZTMtMGJlOTMzZjJmOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lubPfmVJuubr5+VeCefFypbmdvugerdr2LG aWSjuD1glGQ1nXOtNizN8UOvWCRpAMULPqrNTp2215akClNROxSnQq4Z0awRiBw3 CFXAC7eNgIXONfdsxYAp8hKvxsxFjMGWtXz52Bet2FrjobpBxzoNLJVbW6N7js5L wR3BvmpW9MQqt+R56zzkEIufm2/Qr9ZWSxPi0Qg9c6ZegrkrPUeFd5v9R7W/zvpo w0Sr3WFECtZZdnseYyhkcMHECCoMg70SA/lUGJWrNZUQCBV22ro63K+A+viVbBI/ E5FMGGcoZQgalEcnS+u92UMI6JARaNDfTl6FMhVvcqchQbWNUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLmuHLgGw97B6VyhU22IEWUPGLCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjFiZThhNTQtOWQxNS0z YmNmLWIzMjgtMDZlMWMyNjNkNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJx2w/FlDNRodrNZC5PDjZMcMJm8p+nsqP8B4wQV9EBrs/sP3ttV2h9 RVaxgivhj7JJZD4kdpa74lRV558AeWAat8iGQnt74pupnFqPX5DAaKapiENytscY CshYreP+we831QnSVyFawnE/3+dwM8XVBWWRpStywVSXHxniapXo/hLBgHGWxx/6 1X67BT9z6ooanVbBlqM8WRmcTykutPuUTLZfBxSYzejbSURqs0GBcanxyNHPEbk2 upEJpSrjixBlqM22XtuCXvsbEsL2aUBMeuEvI80VrhNjd5QVBTfAq2ZtfeLMNYY8 WsyunsNxebNiUiOW+G4RhMSvjIQal7Y= -----END CERTIFICATE-----Generated at Thu Mar 26 23:51:21 2026 by rpki-client