$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa File: 33db6407-ff15-3683-8991-2de945a25738.roa (raw, json) Hash identifier: CiQAWv044QHcb8+5JeqHm72TJzVbFHfq/KkOkRr+0TE= Subject key identifier: 23:19:A7:E5:EF:FB:CA:48:A8:2D:FB:C6:7E:86:68:60:25:59:4D:3B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A30486DFC0699546C1E00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 203 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:30:48:6d:fc:06:99:54:6c:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=ad9a7d6b-10b2-4efa-8512-85554cf50544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1f:3d:b2:23:aa:e9:75:da:2e:31:d0:97:85: 39:39:96:92:f6:fe:d8:ec:4b:ee:ab:53:98:cd:d4: ad:31:9f:7a:b0:32:f2:81:4e:d0:ca:da:d3:ca:c9: 5e:f9:83:30:9e:d4:6a:a7:35:6d:65:ef:93:58:64: 90:9c:06:81:78:cd:83:1f:b9:9a:04:93:ba:f7:e2: 30:b7:db:5b:a8:d8:8c:fc:8c:30:66:6d:72:a8:2f: 5e:40:ae:60:b9:ee:88:ae:a3:89:a2:13:cc:8f:f5: 98:d7:4e:2f:71:ec:3b:ca:4d:ba:90:8a:75:c1:82: 8d:cc:d2:4c:28:b5:02:1e:76:24:80:3d:24:01:56: 06:9e:32:17:a9:0e:71:3f:69:53:a2:78:20:43:ee: 2f:87:78:d4:7d:7f:bb:25:da:c5:16:94:98:a8:56: 92:e6:1f:ab:5c:f2:ea:28:c5:ce:e3:7e:c7:a0:4f: 8a:60:6a:eb:7b:e8:69:95:28:7b:7b:c1:0e:97:40: be:83:21:77:2c:4f:4e:bb:94:52:bb:08:bf:68:44: 7e:92:8f:2c:8a:df:ba:a0:a1:70:5b:73:f5:02:44: 09:bf:14:22:73:5e:8a:41:93:54:f4:2e:26:e0:6e: a8:1c:17:46:1b:d7:d6:3a:b8:ee:1d:d0:cd:52:07: 96:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:19:A7:E5:EF:FB:CA:48:A8:2D:FB:C6:7E:86:68:60:25:59:4D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:23:f0:2b:04:6a:fe:eb:f8:2d:92:12:ec:8b:32:b0:4e:45: c3:37:6d:6c:6a:5d:fa:29:c3:99:e1:a2:8e:11:14:3f:4d:ac: 07:29:06:57:4b:75:c1:34:5d:96:9c:34:e7:e6:f2:08:e1:ab: 65:be:34:a9:6b:37:1a:3f:cb:0b:96:9a:7c:56:81:d5:90:30: 37:18:b0:73:7b:21:e4:d4:be:78:8d:27:73:f4:b8:3b:83:f0: 4d:c6:f7:6e:45:78:49:4d:e7:c3:cc:81:3c:05:25:6b:b7:fc: 0c:3d:c7:55:ca:1d:be:ac:0c:dd:92:a6:58:c6:5f:53:2c:2b: f7:e6:08:ab:f8:41:10:9c:8c:3e:ef:d2:0f:97:cb:bb:6e:1e: ee:47:d9:b3:f1:22:2d:76:d4:3d:88:df:b7:3d:04:ed:c9:4b: 3d:eb:9f:fa:ba:5e:0b:42:9b:89:55:37:ee:58:01:07:48:ef: 70:59:9a:3f:43:d3:2f:0c:a0:23:2b:d3:77:66:c7:23:8f:b4: cc:4d:62:a5:6c:7b:b4:80:b5:db:d8:51:c7:f5:8c:62:78:bd: 33:91:be:ef:f1:76:fb:54:e2:c8:b4:7c:33:00:90:6a:cc:e6: 6d:04:0f:e3:4c:52:a6:4e:45:c2:b5:5c:a0:8b:1a:ad:d7:69: d3:20:ed:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ajBIbfwGmVRsHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YWQ5YTdkNmItMTBiMi00ZWZhLTg1MTItODU1NTRjZjUwNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR89siOq6XXaLjHQl4U5OZaS9v7Y7Evuq1OY zdStMZ96sDLygU7QytrTysle+YMwntRqpzVtZe+TWGSQnAaBeM2DH7maBJO69+Iw t9tbqNiM/IwwZm1yqC9eQK5gue6IrqOJohPMj/WY104vcew7yk26kIp1wYKNzNJM KLUCHnYkgD0kAVYGnjIXqQ5xP2lTonggQ+4vh3jUfX+7JdrFFpSYqFaS5h+rXPLq KMXO437HoE+KYGrre+hplSh7e8EOl0C+gyF3LE9Ou5RSuwi/aER+ko8sit+6oKFw W3P1AkQJvxQic16KQZNU9C4m4G6oHBdGG9fWOrjuHdDNUgeW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMZp+Xv+8pIqC37xn6GaGAlWU07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzNkYjY0MDctZmYxNS0z NjgzLTg5OTEtMmRlOTQ1YTI1NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsj8CsEav7r+C2SEuyLMrBORcM3bWxqXfopw5nhoo4RFD9NrAcpBldL dcE0XZacNOfm8gjhq2W+NKlrNxo/ywuWmnxWgdWQMDcYsHN7IeTUvniNJ3P0uDuD 8E3G925FeElN58PMgTwFJWu3/Aw9x1XKHb6sDN2SpljGX1MsK/fmCKv4QRCcjD7v 0g+Xy7tuHu5H2bPxIi121D2I37c9BO3JSz3rn/q6XgtCm4lVN+5YAQdI73BZmj9D 0y8MoCMr03dmxyOPtMxNYqVse7SAtdvYUcf1jGJ4vTORvu/xdvtU4si0fDMAkGrM 5m0ED+NMUqZORcK1XKCLGq3XadMg7QI= -----END CERTIFICATE-----Generated at Thu Mar 26 23:54:15 2026 by rpki-client